Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3332203d3e20323633333930.roa
File:                     3137372e3232322e3137362e302f32302d3332203d3e20323633333930.roa (raw, json)
Hash identifier:          A/vxawwGdn9jdKDndN6oN+HWP2uioN/+Jq8bsbd+1P0=
Subject key identifier:   0A:14:07:13:89:EA:6C:85:35:7D:45:D2:2F:F8:AA:D9:30:2B:12:58
Certificate issuer:       /CN=815CD92DD5F19C6193766831C396FE65A0CF9E73
Certificate serial:       46AF66BA99EE34877F05C0E2D3C0CD9E14C1F787
Authority key identifier: 81:5C:D9:2D:D5:F1:9C:61:93:76:68:31:C3:96:FE:65:A0:CF:9E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3332203d3e20323633333930.roa
Signing time:             Sat 24 May 2025 16:12:51 +0000
ROA not before:           Sat 24 May 2025 16:07:51 +0000
ROA not after:            Sat 23 May 2026 16:12:51 +0000
asID:                     263390
IP address blocks:        177.222.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.crl
                          rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 08:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:af:66:ba:99:ee:34:87:7f:05:c0:e2:d3:c0:cd:9e:14:c1:f7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815CD92DD5F19C6193766831C396FE65A0CF9E73
        Validity
            Not Before: May 24 16:07:51 2025 GMT
            Not After : May 23 16:12:51 2026 GMT
        Subject: CN=0A14071389EA6C85357D45D22FF8AAD9302B1258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:1a:dd:c6:43:52:82:52:67:2b:17:a6:71:
                    72:19:f5:4e:3b:d8:d1:a2:18:dd:8c:60:02:ac:b8:
                    14:7b:82:de:6c:d0:7f:6f:5b:1f:d4:f3:d5:1d:67:
                    6b:24:78:f4:cd:37:de:9d:88:82:fa:50:81:ee:05:
                    36:d0:04:b9:d2:e5:a5:11:4d:39:6d:5e:ef:86:22:
                    f6:22:6a:ae:dc:56:20:bf:55:b1:6e:80:73:06:15:
                    20:29:f2:e6:89:bc:15:98:84:7f:93:d1:98:0a:d4:
                    55:58:85:fd:e8:2b:34:bb:6e:f2:92:f0:74:62:83:
                    b1:e5:84:2e:00:2a:97:23:b7:39:a6:cc:d3:f0:e4:
                    de:87:7b:20:27:47:a4:69:7d:ce:e1:3f:e5:a9:d9:
                    45:07:e2:4d:df:55:df:d1:18:8e:e3:88:db:37:ed:
                    60:68:de:7d:17:65:f7:c7:30:19:72:58:57:6b:8e:
                    ce:1a:16:a7:47:b2:ad:d3:47:1a:32:6e:cc:64:3f:
                    2d:00:07:a6:c9:82:9b:1d:17:19:c0:e5:da:a4:a1:
                    19:b7:c6:64:08:fb:98:a2:ea:78:06:e6:a8:f6:f3:
                    08:7b:c3:45:7e:3d:ad:04:01:1b:43:38:25:15:9a:
                    4a:18:16:b7:ed:82:5f:fb:c3:b7:2f:ff:9a:56:29:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:14:07:13:89:EA:6C:85:35:7D:45:D2:2F:F8:AA:D9:30:2B:12:58
            X509v3 Authority Key Identifier:
                keyid:81:5C:D9:2D:D5:F1:9C:61:93:76:68:31:C3:96:FE:65:A0:CF:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3332203d3e20323633333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b7:13:26:28:25:08:e3:86:3c:d2:54:e9:97:b3:6c:53:29:bd:
         b9:56:a4:ff:f1:38:a5:27:a7:6d:98:37:63:cd:ce:85:9d:e6:
         b9:f3:4c:79:02:b6:bf:fd:a0:ee:1e:6c:1a:5a:86:ae:88:a8:
         47:76:32:0a:da:fe:a2:2b:cd:e4:f9:7c:db:a3:98:96:23:cc:
         23:c7:43:0b:06:3b:2f:16:f9:95:2d:9c:6b:c5:69:a2:79:3e:
         e0:09:66:08:41:6c:fa:4d:a5:65:d8:35:f5:18:ea:48:a6:36:
         66:74:0d:ed:8e:27:f9:8f:ce:3f:b1:6c:8d:32:80:2a:f8:fa:
         29:6a:fb:81:2f:b2:78:a5:1f:e0:30:a4:70:45:c9:5b:14:9c:
         92:78:9b:f2:81:3f:72:66:d0:19:f9:cb:e1:1d:31:6b:41:5c:
         5f:18:c4:14:3c:3f:16:9e:32:d7:61:e5:9b:31:f0:6c:de:1f:
         ea:64:2e:f5:f5:f4:07:b8:7f:e2:6d:9b:0a:a1:62:2d:38:4d:
         e8:70:a0:40:8d:66:73:63:fa:b9:dc:61:ae:e6:7a:72:96:88:
         61:3f:02:a8:8a:ff:a7:60:ed:99:2d:97:60:5d:67:82:b9:e5:
         67:a2:da:4f:47:b3:38:35:b8:b2:c6:82:68:f7:8c:50:dc:cd:
         5a:b8:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:29:51 2025 by rpki-client