Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          1C15ArpsghCWqRjUwKygT9aup/yy6Tzw/oBory9Scrs=
Subject key identifier:   86:B5:C1:23:7D:43:0B:81:F9:E9:0E:B7:79:27:89:06:F2:B7:A5:B9
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       244556FBA0E7F71366B97467CC6A7DF267C4F5BE
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
Signing time:             Wed 24 Sep 2025 15:27:11 +0000
ROA not before:           Wed 24 Sep 2025 15:22:11 +0000
ROA not after:            Wed 23 Sep 2026 15:27:11 +0000
asID:                     262393
IP address blocks:        177.190.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:45:56:fb:a0:e7:f7:13:66:b9:74:67:cc:6a:7d:f2:67:c4:f5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Sep 24 15:22:11 2025 GMT
            Not After : Sep 23 15:27:11 2026 GMT
        Subject: CN=86B5C1237D430B81F9E90EB779278906F2B7A5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:ce:18:71:14:72:e6:c6:3e:fa:78:d3:01:
                    d6:73:56:33:56:be:f4:4f:43:2e:9c:6b:e5:f7:75:
                    00:65:23:92:02:2d:81:c2:ac:72:24:69:2b:4e:d8:
                    b5:b3:9a:8d:a0:bc:38:03:09:03:e0:4b:fd:38:28:
                    1e:d6:5d:4c:b3:85:2f:0b:d4:a6:ff:20:6f:5a:14:
                    61:2c:1e:c3:cc:a2:bc:ec:76:f2:fe:c6:a1:d2:91:
                    27:f8:f5:5c:49:4a:6d:9f:74:d5:a6:1e:f0:14:dd:
                    08:e1:84:e1:a9:e0:a8:9a:53:84:4a:1c:fa:12:69:
                    83:43:ce:21:07:c1:e0:2b:53:c4:79:0b:31:f7:8c:
                    a8:94:fc:23:21:21:24:a1:51:9d:76:22:c5:59:bf:
                    05:b5:37:07:44:42:4d:35:01:3c:4f:40:37:da:f4:
                    02:fd:c9:7f:ae:6a:af:a0:e2:3b:1c:43:a2:9a:ca:
                    88:68:c0:e2:0c:ff:d0:62:9e:64:14:c9:53:5d:71:
                    9b:c2:72:40:d2:9a:7e:a0:53:d2:a5:86:43:3e:b8:
                    3b:16:f8:19:cd:4d:7e:1a:2a:e6:7c:ac:0c:9b:be:
                    2a:64:de:f0:d4:00:7c:2d:42:88:b7:d0:d7:5f:e0:
                    ca:1d:05:b3:fc:80:d9:59:c1:dd:8b:3e:83:27:e7:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B5:C1:23:7D:43:0B:81:F9:E9:0E:B7:79:27:89:06:F2:B7:A5:B9
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:86:56:3d:c0:1a:90:56:9d:b8:5c:56:00:b0:79:b1:5e:43:
         89:f5:25:45:32:97:e0:ed:eb:15:3c:1b:a7:7f:07:12:94:e4:
         af:3f:ba:2b:66:2e:3c:35:a7:98:65:13:4c:8f:a6:d0:f2:56:
         72:b9:10:34:1e:4f:38:31:66:d1:45:9e:00:a6:70:ab:93:0a:
         32:2e:6c:5d:e2:51:b3:d2:41:92:32:53:7c:c1:a5:3e:89:f0:
         9b:05:9c:2a:74:54:f7:59:5c:5b:1a:d0:0a:46:ca:a4:98:8e:
         31:79:f7:d7:ff:c0:e6:e9:82:f0:20:e5:cc:1f:61:50:a9:9d:
         88:aa:91:67:a0:b6:b1:57:b2:52:96:8d:7b:80:c2:a0:0a:97:
         84:ad:a0:40:4a:80:45:40:e4:a7:54:86:ed:ce:aa:63:71:aa:
         d6:ea:09:a5:2e:dc:cf:4a:02:ff:85:c1:1d:c0:89:f1:83:ff:
         ff:4f:c8:a3:58:b3:e3:7b:a4:d9:ae:bc:4e:8f:64:24:a3:7a:
         74:e9:78:2e:4b:a8:c8:24:71:46:e2:ae:58:d7:ec:d6:f7:b2:
         27:39:05:81:63:99:d0:1e:2b:e9:5c:ae:ef:af:30:ea:66:3e:
         a5:b5:86:e2:f0:54:37:a4:24:44:20:a7:9d:5f:49:5d:1b:bc:
         25:27:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:42 2025 by rpki-client