Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130362e302f32332d3233203d3e20323632343434.roa
File:                     3137372e35322e3130362e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          LUcCuLgkQfynDr54voE5XmzjauIRTVAgj9In28j/wDY=
Subject key identifier:   70:EB:86:E9:97:4B:DB:2E:20:A5:0E:95:87:C3:E0:97:2A:60:64:29
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       656462594882B4B7641B7B2B4C25F53B427DB585
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130362e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:42 +0000
ROA not before:           Wed 09 Jul 2025 13:59:42 +0000
ROA not after:            Wed 08 Jul 2026 14:04:42 +0000
asID:                     262444
IP address blocks:        177.52.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:64:62:59:48:82:b4:b7:64:1b:7b:2b:4c:25:f5:3b:42:7d:b5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:42 2025 GMT
            Not After : Jul  8 14:04:42 2026 GMT
        Subject: CN=70EB86E9974BDB2E20A50E9587C3E0972A606429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:41:68:df:b9:63:06:e2:8b:98:e7:0d:b1:
                    38:fe:f6:2f:bb:e0:6b:c8:2b:51:50:e5:8d:55:86:
                    af:82:d0:55:27:06:11:b1:d9:81:ef:17:bf:89:72:
                    f0:1e:da:80:f5:6d:5c:e3:82:12:b4:db:45:41:1d:
                    b4:e3:a0:6d:97:3e:02:74:c6:fc:96:d3:4e:b8:ce:
                    71:8a:d7:c1:20:12:0a:63:87:16:7b:ab:82:55:dd:
                    90:bb:b7:e7:fd:4b:f3:b6:6f:09:00:a0:96:70:c9:
                    64:79:20:23:6f:d2:9f:32:3e:4b:bf:4e:63:65:e1:
                    82:d8:99:5f:70:0c:71:92:d7:d2:cf:78:e9:fb:88:
                    78:51:7f:77:e4:67:21:38:4b:a8:fc:47:70:fa:16:
                    85:11:9c:f6:73:c9:5a:24:c1:19:4a:c3:79:00:3c:
                    a1:56:12:1b:a7:61:5a:29:0d:2d:48:d9:90:da:40:
                    89:f8:75:40:a9:68:87:dc:22:4c:29:ca:4b:8f:b7:
                    ef:b8:6d:fc:b0:bb:36:c8:75:f7:4c:8b:e1:fa:bc:
                    ca:90:3b:f7:86:99:d2:34:19:81:cb:54:a1:23:3e:
                    a3:d4:36:0d:44:87:6c:2e:b5:90:8f:d9:8d:a6:9a:
                    16:68:28:10:6c:71:e3:81:15:86:ab:51:13:08:06:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:86:E9:97:4B:DB:2E:20:A5:0E:95:87:C3:E0:97:2A:60:64:29
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130362e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:1e:de:c3:cc:10:e3:70:d9:2a:81:97:0d:bd:10:49:b1:78:
         b8:0b:8d:5f:1f:3b:40:43:b8:c1:3a:42:fa:d0:c4:2b:c0:c0:
         1c:ca:07:a5:4f:67:26:cc:e7:1b:1a:d9:f1:ea:b8:00:02:68:
         ff:8f:91:c3:77:cc:47:9d:8f:c2:18:14:cf:e8:3a:9a:09:c4:
         59:96:30:69:4e:46:13:a4:05:77:d5:3a:0e:d0:68:7c:8b:d7:
         5b:46:be:bf:77:e3:78:20:be:87:07:76:55:8a:48:63:ce:f5:
         59:66:86:08:24:af:7c:82:bb:90:ad:5f:9c:bd:4d:a2:6f:ca:
         e9:ae:0d:e9:b5:ae:30:f5:4e:11:dd:93:32:0b:28:7d:fa:24:
         9f:69:c4:20:53:45:53:b0:5e:a8:64:64:d1:04:64:a4:29:53:
         aa:20:90:ce:38:60:4b:80:6e:9b:1c:8b:34:cf:c4:8b:e5:94:
         b6:72:84:df:9e:4e:e4:a3:9d:d2:9e:cc:f2:28:86:5f:c2:02:
         7a:4d:3e:fd:8d:07:e9:b1:cc:2d:6d:6f:c6:54:ca:69:0e:6e:
         36:fd:2c:d9:ac:3a:48:f3:ad:36:23:f6:0b:17:da:32:d7:af:
         a3:e4:ec:b6:0c:d3:29:63:a2:4f:24:41:b6:f2:b6:43:30:97:
         d3:35:db:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZWRiWUiCtLdkG3srTCX1O0J9tYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNTA3MDkxMzU5NDJaFw0yNjA3MDgxNDA0NDJaMDMxMTAvBgNV
BAMTKDcwRUI4NkU5OTc0QkRCMkUyMEE1MEU5NTg3QzNFMDk3MkE2MDY0MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfxUFo37ljBuKLmOcNsTj+9i+7
4GvIK1FQ5Y1Vhq+C0FUnBhGx2YHvF7+JcvAe2oD1bVzjghK020VBHbTjoG2XPgJ0
xvyW0064znGK18EgEgpjhxZ7q4JV3ZC7t+f9S/O2bwkAoJZwyWR5ICNv0p8yPku/
TmNl4YLYmV9wDHGS19LPeOn7iHhRf3fkZyE4S6j8R3D6FoURnPZzyVokwRlKw3kA
PKFWEhunYVopDS1I2ZDaQIn4dUCpaIfcIkwpykuPt++4bfywuzbIdfdMi+H6vMqQ
O/eGmdI0GYHLVKEjPqPUNg1Eh2wutZCP2Y2mmhZoKBBsceOBFYarURMIBs8RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcOuG6ZdL2y4gpQ6Vh8PglypgZCkwHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzEzNzM3MmUzNTMyMmUzMTMwMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxNGowDQYJKoZIhvcNAQELBQADggEBAKce3sPM
EONw2SqBlw29EEmxeLgLjV8fO0BDuME6QvrQxCvAwBzKB6VPZybM5xsa2fHquAAC
aP+PkcN3zEedj8IYFM/oOpoJxFmWMGlORhOkBXfVOg7QaHyL11tGvr9343ggvocH
dlWKSGPO9Vlmhggkr3yCu5CtX5y9TaJvyumuDem1rjD1ThHdkzILKH36JJ9pxCBT
RVOwXqhkZNEEZKQpU6ogkM44YEuAbpscizTPxIvllLZyhN+eTuSjndKezPIohl/C
AnpNPv2NB+mxzC1tb8ZUymkObjb9LNmsOkjzrTYj9gsX2jLXr6Pk7LYM0yljok8k
QbbytkMwl9M12/Y=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:03:43 2025 by rpki-client