Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3232203d3e20323632343835.roa
File:                     3137372e36362e302e302f32322d3232203d3e20323632343835.roa (raw, json)
Hash identifier:          jzzlWWwkUjY2eD9nyVrPCVYRvPzGKpdHPeKscrjqd8k=
Subject key identifier:   D2:55:0C:5D:BE:EA:EB:B6:82:38:E1:67:57:93:9F:9C:32:66:38:6D
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       6A2AB1AEC1DC5EF2E1DD8DF9868420FE40E0ADE4
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3232203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:37 +0000
ROA not before:           Sat 28 Jun 2025 21:28:37 +0000
ROA not after:            Sat 27 Jun 2026 21:33:37 +0000
asID:                     262485
IP address blocks:        177.66.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2a:b1:ae:c1:dc:5e:f2:e1:dd:8d:f9:86:84:20:fe:40:e0:ad:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:37 2025 GMT
            Not After : Jun 27 21:33:37 2026 GMT
        Subject: CN=D2550C5DBEEAEBB68238E16757939F9C3266386D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:2d:47:34:d1:5a:c6:82:7b:66:e0:74:a5:
                    58:eb:18:a2:bb:9f:d9:4a:f9:20:e3:d4:51:1b:2d:
                    3a:7a:95:94:c5:0c:b0:aa:92:5b:dc:f0:74:8e:9e:
                    b8:b0:ca:8b:4d:ee:8b:60:7c:d8:e2:35:c8:65:d5:
                    f9:25:fa:01:c9:03:4c:fa:59:62:be:f6:6d:3b:45:
                    3c:fe:d8:ff:05:c4:9a:9b:cf:12:10:66:5f:1d:ee:
                    fb:41:5e:48:85:94:9b:9a:73:ee:d4:ac:2e:47:57:
                    ce:b9:ca:f9:ab:c6:f9:54:c0:21:4f:d1:3b:eb:a6:
                    14:8b:f5:da:97:2e:cc:82:76:6c:3c:cd:9d:86:81:
                    28:a9:66:59:f8:e8:bc:b8:b5:a9:f9:68:3e:3b:15:
                    92:ea:b4:06:69:9d:cc:1b:27:b0:f9:14:b8:1f:0c:
                    50:4d:db:9a:26:65:4d:8e:0b:5e:78:45:21:c6:74:
                    41:8c:46:fa:a3:2f:d4:4b:25:bd:7a:ff:fb:7a:7d:
                    cb:94:96:da:df:12:45:51:6e:48:31:31:89:27:cf:
                    7f:9f:b5:cf:38:87:8f:9e:ce:fc:18:2e:41:0b:0f:
                    00:0e:26:bf:50:48:b4:2f:c6:d0:40:ca:3a:c5:5a:
                    1c:b4:e2:db:7d:7d:fa:c9:89:59:de:ed:cd:95:57:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:55:0C:5D:BE:EA:EB:B6:82:38:E1:67:57:93:9F:9C:32:66:38:6D
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3232203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:12:96:95:7d:a1:86:a5:92:92:36:30:ed:40:9d:02:98:a6:
         92:6a:9f:4e:f3:ea:bf:45:24:0d:ff:4a:47:6a:65:24:b3:fd:
         61:99:1d:0c:a4:7c:6b:23:8e:50:c4:29:91:87:b0:a9:f1:3b:
         64:bf:89:ab:79:7a:59:93:8a:d3:01:60:7f:ad:84:52:8b:ba:
         75:10:36:c6:e6:18:01:eb:c6:ee:2f:ee:61:0f:6b:aa:a6:52:
         18:99:72:9f:c3:8c:64:4d:0f:bf:46:1d:8c:94:24:b4:8f:82:
         5c:b2:5d:09:3d:b7:84:8d:fd:76:d3:40:30:28:24:33:dc:1a:
         af:14:1e:c4:11:18:b2:13:68:74:3a:2a:91:89:d9:7b:f9:c0:
         c9:ec:51:23:56:3d:5d:db:d1:86:b2:78:71:19:65:ee:ce:15:
         58:43:9e:72:9d:c9:08:2a:59:33:c4:ba:b7:9b:ac:30:4a:31:
         f1:82:8e:89:23:ca:3f:c3:56:35:fd:4b:ae:70:7f:96:a4:53:
         c1:6e:87:97:51:14:6f:08:b3:db:c3:03:cb:8b:87:b6:9a:d5:
         a2:69:fc:f9:14:e4:f1:0c:cd:9e:fe:74:69:18:b8:1e:69:b1:
         d4:66:42:85:0c:1d:d5:1e:15:0b:60:c7:23:1f:27:3a:1b:34:
         6b:ed:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:43:42 2025 by rpki-client