Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32342d3234203d3e20323632343835.roa
File:                     3137372e36362e322e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          CMGOG3sEh6TbdjGDJDst0LWU2s3ozVB2/V2zz1a4foU=
Subject key identifier:   16:7B:EE:11:9E:52:0A:B3:AE:C4:4D:84:05:16:9B:36:FB:08:96:87
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       573DAFCC10BE308114AD83F13939BD1A4F5A4E7D
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:38 +0000
ROA not before:           Sat 28 Jun 2025 21:28:38 +0000
ROA not after:            Sat 27 Jun 2026 21:33:38 +0000
asID:                     262485
IP address blocks:        177.66.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3d:af:cc:10:be:30:81:14:ad:83:f1:39:39:bd:1a:4f:5a:4e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:38 2025 GMT
            Not After : Jun 27 21:33:38 2026 GMT
        Subject: CN=167BEE119E520AB3AEC44D8405169B36FB089687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:42:27:f5:9a:aa:1b:14:d6:0e:0c:0a:cf:
                    18:5c:7b:54:b5:01:cb:e1:fc:d5:77:17:f9:2b:94:
                    0d:81:be:8b:a8:7c:bd:0f:34:9c:02:89:61:e7:cc:
                    ae:5a:76:78:01:13:e3:24:5b:5e:da:2c:df:41:e2:
                    e9:88:cf:93:ac:23:a0:9c:28:3b:f8:c5:2f:99:4a:
                    e9:31:d4:2f:31:1a:e7:6b:3f:a0:ce:33:12:4b:11:
                    48:ac:51:95:13:6b:1c:49:c1:d0:c3:19:0e:18:55:
                    46:bc:bc:7c:fa:53:f3:09:26:95:7c:61:c0:a7:64:
                    b8:6b:fc:ba:89:2c:5f:1b:eb:e7:c4:b6:38:36:7d:
                    6d:79:b9:c1:42:8f:07:ac:5e:a6:b6:93:7c:6b:99:
                    30:3a:28:b0:52:a1:11:19:43:cf:16:fc:44:f1:79:
                    93:b5:53:68:3e:db:a3:d1:5f:e7:f3:0a:53:a0:99:
                    84:ba:a6:09:75:b7:65:dc:91:18:4d:40:f7:2d:4f:
                    c9:27:a8:f1:2e:cd:6c:10:ba:38:b1:13:f9:ba:0b:
                    52:95:6e:d0:0a:31:d4:d4:bb:86:90:86:bb:dd:67:
                    b6:71:96:0f:41:36:cc:50:14:09:72:71:7c:35:b4:
                    32:d3:6c:39:e0:04:b6:f5:94:7a:d8:86:12:66:0a:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7B:EE:11:9E:52:0A:B3:AE:C4:4D:84:05:16:9B:36:FB:08:96:87
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:33:fd:54:ae:de:ee:26:00:f8:f6:b3:63:9a:70:74:9f:
         fa:c9:55:71:dd:c8:0b:9c:a5:c2:c5:18:6e:07:68:1c:7a:1c:
         91:b5:90:16:5a:0e:f1:35:ee:37:3e:bc:0e:9d:c0:c4:c9:48:
         6c:e9:c7:0d:c8:86:43:1f:3d:5b:b7:c3:2a:80:11:8a:47:49:
         92:c6:7f:f1:a1:a9:7d:ec:b8:9b:49:6f:7c:26:c9:71:c5:25:
         92:ed:bc:13:10:1f:b2:9c:9e:95:3c:3c:0f:5b:10:64:0c:85:
         0a:e6:5d:01:1b:f9:8a:83:8b:b0:b9:7e:f9:76:53:c4:d4:7f:
         75:aa:dd:7a:9f:ae:20:65:5e:3c:ae:54:79:14:37:72:22:d3:
         99:02:8d:9d:dd:26:16:6e:45:70:21:0c:87:3c:37:e2:6c:e7:
         e9:9e:6d:ea:26:a8:7d:85:85:3c:30:f1:dd:2e:a5:c8:33:13:
         ad:4e:ca:fa:c8:d9:2a:4f:c5:94:8e:39:5f:3c:21:82:7d:00:
         f0:bd:33:2d:02:d0:1d:2d:e2:76:03:25:f9:be:0d:3e:71:84:
         4a:62:d4:4f:0b:f9:41:33:06:7d:18:77:0a:9b:06:34:e0:de:
         b2:31:10:09:c3:27:87:dc:89:dd:0f:f1:1f:c4:c5:42:18:1b:
         56:78:03:d5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVz2vzBC+MIEUrYPxOTm9Gk9aTn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc3NEQwODZFMTBGMjlGNDJCNjk5Rjk5M0RFNDA2MUUw
RkRGODg2MjAeFw0yNTA2MjgyMTI4MzhaFw0yNjA2MjcyMTMzMzhaMDMxMTAvBgNV
BAMTKDE2N0JFRTExOUU1MjBBQjNBRUM0NEQ4NDA1MTY5QjM2RkIwODk2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjkIn9ZqqGxTWDgwKzxhce1S1
Acvh/NV3F/krlA2BvouofL0PNJwCiWHnzK5adngBE+MkW17aLN9B4umIz5OsI6Cc
KDv4xS+ZSukx1C8xGudrP6DOMxJLEUisUZUTaxxJwdDDGQ4YVUa8vHz6U/MJJpV8
YcCnZLhr/LqJLF8b6+fEtjg2fW15ucFCjwesXqa2k3xrmTA6KLBSoREZQ88W/ETx
eZO1U2g+26PRX+fzClOgmYS6pgl1t2XckRhNQPctT8knqPEuzWwQujixE/m6C1KV
btAKMdTUu4aQhrvdZ7Zxlg9BNsxQFAlycXw1tDLTbDngBLb1lHrYhhJmCimxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUFnvuEZ5SCrOuxE2EBRabNvsIlocwHwYDVR0j
BBgwFoAUR3TQhuEPKfQraZ+ZPeQGHg/fiGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMC80Nzc0RDA4NkUxMEYyOUY0MkI2OTlGOTkzREU0MDYxRTBGREY4ODYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NzREMDg2RTEwRjI5RjQy
QjY5OUY5OTNERTQwNjFFMEZERjg4NjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzAv
MzEzNzM3MmUzNjM2MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFCAjANBgkqhkiG9w0BAQsFAAOCAQEAfVgz/VSu3u4m
APj2s2OacHSf+slVcd3IC5ylwsUYbgdoHHockbWQFloO8TXuNz68Dp3AxMlIbOnH
DciGQx89W7fDKoARikdJksZ/8aGpfey4m0lvfCbJccUlku28ExAfspyelTw8D1sQ
ZAyFCuZdARv5ioOLsLl++XZTxNR/dardep+uIGVePK5UeRQ3ciLTmQKNnd0mFm5F
cCEMhzw34mzn6Z5t6iaofYWFPDDx3S6lyDMTrU7K+sjZKk/FlI45Xzwhgn0A8L0z
LQLQHS3idgMl+b4NPnGESmLUTwv5QTMGfRh3CpsGNODesjEQCcMnh9yJ3Q/xH8TF
QhgbVngD1Q==
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:44:15 2025 by rpki-client