Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e3130322e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          pPh92A9MMbDy+PNYAelqRkCFBMk4TxjXs+Wv3jC0af0=
Subject key identifier:   64:D5:2A:60:77:B8:D0:6D:82:D9:98:D2:FC:8B:87:19:C6:2C:45:B4
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       1B486996301298A11F42C1B7FE174A0DC6893315
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 11 Oct 2025 14:03:03 +0000
ROA not before:           Sat 11 Oct 2025 13:58:03 +0000
ROA not after:            Sat 10 Oct 2026 14:03:03 +0000
asID:                     263347
IP address blocks:        177.23.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:48:69:96:30:12:98:a1:1f:42:c1:b7:fe:17:4a:0d:c6:89:33:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 11 13:58:03 2025 GMT
            Not After : Oct 10 14:03:03 2026 GMT
        Subject: CN=64D52A6077B8D06D82D998D2FC8B8719C62C45B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:c9:6f:e5:99:4f:8e:ea:53:ae:77:ae:35:
                    bb:c4:a7:80:99:84:72:56:5d:f3:1d:a5:36:77:f5:
                    38:a9:88:86:27:ef:9c:0f:5d:13:23:a9:fd:4f:3e:
                    cd:f7:37:c2:6b:d2:28:4a:2c:21:42:48:9d:98:fe:
                    67:1e:4a:6b:e0:0a:ae:61:45:b9:41:93:e3:a2:7b:
                    f3:dc:0d:5f:9f:5d:68:64:0b:25:92:9b:e2:7c:07:
                    4b:56:79:57:ac:3e:37:ee:f3:4d:85:b7:b5:25:d1:
                    84:9b:6b:5a:1d:8c:1a:6f:6f:38:61:31:32:5e:ed:
                    fc:8e:a7:9c:db:61:2f:f2:a9:57:7d:25:68:4b:25:
                    b4:2a:bc:3b:b3:1e:d9:70:10:8d:54:2d:ea:f5:52:
                    0b:09:33:44:63:5b:56:24:e9:1c:e0:21:14:48:4d:
                    96:e5:ae:9d:95:4a:f8:ef:97:d6:91:54:ec:b1:79:
                    d8:46:e2:64:55:fc:cb:44:66:56:7d:e6:f5:6d:f6:
                    73:16:f7:40:f5:36:50:ef:a9:f7:f0:71:b9:7b:03:
                    99:58:34:ee:64:38:80:99:66:8b:3c:5a:38:f4:7b:
                    84:7a:ac:e7:9b:47:1a:43:04:07:e5:64:5f:f0:24:
                    02:e0:2f:b4:44:52:45:9e:a5:41:79:70:d1:a0:0f:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D5:2A:60:77:B8:D0:6D:82:D9:98:D2:FC:8B:87:19:C6:2C:45:B4
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:7d:48:2f:3c:c3:84:d7:cc:81:cc:ae:45:68:06:75:eb:
         59:56:8f:1d:8d:f2:26:d5:84:5c:97:6d:7c:47:b8:56:82:08:
         5c:b0:b5:45:fd:46:b6:43:89:d6:a3:96:3e:77:54:ec:93:03:
         78:c9:24:17:52:ad:36:44:83:22:64:a1:af:33:9e:9b:0c:49:
         ef:30:22:d6:29:3f:58:4e:12:88:e1:df:55:0f:e5:1d:86:77:
         32:96:ec:1d:df:75:3e:1a:8d:5b:c7:c6:71:83:27:3a:56:6c:
         4c:bf:d9:90:8f:9d:a2:36:bf:dd:cb:3f:c4:d6:f7:37:7a:38:
         f2:63:ba:94:ae:87:94:6a:df:87:73:bf:dd:db:6b:34:ec:bc:
         82:92:ec:00:ba:03:66:30:43:33:b8:48:43:ae:4d:be:6c:e8:
         f1:b6:92:d7:98:d7:82:f7:8b:44:81:5e:81:d2:7d:60:a3:b2:
         05:14:26:02:62:44:de:dc:2a:d8:1b:7c:68:93:a3:d1:72:9c:
         26:a9:30:c0:e4:2b:bc:56:82:92:d3:13:12:4a:3e:a0:d0:94:
         cb:6f:64:6b:91:28:e5:91:76:36:cc:c7:76:72:be:b8:19:cb:
         db:f1:e4:ed:ae:53:6d:fe:0c:77:69:0c:d6:26:75:5a:d9:0e:
         36:07:0c:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG0hpljASmKEfQsG3/hdKDcaJMxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNTEwMTExMzU4MDNaFw0yNjEwMTAxNDAzMDNaMDMxMTAvBgNV
BAMTKDY0RDUyQTYwNzdCOEQwNkQ4MkQ5OThEMkZDOEI4NzE5QzYyQzQ1QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Nslv5ZlPjupTrneuNbvEp4CZ
hHJWXfMdpTZ39TipiIYn75wPXRMjqf1PPs33N8Jr0ihKLCFCSJ2Y/mceSmvgCq5h
RblBk+Oie/PcDV+fXWhkCyWSm+J8B0tWeVesPjfu802Ft7Ul0YSba1odjBpvbzhh
MTJe7fyOp5zbYS/yqVd9JWhLJbQqvDuzHtlwEI1ULer1UgsJM0RjW1Yk6RzgIRRI
TZblrp2VSvjvl9aRVOyxedhG4mRV/MtEZlZ95vVt9nMW90D1NlDvqffwcbl7A5lY
NO5kOICZZos8Wjj0e4R6rOebRxpDBAflZF/wJALgL7REUkWepUF5cNGgDxdDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZNUqYHe40G2C2ZjS/IuHGcYsRbQwHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzNzM3MmUzMjMzMmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxF2YwDQYJKoZIhvcNAQELBQADggEBAD3xfUgv
PMOE18yBzK5FaAZ161lWjx2N8ibVhFyXbXxHuFaCCFywtUX9RrZDidajlj53VOyT
A3jJJBdSrTZEgyJkoa8znpsMSe8wItYpP1hOEojh31UP5R2GdzKW7B3fdT4ajVvH
xnGDJzpWbEy/2ZCPnaI2v93LP8TW9zd6OPJjupSuh5Rq34dzv93bazTsvIKS7AC6
A2YwQzO4SEOuTb5s6PG2kteY14L3i0SBXoHSfWCjsgUUJgJiRN7cKtgbfGiTo9Fy
nCapMMDkK7xWgpLTExJKPqDQlMtvZGuRKOWRdjbMx3ZyvrgZy9vx5O2uU23+DHdp
DNYmdVrZDjYHDOo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:24:58 2025 by rpki-client