Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3234382e302f32322d3332203d3e20313938393439.roa
File:                     3137372e382e3234382e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          iwwls3nmRbV3v0CuQsSQtv2nRnG3tQrxthPASWOQNs0=
Subject key identifier:   5F:D2:3D:E9:23:4C:DC:62:E0:C4:D1:03:A4:54:70:1F:BC:00:E5:BD
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       58D99104242D271CCE80C86CA7F6EC63E535AF6F
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3234382e302f32322d3332203d3e20313938393439.roa
Signing time:             Fri 22 Aug 2025 15:19:11 +0000
ROA not before:           Fri 22 Aug 2025 15:14:11 +0000
ROA not after:            Fri 21 Aug 2026 15:19:11 +0000
asID:                     198949
IP address blocks:        177.8.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d9:91:04:24:2d:27:1c:ce:80:c8:6c:a7:f6:ec:63:e5:35:af:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Aug 22 15:14:11 2025 GMT
            Not After : Aug 21 15:19:11 2026 GMT
        Subject: CN=5FD23DE9234CDC62E0C4D103A454701FBC00E5BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:f6:da:3e:99:b9:cc:57:48:0b:56:d9:6a:
                    fe:4e:4d:ab:b4:d7:aa:65:36:2c:f4:b5:df:b2:c0:
                    d3:be:2c:f2:72:38:37:fe:8f:12:f1:25:f7:53:9b:
                    44:cf:39:ad:78:68:ad:92:d0:40:11:c5:4c:f3:fc:
                    3b:e8:f0:08:fe:3a:34:17:86:4f:81:74:be:00:55:
                    99:24:63:59:2f:14:9f:75:31:9b:46:0b:da:48:cb:
                    3b:79:3d:14:c3:14:71:a2:70:14:39:4f:c0:ae:ae:
                    9f:cd:6a:09:86:01:ba:b2:76:e5:a7:bf:18:8d:07:
                    d9:47:f0:06:28:5f:4d:71:fd:8d:95:21:65:5d:8c:
                    4d:11:cd:7b:77:29:f7:7a:61:a5:93:33:d5:c9:f9:
                    60:44:aa:0d:93:e4:77:b7:31:c2:6b:75:c1:33:95:
                    41:bd:77:2e:fc:4e:86:6c:7b:f3:b9:70:45:db:14:
                    96:cd:a8:81:b6:28:96:8d:0a:8e:42:f9:1d:66:d0:
                    19:d4:34:a2:dd:85:06:4d:d1:92:5e:b8:2c:6b:a6:
                    54:a1:a5:cf:d0:f4:3f:ff:02:81:db:94:ad:06:32:
                    55:fc:5d:39:fc:2d:fb:a9:20:f2:5b:5b:86:43:94:
                    3c:72:e5:3a:b5:d0:11:8d:f5:88:37:e5:8d:23:cc:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D2:3D:E9:23:4C:DC:62:E0:C4:D1:03:A4:54:70:1F:BC:00:E5:BD
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3234382e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:6d:b3:d2:d6:58:f3:df:6c:2e:b8:52:7c:f7:7a:1f:88:dd:
         18:4d:eb:a2:4f:7e:1b:23:42:7f:c4:0d:10:14:75:48:2c:f5:
         5f:a7:4d:f4:b9:05:57:48:d1:d8:7a:fb:76:85:d1:6d:57:de:
         f3:62:e6:8d:e8:36:9c:3b:42:3d:1c:5c:e7:2e:b7:38:c4:bd:
         26:0d:57:34:85:c3:04:d7:42:33:98:1c:2d:dd:02:f3:07:ec:
         46:3d:89:4c:52:f0:82:d3:7b:70:56:04:3c:1a:1a:43:82:f7:
         01:8a:89:bd:47:b6:fa:4c:65:fa:aa:5c:07:1f:85:81:7d:db:
         3a:f4:dc:78:58:f1:92:8c:ed:8a:8d:3f:09:5d:5f:e1:89:18:
         de:3f:cd:55:3a:f7:bf:8d:11:0d:cf:7a:02:7e:42:1e:26:8e:
         30:85:96:12:7f:88:70:28:98:b1:4a:4f:4d:48:6b:8a:fb:e7:
         b7:12:55:62:af:30:bf:9b:30:10:cd:16:c3:05:89:ca:ce:44:
         f0:fe:5c:ba:5d:c0:42:a1:2a:24:bb:32:8c:63:d5:67:7f:45:
         01:de:6c:2d:00:ad:48:44:ff:fb:24:23:81:bc:0a:07:90:41:
         94:00:04:d2:fc:38:3c:63:67:77:a1:4f:5c:f8:31:e0:79:2e:
         80:85:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:49 2025 by rpki-client