Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa
File:                     3137372e3132352e38302e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier:          M2Y2cjr2fS0svZBGMMYemgohL99Yyy/Wt0CWvTBhbmY=
Subject key identifier:   0B:11:F8:70:01:E0:78:9F:A7:12:B9:F3:FD:F3:D7:C0:BF:DB:B0:04
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       7F58040A8D89EC3B4D82A486E289FEC3789FFAFC
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:33 +0000
ROA not before:           Sat 02 Aug 2025 12:53:33 +0000
ROA not after:            Sat 01 Aug 2026 12:58:33 +0000
asID:                     28201
IP address blocks:        177.125.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:58:04:0a:8d:89:ec:3b:4d:82:a4:86:e2:89:fe:c3:78:9f:fa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:33 2025 GMT
            Not After : Aug  1 12:58:33 2026 GMT
        Subject: CN=0B11F87001E0789FA712B9F3FDF3D7C0BFDBB004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:77:68:6a:5d:50:ea:bf:2c:ee:ff:32:2d:
                    ef:ae:48:5e:44:a7:18:d1:af:09:07:0c:83:e9:4d:
                    a5:20:b9:11:30:11:c1:7b:d4:db:22:55:1b:fb:07:
                    a6:ca:35:27:ce:12:8f:7f:74:9a:92:a7:47:2c:ab:
                    f2:c3:8a:b5:1c:ec:94:34:70:74:7f:0c:1b:05:c2:
                    33:2b:c1:ea:97:9f:be:4e:0f:1c:ee:53:da:ea:60:
                    3a:52:07:d9:94:de:51:68:68:bf:4f:c3:65:04:75:
                    3f:69:41:ca:c6:b2:53:3e:b5:cd:4c:28:73:7b:96:
                    21:90:ce:0a:12:e2:c3:dc:04:6f:49:27:a8:83:e9:
                    64:f9:2a:8f:b0:56:33:19:04:1a:30:14:f2:aa:c9:
                    8b:f5:58:66:26:fd:f3:85:3f:8d:d0:d7:9a:e3:5b:
                    9d:0b:df:50:f8:58:fd:23:c9:d1:88:e7:19:15:1a:
                    78:f4:b2:33:95:2e:2f:87:1b:92:5c:37:23:3e:04:
                    bf:3c:f4:9f:7b:6a:3c:e5:5c:83:2f:3b:47:29:49:
                    77:74:66:8d:7d:4c:82:42:1f:06:2a:e4:38:8f:dd:
                    bf:fd:a0:a0:11:c4:68:61:6a:40:ea:9a:c9:4d:d6:
                    6e:7f:5a:40:98:cb:91:fc:3e:df:b3:58:da:2e:ea:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:11:F8:70:01:E0:78:9F:A7:12:B9:F3:FD:F3:D7:C0:BF:DB:B0:04
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:03:43:c3:44:33:61:94:ef:23:3b:a3:e7:08:86:5d:c5:
         ab:47:75:d7:6f:61:99:a2:f6:82:b0:b9:9a:f7:5c:3a:ad:4e:
         b3:76:ad:06:fa:4e:b3:55:33:93:90:d4:fb:cf:df:44:53:d1:
         1c:8d:1d:0d:f4:82:03:18:96:e6:74:8a:aa:c3:a2:53:84:e5:
         19:b2:d9:e4:c8:f1:71:fc:b4:84:f7:1b:ad:ff:25:52:92:a1:
         df:e7:c7:a0:5a:a3:bd:c6:5c:96:ee:c1:a8:57:54:4a:6e:72:
         d7:4d:ed:04:c7:f5:80:5c:eb:53:52:10:cd:8d:34:a7:4f:04:
         4e:86:37:23:b0:60:61:52:dc:64:7b:0e:32:a5:c5:71:99:20:
         44:f7:94:23:42:fd:42:d4:eb:87:e3:be:e1:38:02:a5:2b:4b:
         54:f0:0b:aa:31:4e:83:1a:73:5d:7b:f9:29:d1:17:18:92:8b:
         1b:29:c5:70:fd:53:a5:6b:bc:00:91:6c:c1:65:93:77:fc:26:
         df:a7:e4:5e:fc:4a:0e:69:e8:2f:4c:69:00:a1:ed:70:dd:3f:
         66:e8:32:d9:d1:78:e1:8c:ef:bf:c9:68:cc:1a:9d:62:0c:c1:
         2c:00:2b:ad:c6:b5:ba:16:8e:d7:ed:bc:05:ee:b5:63:d7:fd:
         51:82:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:43:23 2025 by rpki-client