Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa
File:                     3137372e3232312e37322e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier:          esb0+8VToCsZ4oIEatHsVC4O0qr8v44l8GZiFxpBoPE=
Subject key identifier:   ED:59:22:C7:E5:20:F6:E7:8D:5E:39:48:63:C2:EC:F3:5C:AC:19:16
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       1F7C5840E4CABC053171708E851F8E22B7477820
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:12 +0000
ROA not before:           Sat 02 Aug 2025 12:53:12 +0000
ROA not after:            Sat 01 Aug 2026 12:58:12 +0000
asID:                     28201
IP address blocks:        177.221.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7c:58:40:e4:ca:bc:05:31:71:70:8e:85:1f:8e:22:b7:47:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:12 2025 GMT
            Not After : Aug  1 12:58:12 2026 GMT
        Subject: CN=ED5922C7E520F6E78D5E394863C2ECF35CAC1916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:a4:b1:4a:06:b6:bf:bf:e9:0d:78:a6:7f:
                    c1:21:a2:2d:97:06:d0:72:76:40:69:e7:5b:1a:ed:
                    1b:52:34:18:64:dc:86:04:1d:46:9b:16:01:23:cd:
                    cf:d2:3e:41:3a:56:d6:ac:1b:92:56:3a:04:e0:bb:
                    0c:d5:3a:c9:7b:45:0c:33:52:7f:55:12:a2:22:49:
                    4f:18:a0:52:ee:bb:71:21:ad:64:81:ca:34:50:66:
                    52:17:20:10:8f:46:6d:06:df:29:13:d9:7d:84:49:
                    67:86:40:fc:38:0c:3a:e7:b4:a2:52:52:27:f0:41:
                    a3:e2:73:ff:8f:9d:33:c5:e1:29:79:b2:ee:3d:33:
                    27:db:ae:27:c9:2c:a5:31:8b:13:dd:3b:a9:f2:f0:
                    4e:6b:c1:12:36:49:0a:63:05:d6:db:c4:03:14:8b:
                    e6:77:b5:c9:e7:5b:d1:ac:b2:41:34:d3:56:e0:d8:
                    59:f5:eb:e9:9a:6a:0d:b9:46:cf:62:07:b4:b3:5f:
                    12:e1:0a:c1:11:d6:f1:5f:0e:3b:0e:4e:44:1e:fa:
                    61:76:46:4a:2e:c1:68:c8:61:4a:7d:e1:42:19:eb:
                    4f:86:d8:de:f2:af:49:31:11:94:ff:2d:4b:9f:a3:
                    dd:87:4c:2b:29:05:53:08:e0:57:8b:50:ab:ce:af:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:59:22:C7:E5:20:F6:E7:8D:5E:39:48:63:C2:EC:F3:5C:AC:19:16
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:12:d7:b5:26:49:02:56:4f:36:66:5d:7c:1b:59:36:ed:
         ab:2d:78:59:25:52:c4:09:34:f1:49:20:90:8e:c4:ed:95:a5:
         ff:8b:ef:3c:98:d8:d0:d2:c4:85:6c:f5:d3:a5:96:c6:71:92:
         3a:8a:9f:bd:a1:0e:86:e7:83:0b:ab:5d:77:90:65:1a:de:4f:
         e8:8d:01:d0:62:42:44:be:ee:48:c0:62:70:f4:9f:43:ae:9c:
         d8:60:fb:9f:ae:2b:69:68:d1:55:a1:42:00:c5:e8:eb:38:36:
         e6:9f:af:43:38:06:48:15:02:9b:d1:97:57:5c:c1:6d:de:dd:
         1e:41:cc:59:5e:ff:73:b3:65:6d:67:a6:0c:5e:2b:0d:ba:f5:
         6e:04:de:a4:2f:4f:2b:3e:d4:bd:96:09:41:03:27:a8:10:9c:
         6b:b4:73:52:cd:ff:04:d1:4b:8d:bc:8f:27:bb:c3:c1:71:a1:
         fe:1b:44:55:3b:36:b3:3f:81:29:41:60:63:6b:17:70:ec:c4:
         fc:8d:0d:3d:0d:d5:31:ab:21:97:e2:36:be:dd:03:be:e3:c3:
         ab:dc:6e:b0:43:70:7c:9a:db:fe:fa:3a:ce:b2:4a:c5:72:b5:
         55:89:20:70:6a:bc:c7:31:0e:d7:c6:9c:36:36:b1:f8:a6:0e:
         ff:c1:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:18:06 2025 by rpki-client