Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa
File:                     3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa (raw, json)
Hash identifier:          KsWHaJ7vdXHcYweiBw7WF5loPstR/Hj2nfarSdw48sQ=
Subject key identifier:   7F:B1:60:72:1E:16:CC:C7:4B:FF:09:20:51:10:46:D5:C4:83:55:3E
Certificate issuer:       /CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
Certificate serial:       3A39B8B2A12013B4BD6D357A5D3DD0A6611812D1
Authority key identifier: 0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa
Signing time:             Mon 06 Oct 2025 23:34:55 +0000
ROA not before:           Mon 06 Oct 2025 23:29:55 +0000
ROA not after:            Mon 05 Oct 2026 23:34:55 +0000
asID:                     262389
IP address blocks:        177.129.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl
                          rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:39:b8:b2:a1:20:13:b4:bd:6d:35:7a:5d:3d:d0:a6:61:18:12:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
        Validity
            Not Before: Oct  6 23:29:55 2025 GMT
            Not After : Oct  5 23:34:55 2026 GMT
        Subject: CN=7FB160721E16CCC74BFF0920511046D5C483553E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:98:76:e8:92:2c:14:f6:fc:20:ed:a8:0d:
                    c9:db:fa:b0:ec:09:76:ac:7f:48:6d:d9:ae:de:95:
                    71:a7:fa:2b:68:e9:60:27:f0:d8:b6:ef:34:09:da:
                    64:d6:73:96:f1:bf:61:c6:3f:52:ce:ef:58:b9:08:
                    33:bd:d6:af:7c:54:da:cb:c7:60:e6:4d:b7:53:73:
                    18:4f:57:fd:79:27:f3:01:f9:bd:4b:65:8e:6d:ee:
                    3a:9b:16:12:0d:e6:44:01:a0:fc:19:9f:fe:27:e9:
                    7e:ca:cf:ad:0e:55:90:03:5c:52:88:bd:ea:c6:a5:
                    98:8c:99:00:d2:5c:fb:b5:61:76:c8:80:1c:e5:29:
                    32:d6:70:12:32:8e:ac:2e:36:cd:d9:54:2c:fc:83:
                    29:a7:94:f3:7c:0a:d4:b7:e3:e9:fc:20:67:24:90:
                    8d:77:67:cd:a2:b5:8a:6f:82:37:37:4d:aa:0b:8b:
                    50:e2:66:4c:a0:4b:33:10:9b:ba:76:48:2e:ef:c3:
                    b6:6c:3b:9d:51:96:91:55:c8:aa:db:ba:0b:8b:c2:
                    9b:6a:6e:c2:8f:88:dd:3e:24:2a:88:0c:64:f6:1e:
                    cc:67:0e:a9:c3:57:38:30:18:3f:14:a7:43:3e:58:
                    f7:c6:66:c6:46:a6:2e:ae:64:2b:dc:38:50:24:c0:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B1:60:72:1E:16:CC:C7:4B:FF:09:20:51:10:46:D5:C4:83:55:3E
            X509v3 Authority Key Identifier:
                keyid:0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:08:62:9d:a1:56:a7:dd:9d:6a:e7:72:9e:a1:24:6b:03:
         13:0b:33:a8:c1:8c:c0:dc:c8:e0:cb:00:17:9f:e5:97:d7:26:
         0f:5c:6c:c4:a9:7b:7b:55:08:b5:43:e3:df:92:9a:7c:20:15:
         ce:4a:75:e2:ba:45:80:c9:6f:f4:12:52:0d:77:ea:a9:9d:55:
         65:a3:b6:26:bf:aa:df:7c:45:c6:58:ed:e7:b9:6f:f3:9b:e9:
         6b:35:69:ef:61:08:2a:d9:53:c5:4e:9d:64:c4:e5:e4:d4:00:
         41:a7:b4:f0:55:db:63:24:24:58:01:82:9a:5d:70:2c:c5:42:
         cd:de:ba:71:ab:6f:c2:87:0a:b2:e1:fa:2c:de:fc:88:9e:b7:
         b7:05:12:b4:10:f3:7a:09:cc:0f:40:d2:29:af:95:08:84:95:
         a2:df:0e:33:48:19:f6:ba:5d:15:d6:9c:ca:64:99:fa:47:fb:
         66:b0:06:31:ef:9e:6c:55:48:62:a0:be:1c:05:75:ea:05:1a:
         bb:ba:ac:b3:7c:ad:e5:97:1e:9a:c4:87:40:e8:b3:d7:d3:cf:
         ac:39:02:39:8b:8d:9c:ba:ba:7a:37:43:5d:8b:64:2f:51:bb:
         e6:bb:ee:c8:a1:a5:92:37:90:dd:2e:0c:eb:1e:cf:24:0c:28:
         68:7d:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:40:53 2025 by rpki-client