Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32312d3234203d3e20323634303936.roa
File:                     3230312e37372e382e302f32312d3234203d3e20323634303936.roa (raw, json)
Hash identifier:          fdwTgyx4g1hx/i1eTtjUyVfN5J84+fLooclHZQ0yEWk=
Subject key identifier:   A2:E4:17:AC:BC:A3:30:57:24:2C:A4:6D:11:1D:B7:59:5B:18:51:D8
Certificate issuer:       /CN=5DEB186CF64388E2EA129428AD0F6E42ED1F27D3
Certificate serial:       5CEC19587000C4C20F81C5DE4FBF68A36E8F602A
Authority key identifier: 5D:EB:18:6C:F6:43:88:E2:EA:12:94:28:AD:0F:6E:42:ED:1F:27:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32312d3234203d3e20323634303936.roa
Signing time:             Mon 30 Jun 2025 19:44:46 +0000
ROA not before:           Mon 30 Jun 2025 19:39:46 +0000
ROA not after:            Mon 29 Jun 2026 19:44:46 +0000
asID:                     264096
IP address blocks:        201.77.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.crl
                          rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ec:19:58:70:00:c4:c2:0f:81:c5:de:4f:bf:68:a3:6e:8f:60:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEB186CF64388E2EA129428AD0F6E42ED1F27D3
        Validity
            Not Before: Jun 30 19:39:46 2025 GMT
            Not After : Jun 29 19:44:46 2026 GMT
        Subject: CN=A2E417ACBCA33057242CA46D111DB7595B1851D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:27:89:11:70:53:e0:a4:2a:09:9d:3c:f1:
                    d7:40:71:92:7c:1f:81:e3:b4:7d:23:68:61:5c:c8:
                    77:15:e5:f2:d9:7d:8c:65:a0:fe:77:6d:10:ab:e6:
                    73:43:1e:16:04:41:67:4a:b4:8b:c9:ba:b6:bb:e5:
                    9e:c7:18:4e:78:72:70:92:b9:5c:ef:74:24:4b:4b:
                    9a:e9:57:53:6d:c0:e5:78:2d:d8:58:07:61:5d:60:
                    12:6c:50:28:72:cf:8b:33:d0:b9:05:b7:ec:c2:34:
                    1b:39:e5:94:71:12:b4:39:73:ed:ab:8b:23:36:9e:
                    72:3d:a9:e3:6f:47:91:a2:f4:08:a9:48:20:57:87:
                    1d:2a:2d:07:d3:d0:15:f5:60:55:02:b7:cd:cf:18:
                    fc:b3:71:71:fa:09:78:7a:53:c8:b1:8b:c2:98:6d:
                    a8:17:21:50:03:24:c3:0e:fb:e6:2d:58:1f:b7:99:
                    fc:48:25:83:ca:8e:93:82:29:7b:33:f4:29:18:f8:
                    86:2e:e9:6b:65:88:3a:cc:56:e9:28:1f:d4:1f:26:
                    bc:1d:96:c9:5d:60:d9:75:48:ca:66:9d:e3:04:26:
                    ef:08:cd:e9:09:f7:f0:18:08:6f:a6:8a:ba:e8:35:
                    ca:6a:74:dd:bf:1b:d7:64:67:d1:31:97:7b:c7:d4:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E4:17:AC:BC:A3:30:57:24:2C:A4:6D:11:1D:B7:59:5B:18:51:D8
            X509v3 Authority Key Identifier:
                keyid:5D:EB:18:6C:F6:43:88:E2:EA:12:94:28:AD:0F:6E:42:ED:1F:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32312d3234203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:5d:c1:a8:f0:ad:ae:91:29:c6:a5:7e:56:40:d8:73:f7:1a:
         44:df:76:00:09:5e:33:7f:b0:00:63:dd:31:eb:da:f0:00:7b:
         fb:df:c0:1b:1a:49:9d:25:3b:58:df:7d:ff:d6:99:b2:b3:15:
         5a:f4:42:85:79:61:2f:2d:35:ff:b1:09:18:05:94:ee:97:fc:
         43:c1:87:e8:c0:1f:1d:23:a4:71:d9:17:be:d4:8d:fa:8d:47:
         0c:14:fa:3b:ae:74:af:57:37:3e:ed:99:12:d3:45:1f:a2:63:
         cc:d6:f1:ee:57:07:18:80:68:d5:13:1b:9b:7f:03:bb:2d:95:
         3e:0b:36:c0:b3:7d:15:e0:c9:05:c5:ee:cc:5c:e5:01:7f:52:
         89:d0:60:9f:0a:e3:4f:a9:a2:73:44:9c:b5:e2:23:42:13:ff:
         5d:a6:ed:00:a6:e2:6a:45:71:dd:5d:9e:15:34:3f:fe:79:33:
         32:3a:38:e8:f9:09:62:fe:50:8f:b4:69:75:ba:25:0c:28:ee:
         bc:1c:71:8e:83:56:44:ce:22:cf:49:ac:80:d9:87:cd:40:dc:
         1c:ef:81:4e:0a:80:d5:fb:b8:af:1f:64:c4:16:30:fa:d0:24:
         e6:aa:be:f5:b9:a2:97:ae:6a:f0:02:a8:79:a1:d8:2b:7f:46:
         fe:2a:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 09:47:37 2025 by rpki-client