Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32332d3332203d3e203532363539.roa
File:                     3137372e36362e3137322e302f32332d3332203d3e203532363539.roa (raw, json)
Hash identifier:          fz34tYm1w68x9hj7i5IiV69MuqMW4GWeErt2Lgq/EGM=
Subject key identifier:   5F:1B:13:B4:88:BE:24:66:21:DC:0D:79:05:9F:0B:76:40:0B:73:4B
Certificate issuer:       /CN=F587850376B78E012ED02AD104B6287373707975
Certificate serial:       5B219597D49F11697414CCABAD62F81B5EF34641
Authority key identifier: F5:87:85:03:76:B7:8E:01:2E:D0:2A:D1:04:B6:28:73:73:70:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32332d3332203d3e203532363539.roa
Signing time:             Fri 05 Sep 2025 00:14:03 +0000
ROA not before:           Fri 05 Sep 2025 00:09:03 +0000
ROA not after:            Fri 04 Sep 2026 00:14:03 +0000
asID:                     52659
IP address blocks:        177.66.172.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.crl
                          rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:21:95:97:d4:9f:11:69:74:14:cc:ab:ad:62:f8:1b:5e:f3:46:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F587850376B78E012ED02AD104B6287373707975
        Validity
            Not Before: Sep  5 00:09:03 2025 GMT
            Not After : Sep  4 00:14:03 2026 GMT
        Subject: CN=5F1B13B488BE246621DC0D79059F0B76400B734B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:5a:9c:e9:db:fb:71:59:60:d4:0b:78:36:
                    ec:32:72:31:f9:07:76:99:f4:c2:55:49:cd:71:d8:
                    ce:a8:ad:5f:cb:d0:cc:7f:1c:f8:6e:69:4f:00:a8:
                    b4:ac:c5:83:c7:83:5f:88:ab:ab:c4:64:f7:41:18:
                    02:41:2e:67:a2:bb:6d:f6:b7:06:a1:a3:7e:2d:13:
                    82:36:f4:d7:36:65:76:7c:b7:e3:d8:1c:0a:b0:d2:
                    75:19:1a:65:85:f9:02:be:2e:d7:1e:13:ed:00:86:
                    6e:e1:db:f5:f6:bd:81:c9:ba:f2:a6:81:b2:71:a3:
                    ae:69:b6:8f:af:00:4b:a2:03:24:40:19:0e:3b:dd:
                    31:b9:02:73:c0:f9:0e:99:6c:10:5c:93:c6:1d:66:
                    c9:fc:0c:05:33:22:5f:8d:e5:41:61:9d:ff:c6:b9:
                    e9:05:f8:3b:8c:a8:d7:8d:96:27:99:38:88:3a:45:
                    0c:4d:1c:2e:c3:7c:fc:a8:71:13:82:9f:2b:41:a0:
                    ca:ad:54:92:46:da:f7:20:3c:b2:7b:5b:8e:c4:2f:
                    63:ee:06:7c:70:83:ea:d6:14:4c:ac:3e:98:39:ba:
                    30:7f:2a:05:ff:67:83:12:25:95:40:86:b7:8b:ea:
                    0b:93:f9:93:35:14:a1:54:18:92:24:e7:39:0d:64:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1B:13:B4:88:BE:24:66:21:DC:0D:79:05:9F:0B:76:40:0B:73:4B
            X509v3 Authority Key Identifier:
                keyid:F5:87:85:03:76:B7:8E:01:2E:D0:2A:D1:04:B6:28:73:73:70:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32332d3332203d3e203532363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:84:4b:4f:46:49:71:02:f6:24:a6:e2:af:6c:e7:01:bc:12:
         6a:8a:9c:a7:fb:13:83:7f:12:28:d6:f6:70:a2:6b:0c:75:4b:
         a8:a3:ae:a5:8d:96:08:ad:26:36:a0:18:0d:3d:94:82:4e:2e:
         b0:53:58:b7:ad:19:69:1d:07:0e:de:00:19:44:c4:24:75:ff:
         e1:ac:32:2f:ba:89:c9:df:b2:32:f3:d6:69:d7:ce:98:3b:90:
         bb:f6:ca:ba:44:e8:b6:c4:dd:47:92:a7:85:fc:d4:3f:5e:b2:
         0e:ac:94:4e:94:8f:7e:db:4d:ca:47:82:18:e0:87:9c:e2:0e:
         f7:47:16:ac:5a:f4:2f:20:52:8c:45:bd:bf:8e:d0:2d:33:fe:
         c3:20:a3:a9:e5:7f:65:ae:31:29:b9:fd:28:91:c7:47:b9:cb:
         d2:72:6b:53:86:d6:bf:1f:48:43:b3:cf:88:55:ba:2d:e2:f6:
         e1:80:b4:b6:85:bb:70:c3:89:3a:87:4c:05:46:28:3b:42:1c:
         68:0a:f1:c1:b6:73:9e:0f:91:1c:23:09:fa:06:9f:70:63:da:
         cf:41:dd:7a:68:97:79:db:99:6a:df:a1:70:3a:c4:8c:2e:30:
         6e:a2:ce:5b:58:fc:33:75:b2:0f:a6:56:69:b7:30:a5:33:97:
         37:11:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:19:53 2025 by rpki-client