Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e3132352e3230302e302f32322d3332203d3e203238363439.roa
File:                     3137372e3132352e3230302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          wmxNZoa3PoyKcUZqZ/sJOrs0DQyxc/2RxD2eVSGD6vk=
Subject key identifier:   5A:E5:9F:F2:A4:37:EE:31:3C:FA:E4:C4:32:48:E5:5B:A4:2D:C9:EF
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       427D850762EF28A098C78DF499D95F19EA6CC3A3
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e3132352e3230302e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:16 +0000
ROA not before:           Fri 15 Aug 2025 20:26:16 +0000
ROA not after:            Fri 14 Aug 2026 20:31:16 +0000
asID:                     28649
IP address blocks:        177.125.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7d:85:07:62:ef:28:a0:98:c7:8d:f4:99:d9:5f:19:ea:6c:c3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:16 2025 GMT
            Not After : Aug 14 20:31:16 2026 GMT
        Subject: CN=5AE59FF2A437EE313CFAE4C43248E55BA42DC9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:57:25:4a:fb:cc:3f:8d:d1:33:26:ac:99:
                    83:6c:7f:07:79:96:db:fb:89:bf:a8:86:33:dd:de:
                    77:73:ca:24:90:a8:67:31:ac:87:ef:a0:a2:98:04:
                    9e:22:0d:15:a8:7a:73:2e:19:3c:76:04:80:46:13:
                    0a:c3:e0:5a:33:b5:b6:4a:ca:c5:6d:11:13:0c:40:
                    1a:dc:71:46:a9:a0:eb:7d:f1:34:76:55:b3:cd:2e:
                    cf:ef:cc:8a:4d:e2:a3:0f:f5:8a:14:f0:d3:8b:2c:
                    d1:8f:da:61:cb:3b:a6:49:03:37:00:6a:48:5b:49:
                    fd:03:13:35:03:38:6a:00:03:35:9d:aa:97:c6:e7:
                    86:e5:43:c9:a5:5b:2b:95:d6:58:a3:0e:f7:b0:f2:
                    30:27:48:cc:d5:f1:e3:08:9d:76:d8:2e:3f:74:7c:
                    b7:51:77:82:8f:4f:4d:64:f2:4a:68:6f:55:a1:8f:
                    18:21:ec:ce:f2:ba:7a:1d:e4:51:77:8d:fd:bd:78:
                    07:07:e5:34:f4:07:15:ce:07:9f:11:bc:df:5c:4a:
                    2b:47:e4:37:a1:38:74:99:75:25:dc:08:cc:15:fb:
                    87:27:f5:58:70:21:10:1c:d4:4b:e3:9e:75:a6:8c:
                    09:23:fc:09:04:0c:1a:d1:f3:cd:a6:fb:d0:1b:7d:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E5:9F:F2:A4:37:EE:31:3C:FA:E4:C4:32:48:E5:5B:A4:2D:C9:EF
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e3132352e3230302e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:3e:99:df:5e:89:37:11:3d:1c:68:5f:a5:30:57:91:73:f2:
         ef:f1:52:69:15:12:8e:14:f1:a9:fd:5b:ba:1d:86:92:4e:34:
         fb:b6:39:03:05:ad:62:f2:28:66:27:18:f0:25:12:55:16:df:
         c6:2a:13:55:fe:bd:88:cd:13:c0:38:58:79:85:a5:19:5e:15:
         0a:65:ef:6f:88:06:02:9f:0b:65:d9:03:c6:b6:2c:73:09:c9:
         29:40:dc:43:11:48:b8:4e:c5:c6:78:dd:d8:98:ca:71:fa:5c:
         29:9a:f4:03:5e:5d:27:20:a9:06:f4:90:2e:0e:87:01:c3:49:
         71:f8:80:36:73:75:97:5e:53:d8:87:2f:91:e1:60:f6:8c:82:
         f3:a8:4a:8f:97:76:1c:54:dc:69:b1:a3:5c:af:ee:df:3d:2a:
         c0:76:0b:e8:84:33:30:bb:1d:de:ac:d6:58:e6:81:fe:ab:42:
         5b:eb:47:46:98:2c:4a:c4:91:7b:62:46:e9:13:2c:c3:09:67:
         a7:23:2e:05:a3:f0:e6:b1:ea:f0:96:6d:95:ad:8f:1f:85:1c:
         00:c1:58:b2:3d:77:12:b9:23:9e:87:86:d3:7d:cf:80:6a:c7:
         c5:de:e3:39:99:6f:a1:b0:31:cb:e5:6a:19:ac:75:73:37:65:
         53:c1:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:24 2025 by rpki-client