Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/3137372e3138352e3135322e302f32312d3234203d3e20323633343139.roa
File:                     3137372e3138352e3135322e302f32312d3234203d3e20323633343139.roa (raw, json)
Hash identifier:          Uek3JTGzjZvUJodcB1F+yEOJo719BBnzNvO7w34Mx6I=
Subject key identifier:   5C:E8:7C:F1:6B:BF:D7:34:54:7A:03:83:18:00:D0:0A:5F:61:85:90
Certificate issuer:       /CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
Certificate serial:       65AC6773B0CA819C74784637DADD3135A813C625
Authority key identifier: 69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/3137372e3138352e3135322e302f32312d3234203d3e20323633343139.roa
Signing time:             Wed 07 May 2025 19:31:23 +0000
ROA not before:           Wed 07 May 2025 19:26:23 +0000
ROA not after:            Wed 06 May 2026 19:31:23 +0000
asID:                     263419
IP address blocks:        177.185.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl
                          rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 23:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ac:67:73:b0:ca:81:9c:74:78:46:37:da:dd:31:35:a8:13:c6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
        Validity
            Not Before: May  7 19:26:23 2025 GMT
            Not After : May  6 19:31:23 2026 GMT
        Subject: CN=5CE87CF16BBFD734547A03831800D00A5F618590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:f6:6b:3f:8c:ca:12:80:14:83:9f:ab:cf:
                    02:b2:c6:3d:34:01:0b:7a:8e:a5:03:77:a4:8e:14:
                    6b:50:be:cb:58:b8:55:db:4b:6f:e0:a4:1f:ef:1e:
                    c4:e3:e7:7f:99:fa:4a:c8:09:05:d6:6f:9b:8d:d9:
                    9b:35:b8:f8:a3:88:fb:2d:dc:70:97:09:f7:6c:d7:
                    d4:d3:ad:66:a7:b5:16:0b:ff:f2:f4:10:f6:5c:a6:
                    15:6f:c6:43:44:85:c4:57:80:5c:d8:e3:5f:b9:6d:
                    f4:9f:1e:70:b6:36:be:82:f9:31:5c:a9:c4:87:f9:
                    aa:a8:a5:2c:08:09:78:34:a7:65:8a:0f:b9:af:7f:
                    df:77:82:f6:66:4f:72:e8:08:d7:28:fa:68:ca:cf:
                    03:b2:dd:04:d9:c9:57:31:4d:eb:2d:36:e8:ab:8c:
                    b9:98:9b:fc:7f:28:75:81:fb:e3:8e:51:b4:f0:b9:
                    a2:ff:16:09:64:24:72:87:f2:45:06:4f:fc:2a:db:
                    45:02:f3:89:c3:0c:65:2f:27:ba:2a:16:ee:85:4e:
                    ad:e1:ae:cd:34:d8:07:05:6e:3c:ec:28:95:06:d6:
                    e1:83:b6:ea:f9:69:ae:98:9e:4f:0e:cc:bb:a9:54:
                    7b:12:c7:fe:a6:67:54:ae:c8:81:de:cc:d4:ff:8c:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E8:7C:F1:6B:BF:D7:34:54:7A:03:83:18:00:D0:0A:5F:61:85:90
            X509v3 Authority Key Identifier:
                keyid:69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/3137372e3138352e3135322e302f32312d3234203d3e20323633343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         be:18:06:4c:25:74:7e:38:05:10:2b:28:a4:87:27:64:a9:00:
         dd:c7:26:c7:b9:6e:53:16:b4:6e:f6:00:99:ff:5c:53:2c:ac:
         d6:9d:43:f7:78:98:33:5d:ff:0e:50:42:d1:b1:53:55:c7:09:
         b3:b1:90:96:5b:c9:f3:1f:98:40:72:84:66:8c:ed:6e:62:41:
         bb:0e:e1:fb:ae:a7:8e:8d:de:95:03:45:ed:81:8d:2a:01:36:
         78:d5:3c:17:1d:9b:c5:a4:41:14:79:25:6a:b8:30:bc:85:f4:
         9c:24:a4:1e:28:64:17:97:ab:6b:57:30:14:d5:04:14:b8:e7:
         3c:dc:09:c6:45:ba:ae:0d:bf:c5:46:1e:4a:20:61:48:7e:67:
         6f:90:13:41:90:40:4c:0e:c8:d3:c1:ff:43:4c:20:86:80:83:
         a9:83:d8:d4:d2:cc:cb:95:f0:dc:e1:53:2e:dd:c1:24:6b:db:
         4b:f1:c7:65:72:80:0a:b7:bd:d2:ea:dd:19:12:e9:43:02:ce:
         ad:13:fd:27:9a:71:27:32:25:60:1b:7e:a0:80:f6:c9:6e:f1:
         78:81:0f:fe:a0:a2:d8:0a:91:7f:6a:ad:4c:d4:ed:92:b6:c9:
         a5:c1:b2:94:08:1e:fc:e9:cd:4c:e2:1f:b2:66:2d:7e:f7:b4:
         23:f4:02:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZaxnc7DKgZx0eEY32t0xNagTxiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk0RTQ2N0FCMTcyNEE2QTkzMTE4QjRDRjRBNzc2RDA1
RUVCQ0NFMDAeFw0yNTA1MDcxOTI2MjNaFw0yNjA1MDYxOTMxMjNaMDMxMTAvBgNV
BAMTKDVDRTg3Q0YxNkJCRkQ3MzQ1NDdBMDM4MzE4MDBEMDBBNUY2MTg1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ufZrP4zKEoAUg5+rzwKyxj00
AQt6jqUDd6SOFGtQvstYuFXbS2/gpB/vHsTj53+Z+krICQXWb5uN2Zs1uPijiPst
3HCXCfds19TTrWantRYL//L0EPZcphVvxkNEhcRXgFzY41+5bfSfHnC2Nr6C+TFc
qcSH+aqopSwICXg0p2WKD7mvf993gvZmT3LoCNco+mjKzwOy3QTZyVcxTestNuir
jLmYm/x/KHWB++OOUbTwuaL/FglkJHKH8kUGT/wq20UC84nDDGUvJ7oqFu6FTq3h
rs002AcFbjzsKJUG1uGDtur5aa6Ynk8OzLupVHsSx/6mZ1SuyIHezNT/jGpVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXOh88Wu/1zRUegODGADQCl9hhZAwHwYDVR0j
BBgwFoAUaU5GerFySmqTEYtM9Kd20F7rzOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkNDRHdSOG9CVHB0MVo1Z2NONktKaDRyb1doUUVhYmZHeEg0N1RtZkx2
UlYvMC82OTRFNDY3QUIxNzI0QTZBOTMxMThCNENGNEE3NzZEMDVFRUJDQ0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NEU0NjdBQjE3MjRBNkE5
MzExOEI0Q0Y0QTc3NkQwNUVFQkNDRTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JDQ0R3UjhvQlRwdDFaNWdjTjZLSmg0cm9XaFFFYWJmR3hINDdUbWZMdlJWLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7G5mDANBgkqhkiG9w0BAQsFAAOCAQEAvhgG
TCV0fjgFECsopIcnZKkA3ccmx7luUxa0bvYAmf9cUyys1p1D93iYM13/DlBC0bFT
VccJs7GQllvJ8x+YQHKEZoztbmJBuw7h+66njo3elQNF7YGNKgE2eNU8Fx2bxaRB
FHklargwvIX0nCSkHihkF5era1cwFNUEFLjnPNwJxkW6rg2/xUYeSiBhSH5nb5AT
QZBATA7I08H/Q0wghoCDqYPY1NLMy5Xw3OFTLt3BJGvbS/HHZXKACre90urdGRLp
QwLOrRP9J5pxJzIlYBt+oID2yW7xeIEP/qCi2AqRf2qtTNTtkrbJpcGylAge/OnN
TOIfsmYtfve0I/QCpA==
-----END CERTIFICATE-----
Generated at Sun May 11 04:07:25 2025 by rpki-client