Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa
File:                     3137372e32332e3139322e302f32312d3234203d3e203238313538.roa (raw, json)
Hash identifier:          wTBBuTuMwZO3d7GA/SKJ7USDqiEPzSpHXxASCeabKxc=
Subject key identifier:   4D:49:4D:35:6A:06:76:E3:21:06:EE:F3:D5:A6:14:2E:11:DE:F5:B8
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       0C026B93E773F770D7A855ED90A0E5A35D16116C
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     28158
IP address blocks:        177.23.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 20:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:02:6b:93:e7:73:f7:70:d7:a8:55:ed:90:a0:e5:a3:5d:16:11:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=4D494D356A0676E32106EEF3D5A6142E11DEF5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:d2:1f:fa:01:e4:24:68:d8:83:46:50:9a:
                    a3:6c:65:f7:e7:2c:15:11:ea:ea:c7:15:88:d7:6a:
                    1d:88:fd:40:a5:65:29:5a:c5:2d:3a:a3:56:25:98:
                    bf:e6:1b:9d:8c:f8:92:72:eb:db:84:40:61:a2:f5:
                    5d:7d:75:c3:40:dc:fb:a2:41:d6:d6:26:0d:99:6e:
                    51:76:19:c9:7c:74:73:45:9d:c7:77:f6:cb:64:2e:
                    3b:b3:9b:f8:7b:8f:90:42:a7:c5:bc:3b:a0:2e:78:
                    74:42:11:e0:74:ac:3b:93:d7:d2:9e:2c:da:03:f0:
                    e8:77:c7:ce:af:3d:14:03:51:31:44:e8:e3:94:bf:
                    e9:31:f9:ba:b0:12:68:04:5b:8d:52:e2:39:ed:ac:
                    19:70:f1:81:a7:32:3f:92:a8:b3:5f:f1:2f:b5:23:
                    cd:36:b3:4b:c7:4a:e3:0b:30:60:e3:13:14:66:f3:
                    92:43:92:01:6a:37:48:b0:b3:78:4e:27:e9:7b:56:
                    1a:60:e7:56:d8:b7:d5:eb:5d:36:34:17:81:ae:f6:
                    b2:0f:72:1e:b0:94:60:2e:cc:76:05:ec:4b:63:55:
                    13:34:b9:cc:76:d9:9e:0c:0f:4c:bb:35:ec:df:9c:
                    ef:e8:1a:bc:c5:8c:25:d3:45:54:67:e4:38:44:f2:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:49:4D:35:6A:06:76:E3:21:06:EE:F3:D5:A6:14:2E:11:DE:F5:B8
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:2f:da:db:7d:60:93:93:88:37:cb:b1:e4:b4:be:4d:5f:81:
         6e:a5:c2:33:77:e6:e4:04:c8:d2:bc:87:80:d3:86:a2:92:be:
         2d:07:e1:e8:41:a0:c1:49:ed:c1:db:0b:ef:a3:9b:1e:16:d6:
         96:a5:c1:9b:07:cc:bd:54:d7:8f:ef:49:95:0c:cd:91:3f:86:
         0e:9a:0d:e1:79:f8:f0:d9:8b:88:27:86:e4:86:a8:c6:c3:26:
         aa:fa:65:d7:fe:58:ab:38:65:00:2d:7d:41:a4:1e:1d:54:72:
         b4:1c:dd:58:05:31:60:03:a0:15:d6:5d:43:ea:f5:52:c6:d0:
         c4:49:ba:aa:35:41:dc:ed:bc:cf:25:03:31:d7:58:e2:85:d2:
         71:64:6c:46:52:5d:c4:09:6b:f9:09:06:e0:72:be:ba:2f:6c:
         50:70:39:d9:67:a5:50:ff:15:5b:6a:51:c2:05:52:39:e9:92:
         ad:ba:e0:e3:29:11:53:58:44:77:89:fa:65:8e:01:83:d9:b3:
         2f:79:6a:7e:54:cb:fa:21:a1:eb:c3:7d:86:d7:44:eb:47:16:
         76:d2:3f:2a:66:0f:4c:1a:8e:06:81:46:21:85:62:d5:de:29:
         fb:5d:21:10:b6:69:b8:21:53:3d:88:62:a4:00:f1:9c:a6:7f:
         a7:73:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:02:39 2025 by rpki-client