Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE4JzHtwVNGV5W43y4ses2Xe4d4EiQ5Uz2swjWNWJQvV/0/3137372e38342e32392e302f32342d3234203d3e20323734343633.roa
File:                     3137372e38342e32392e302f32342d3234203d3e20323734343633.roa (raw, json)
Hash identifier:          jt6yka4ImAAKFiDpmmC2TJ0q+cELeteu9ho6Kw6AA+M=
Subject key identifier:   D1:F0:83:8A:EB:A2:B2:F7:A9:22:72:45:2C:E1:4E:44:71:F1:4C:BB
Certificate issuer:       /CN=9F79D8433E623519CD16D2143C3379E3C8D6639F
Certificate serial:       3F5894112DB3938B8C2E14BC1ACF741227EA9377
Authority key identifier: 9F:79:D8:43:3E:62:35:19:CD:16:D2:14:3C:33:79:E3:C8:D6:63:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F79D8433E623519CD16D2143C3379E3C8D6639F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE4JzHtwVNGV5W43y4ses2Xe4d4EiQ5Uz2swjWNWJQvV/0/3137372e38342e32392e302f32342d3234203d3e20323734343633.roa
Signing time:             Fri 22 Aug 2025 19:54:49 +0000
ROA not before:           Fri 22 Aug 2025 19:49:49 +0000
ROA not after:            Fri 21 Aug 2026 19:54:49 +0000
asID:                     274463
IP address blocks:        177.84.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DE4JzHtwVNGV5W43y4ses2Xe4d4EiQ5Uz2swjWNWJQvV/0/9F79D8433E623519CD16D2143C3379E3C8D6639F.crl
                          rsync://rpki-repo.registro.br/repo/DE4JzHtwVNGV5W43y4ses2Xe4d4EiQ5Uz2swjWNWJQvV/0/9F79D8433E623519CD16D2143C3379E3C8D6639F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F79D8433E623519CD16D2143C3379E3C8D6639F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 16:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:58:94:11:2d:b3:93:8b:8c:2e:14:bc:1a:cf:74:12:27:ea:93:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F79D8433E623519CD16D2143C3379E3C8D6639F
        Validity
            Not Before: Aug 22 19:49:49 2025 GMT
            Not After : Aug 21 19:54:49 2026 GMT
        Subject: CN=D1F0838AEBA2B2F7A92272452CE14E4471F14CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:f9:e6:96:af:ce:77:bd:66:66:c9:fd:80:
                    9e:f5:11:84:9f:55:ad:15:59:8f:4d:fe:5f:74:22:
                    b6:61:79:95:5c:1b:96:89:99:7e:ee:28:ae:09:9b:
                    89:9d:82:e5:5e:17:3d:30:a9:96:38:b4:8b:db:e7:
                    41:9c:d0:25:61:2d:a6:64:b0:68:42:59:63:4e:22:
                    fa:b5:02:10:2e:11:3f:b3:f4:87:54:5a:15:c6:c9:
                    86:31:9f:09:eb:7f:5b:28:00:ec:71:49:e2:b9:83:
                    41:21:ab:35:69:c0:86:15:ba:b6:02:d0:f3:59:31:
                    fb:02:f1:7e:e3:5b:e2:53:26:b8:2a:ee:3b:11:0e:
                    88:94:21:c2:34:3b:21:7e:26:b6:ba:83:76:1e:e3:
                    c8:e7:0a:45:ba:a4:18:ca:cf:ae:c2:33:98:bc:c0:
                    53:83:de:6e:08:f6:8c:37:d6:d6:e2:cb:7a:41:64:
                    66:a7:ac:b2:bd:07:0d:26:2a:40:b1:7d:40:ef:2e:
                    d7:d5:c9:57:90:b0:47:20:7d:c5:36:80:cd:91:17:
                    3d:b6:f0:0e:72:01:08:04:39:f3:35:83:d3:90:60:
                    2b:dc:45:11:97:2e:47:7e:bf:67:fe:8d:f6:57:09:
                    71:07:64:69:65:83:1a:3e:74:77:fb:48:46:ba:2f:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F0:83:8A:EB:A2:B2:F7:A9:22:72:45:2C:E1:4E:44:71:F1:4C:BB
            X509v3 Authority Key Identifier:
                keyid:9F:79:D8:43:3E:62:35:19:CD:16:D2:14:3C:33:79:E3:C8:D6:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE4JzHtwVNGV5W43y4ses2Xe4d4EiQ5Uz2swjWNWJQvV/0/9F79D8433E623519CD16D2143C3379E3C8D6639F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F79D8433E623519CD16D2143C3379E3C8D6639F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE4JzHtwVNGV5W43y4ses2Xe4d4EiQ5Uz2swjWNWJQvV/0/3137372e38342e32392e302f32342d3234203d3e20323734343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:d5:fb:4a:96:b0:cc:be:09:e4:3f:fb:ab:50:23:6d:5b:d5:
         27:97:a0:f1:32:3a:0d:16:72:32:08:ad:4c:56:17:31:d5:e9:
         8c:eb:c3:74:b0:37:d1:09:39:c8:7d:f5:fe:d4:45:04:a0:9a:
         d1:81:0f:04:c3:dd:cd:99:e4:fa:3f:0a:c2:8f:a5:6e:38:6f:
         de:2b:03:af:64:1e:a7:da:00:9f:60:0f:cc:e8:21:18:28:66:
         dd:cd:9c:02:92:85:bb:fa:80:e4:46:5f:f8:a1:6c:16:90:04:
         e0:3b:28:8e:56:01:f7:13:bb:4c:4b:ca:1f:29:5e:29:d5:e4:
         1d:90:4a:35:c9:cd:fd:40:53:d6:49:5a:c7:38:90:a1:19:29:
         73:da:21:16:10:14:37:8f:ee:59:d8:84:66:86:33:72:e1:c0:
         52:53:cb:04:ea:72:a3:09:1a:65:32:01:2d:43:09:a9:0a:68:
         c6:1b:52:f1:fa:a1:c8:9d:ea:17:a9:e0:49:5e:d1:13:a9:7b:
         bc:7e:3f:bf:cd:9d:ba:a1:47:1b:e1:3e:e9:53:11:51:49:75:
         84:94:ee:3e:b4:df:9d:6b:5e:fd:84:4f:39:af:9c:58:51:73:
         8e:7d:ef:e7:eb:6c:18:69:9b:2b:80:54:1c:af:35:8c:67:25:
         20:00:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:35:24 2025 by rpki-client