Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34302e302f32322d3232203d3e203532353939.roa
File:                     3137372e3132342e34302e302f32322d3232203d3e203532353939.roa (raw, json)
Hash identifier:          FxlVEm3m4qeXc0OtbV8HDOAm2oavwhsvmVbVlwUyqsE=
Subject key identifier:   BB:62:29:B0:3A:05:97:35:C1:41:96:54:F1:A3:08:9C:67:8F:53:76
Certificate issuer:       /CN=6D102169D5ABEC492A8941C49951FD8013B1EBED
Certificate serial:       5D737211B00A5984D21645E09BC95542546A9B8B
Authority key identifier: 6D:10:21:69:D5:AB:EC:49:2A:89:41:C4:99:51:FD:80:13:B1:EB:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D102169D5ABEC492A8941C49951FD8013B1EBED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34302e302f32322d3232203d3e203532353939.roa
Signing time:             Fri 10 Oct 2025 21:37:05 +0000
ROA not before:           Fri 10 Oct 2025 21:32:05 +0000
ROA not after:            Fri 09 Oct 2026 21:37:05 +0000
asID:                     52599
IP address blocks:        177.124.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/6D102169D5ABEC492A8941C49951FD8013B1EBED.crl
                          rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/6D102169D5ABEC492A8941C49951FD8013B1EBED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D102169D5ABEC492A8941C49951FD8013B1EBED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:73:72:11:b0:0a:59:84:d2:16:45:e0:9b:c9:55:42:54:6a:9b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D102169D5ABEC492A8941C49951FD8013B1EBED
        Validity
            Not Before: Oct 10 21:32:05 2025 GMT
            Not After : Oct  9 21:37:05 2026 GMT
        Subject: CN=BB6229B03A059735C1419654F1A3089C678F5376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:1d:a9:ab:b3:03:71:49:3c:36:2d:16:bd:
                    44:08:c1:ce:ec:0d:50:6c:57:df:62:d5:8a:ca:5f:
                    22:6c:d6:2e:1c:e7:07:fa:fa:ad:4c:71:a1:24:1b:
                    12:85:ba:28:eb:d7:fb:d1:c9:c4:7a:ff:85:02:87:
                    54:07:0c:8a:04:9f:8a:9e:1f:59:15:91:2e:13:27:
                    0e:8b:09:11:58:74:f8:d9:d9:38:b5:1c:c0:bf:71:
                    00:bc:27:c4:37:63:bd:25:67:18:3f:9d:be:b8:aa:
                    5c:6f:35:0c:1f:10:b9:de:1f:41:48:a5:eb:c7:de:
                    7c:a0:a4:40:fc:b0:2d:59:e1:37:5a:80:66:c3:97:
                    13:58:14:cf:87:fe:d5:4b:0a:be:17:3f:42:1b:b5:
                    74:69:e3:42:81:a3:db:0f:d2:73:b3:21:4a:6e:42:
                    1e:b4:38:41:a8:38:30:0c:13:4d:41:bc:a8:e8:30:
                    fc:e0:70:a6:4a:42:5c:2e:62:43:44:76:82:5a:2e:
                    9b:3a:0f:e7:15:36:03:f1:5e:f2:95:b4:fc:9e:52:
                    f3:56:11:85:36:eb:a2:fc:8f:51:ef:2a:2d:3c:9f:
                    e2:85:95:4a:94:77:be:6f:a1:0a:bc:62:7d:bd:2b:
                    a1:02:84:e5:90:a1:fe:34:ca:4f:08:ee:63:7e:13:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:62:29:B0:3A:05:97:35:C1:41:96:54:F1:A3:08:9C:67:8F:53:76
            X509v3 Authority Key Identifier:
                keyid:6D:10:21:69:D5:AB:EC:49:2A:89:41:C4:99:51:FD:80:13:B1:EB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/6D102169D5ABEC492A8941C49951FD8013B1EBED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D102169D5ABEC492A8941C49951FD8013B1EBED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34302e302f32322d3232203d3e203532353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:c5:f4:50:4a:69:d7:44:0f:7f:da:48:e1:cc:59:d3:bb:
         59:5a:87:70:c7:9a:95:1e:80:6b:f7:e8:5e:e4:c1:1e:52:40:
         f3:35:10:5c:41:27:71:48:71:6a:9b:56:bc:23:c7:0f:04:d7:
         ea:77:d5:b2:33:fd:51:ff:20:33:2a:70:9a:ea:ec:12:e2:b4:
         3b:18:b1:b3:c3:91:c0:f0:de:02:a3:44:ab:8f:1d:1b:26:2a:
         89:22:6a:0e:49:6d:bd:9d:f5:fc:75:72:d9:16:36:96:1e:97:
         b1:92:6f:04:e6:d6:7d:9d:52:b8:9d:4a:2f:4f:de:c0:29:0a:
         b7:d8:76:6e:b6:e0:f7:a6:75:2f:3e:8b:f9:a3:f4:0a:68:ce:
         a6:b0:dd:27:f1:f4:0b:fc:71:d9:77:39:b0:05:3b:8e:59:e6:
         40:f1:d7:e9:34:a8:87:21:f0:bc:10:16:93:d1:e8:53:66:5d:
         64:72:30:a1:e6:25:12:6c:cb:25:cb:f4:41:ac:c5:3e:20:05:
         ec:a1:db:c5:88:57:70:0b:5c:02:49:30:2f:03:5a:52:71:58:
         d9:30:e0:d0:99:53:3b:83:ae:39:b8:7a:f9:c0:1e:29:62:8c:
         84:d6:95:74:71:b4:b3:93:2e:c1:da:2b:36:b8:40:00:9a:ec:
         2c:d0:d0:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXXNyEbAKWYTSFkXgm8lVQlRqm4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQxMDIxNjlENUFCRUM0OTJBODk0MUM0OTk1MUZEODAx
M0IxRUJFRDAeFw0yNTEwMTAyMTMyMDVaFw0yNjEwMDkyMTM3MDVaMDMxMTAvBgNV
BAMTKEJCNjIyOUIwM0EwNTk3MzVDMTQxOTY1NEYxQTMwODlDNjc4RjUzNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgB2pq7MDcUk8Ni0WvUQIwc7s
DVBsV99i1YrKXyJs1i4c5wf6+q1McaEkGxKFuijr1/vRycR6/4UCh1QHDIoEn4qe
H1kVkS4TJw6LCRFYdPjZ2Ti1HMC/cQC8J8Q3Y70lZxg/nb64qlxvNQwfELneH0FI
pevH3nygpED8sC1Z4TdagGbDlxNYFM+H/tVLCr4XP0IbtXRp40KBo9sP0nOzIUpu
Qh60OEGoODAME01BvKjoMPzgcKZKQlwuYkNEdoJaLps6D+cVNgPxXvKVtPyeUvNW
EYU266L8j1HvKi08n+KFlUqUd75voQq8Yn29K6EChOWQof40yk8I7mN+E7VDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUu2IpsDoFlzXBQZZU8aMInGePU3YwHwYDVR0j
BBgwFoAUbRAhadWr7EkqiUHEmVH9gBOx6+0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRteTVpdEpUVFVqYUJ6QktrTUhpRnlFZG5XOW9qYzVtbkNyenZSWWhW
bkEvMC82RDEwMjE2OUQ1QUJFQzQ5MkE4OTQxQzQ5OTUxRkQ4MDEzQjFFQkVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEMTAyMTY5RDVBQkVDNDky
QTg5NDFDNDk5NTFGRDgwMTNCMUVCRUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkbXk1aXRKVFRVamFCekJLa01IaUZ5RWRuVzlvamM1bW5Dcnp2UlloVm5BLzAv
MzEzNzM3MmUzMTMyMzQyZTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzUzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsXwoMA0GCSqGSIb3DQEBCwUAA4IBAQBaIsX0UEpp
10QPf9pI4cxZ07tZWodwx5qVHoBr9+he5MEeUkDzNRBcQSdxSHFqm1a8I8cPBNfq
d9WyM/1R/yAzKnCa6uwS4rQ7GLGzw5HA8N4Co0Srjx0bJiqJImoOSW29nfX8dXLZ
FjaWHpexkm8E5tZ9nVK4nUovT97AKQq32HZutuD3pnUvPov5o/QKaM6msN0n8fQL
/HHZdzmwBTuOWeZA8dfpNKiHIfC8EBaT0ehTZl1kcjCh5iUSbMsly/RBrMU+IAXs
odvFiFdwC1wCSTAvA1pScVjZMODQmVM7g645uHr5wB4pYoyE1pV0cbSzky7B2is2
uEAAmuws0NCp
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:49:53 2025 by rpki-client