Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139392e302f32342d3234203d3e20323632323837.roa
File:                     3137372e3135352e3139392e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier:          VWRVRuu1BlfRhRDllrKWbA/M0xY68Cw7VJevnquwWuc=
Subject key identifier:   CC:DD:A6:C9:1C:34:80:F0:AC:DB:7B:5C:97:4D:60:E1:D3:37:FA:10
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       10BCBFBF9DBAE40B04FD7E19CE8DFA9BFB87D9D7
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139392e302f32342d3234203d3e20323632323837.roa
Signing time:             Wed 02 Jul 2025 20:06:56 +0000
ROA not before:           Wed 02 Jul 2025 20:01:56 +0000
ROA not after:            Wed 01 Jul 2026 20:06:56 +0000
asID:                     262287
IP address blocks:        177.155.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 13:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bc:bf:bf:9d:ba:e4:0b:04:fd:7e:19:ce:8d:fa:9b:fb:87:d9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Jul  2 20:01:56 2025 GMT
            Not After : Jul  1 20:06:56 2026 GMT
        Subject: CN=CCDDA6C91C3480F0ACDB7B5C974D60E1D337FA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:62:bd:e1:c6:4c:26:94:81:e0:28:9a:9c:
                    d5:ba:64:42:6f:d8:06:d2:fe:80:fb:de:46:6c:c6:
                    19:a6:5a:8f:e7:1a:b3:ca:21:c7:4e:43:77:e5:3d:
                    94:17:d1:4b:24:e2:cd:a7:a5:2a:fc:1e:d1:a5:4d:
                    1f:81:ac:3d:43:a8:21:8d:b0:3f:5e:94:e4:66:ed:
                    fc:fb:db:dd:22:d4:17:71:5e:bc:91:2b:5f:5b:fc:
                    00:bd:69:ce:63:52:b1:35:bf:3e:a2:78:9a:da:6b:
                    d2:e2:26:e8:29:4f:64:c8:83:d4:e1:24:d0:ad:b4:
                    58:e8:30:6e:9c:01:4b:8c:de:76:77:4f:8a:66:70:
                    83:86:98:14:a0:56:74:92:3d:c0:e3:33:7a:72:2c:
                    d0:d3:63:e3:d3:02:de:60:92:72:aa:f2:01:9b:05:
                    45:76:5f:e7:4d:ef:f0:32:10:4b:36:cd:0f:83:c2:
                    5b:04:de:e1:b1:f4:d9:6c:d0:15:ac:20:48:d6:1f:
                    68:ca:88:49:14:b4:18:87:1e:c9:0d:3a:31:a9:15:
                    f0:5d:a2:0d:12:a5:2a:fe:91:0f:ee:05:e7:6d:9e:
                    9a:c5:12:a9:dc:a5:02:9b:86:28:a2:00:c9:91:08:
                    93:10:ac:f5:84:86:72:50:79:33:ff:30:d6:43:39:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DD:A6:C9:1C:34:80:F0:AC:DB:7B:5C:97:4D:60:E1:D3:37:FA:10
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139392e302f32342d3234203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:9d:61:74:b3:39:db:22:88:eb:9d:89:65:1e:8b:39:60:86:
         40:62:8c:d2:a0:47:06:b3:a4:1a:fa:7c:bb:e0:b6:e6:34:86:
         7a:cf:6c:3e:b8:af:1f:7b:27:ac:a7:e2:c5:9f:8e:97:13:ac:
         b8:0a:d7:4f:cb:7e:7f:9c:fd:a1:e1:a6:51:4a:4f:60:ea:92:
         b7:d6:04:c5:2d:81:e0:f8:1d:b0:ed:fd:73:5e:eb:47:6d:93:
         78:e3:88:45:53:74:63:6e:d1:39:bc:40:db:47:77:ed:a6:bd:
         8b:01:da:9f:23:a7:3a:53:10:e2:50:5d:69:ad:08:76:62:d7:
         e5:1c:86:0f:4d:c4:10:3b:75:ce:ce:12:ab:85:6b:03:57:19:
         90:a2:d4:65:f0:86:c2:05:fb:e6:95:10:c5:b5:fd:6b:94:2a:
         7c:7f:17:30:a3:66:33:78:91:15:d2:94:84:50:b2:c1:64:5c:
         9c:49:56:bb:bb:b4:24:57:59:a0:a2:c5:6d:15:36:88:4f:ff:
         0e:0c:a1:b5:e6:99:c9:c0:71:f8:e0:c5:a6:2b:02:7a:36:c8:
         6d:18:97:32:98:2a:04:93:ba:e1:ee:19:51:b4:20:c8:50:a0:
         fc:d6:b3:55:a9:0d:43:05:1f:d2:db:f9:d3:2f:e1:d3:b5:83:
         70:bb:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:34:44 2025 by rpki-client