Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32322d3234203d3e203532373830.roa
File:                     3137372e33392e3230342e302f32322d3234203d3e203532373830.roa (raw, json)
Hash identifier:          GDY3SGDV12iIgUV69vIanzPGHxZzC0jPJdypCKNaraQ=
Subject key identifier:   89:82:62:B9:E9:BA:7E:2D:F6:38:FE:66:02:81:42:C8:35:C5:C6:C5
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       586B34B7E74354C332EBF66F86925FC903C1C9D3
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32322d3234203d3e203532373830.roa
Signing time:             Mon 22 Sep 2025 19:35:34 +0000
ROA not before:           Mon 22 Sep 2025 19:30:34 +0000
ROA not after:            Mon 21 Sep 2026 19:35:34 +0000
asID:                     52780
IP address blocks:        177.39.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6b:34:b7:e7:43:54:c3:32:eb:f6:6f:86:92:5f:c9:03:c1:c9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Sep 22 19:30:34 2025 GMT
            Not After : Sep 21 19:35:34 2026 GMT
        Subject: CN=898262B9E9BA7E2DF638FE66028142C835C5C6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:68:38:52:c4:0c:cf:51:4f:44:13:dd:85:
                    a3:42:88:33:3d:65:f7:1a:e1:28:7d:88:1b:3a:fe:
                    7c:11:04:86:43:ca:87:2d:b9:1e:c1:d4:45:5d:73:
                    04:15:13:42:c0:77:9b:b0:b6:2d:b3:9b:52:00:96:
                    2f:c2:56:01:a4:67:81:cd:2a:ef:1b:ee:c0:91:b9:
                    94:7e:12:b5:80:69:07:09:5b:09:2e:fd:78:d1:fd:
                    5a:0d:5f:73:91:f0:b6:d9:5e:e0:6a:44:bb:27:a6:
                    80:b1:ae:26:06:34:8a:9d:89:1f:07:bf:06:8a:f8:
                    5e:b9:6a:8a:ef:d7:4f:3a:75:a3:7a:43:e3:17:25:
                    50:ee:33:d9:c6:8d:ac:89:2b:92:4d:ea:16:58:bf:
                    12:44:32:e5:f5:2a:42:e1:7d:9e:4a:bb:12:b6:38:
                    87:6b:07:6b:25:dc:44:25:eb:37:56:d5:c4:e1:4b:
                    84:4b:37:a0:88:74:6b:aa:0a:64:22:e3:6b:47:aa:
                    35:03:43:dd:ac:b9:ea:2d:5b:41:a7:8c:76:49:ee:
                    d7:9b:45:fe:4e:1f:43:c8:f3:bf:ee:a0:48:43:91:
                    01:57:ee:73:c0:69:b2:d6:4d:63:d2:fc:bf:a1:f6:
                    41:60:a4:92:8a:79:a2:e0:dd:b2:13:e2:51:a6:79:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:82:62:B9:E9:BA:7E:2D:F6:38:FE:66:02:81:42:C8:35:C5:C6:C5
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32322d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:80:c3:97:88:bf:93:9b:7b:15:23:cd:24:b4:1d:84:80:
         56:fb:2f:35:97:92:d4:f8:26:6f:e8:84:d7:57:de:92:13:90:
         70:fc:02:b5:25:27:7e:a5:1f:b5:c9:1a:ba:33:78:ed:45:d4:
         97:3e:1b:a4:1a:0a:d6:59:69:17:64:41:a5:50:7f:e9:d1:66:
         87:74:ac:6a:35:73:c7:f8:fa:2d:b4:b5:91:fc:c0:01:11:14:
         98:e0:e6:98:80:d7:85:54:4b:16:ac:f5:ad:fd:b0:1d:b1:b2:
         76:04:dc:28:96:27:eb:a6:44:c2:18:23:d5:79:f6:4f:7e:f9:
         64:51:6c:d8:94:a0:d1:67:79:36:b9:d1:e9:cc:6e:98:44:69:
         68:de:44:4a:f1:c1:b0:c2:ed:dd:7c:da:90:e2:cb:da:d5:02:
         6a:7b:11:b6:9a:2c:70:1d:4d:22:3c:34:e5:43:08:a8:2f:fd:
         e9:e9:9d:92:87:26:ef:e3:01:b5:1a:ba:ec:a3:5e:af:bf:f7:
         ba:18:b7:94:8a:9d:a3:08:83:bb:45:3b:91:a8:15:19:be:92:
         29:db:cc:33:2c:bd:59:be:3d:56:e5:1d:46:5c:92:33:0d:2c:
         7d:43:e5:ca:1a:3d:c1:f0:78:b6:b5:8a:47:58:e9:46:ae:b0:
         70:ad:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:19:50 2025 by rpki-client