Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138332e302f32342d3234203d3e203532393233.roa
File:                     3137372e3138342e3138332e302f32342d3234203d3e203532393233.roa (raw, json)
Hash identifier:          XxYvhV0Nxig+oz+bWXbMEe7YTY9r9oOnbM2o1AeUebA=
Subject key identifier:   39:53:31:CE:98:24:C9:2C:AC:6A:9A:D2:6A:1E:94:22:FE:C9:EB:D0
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       7899478A5040D48C70C6A4EDE6DE887DF4511C
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138332e302f32342d3234203d3e203532393233.roa
Signing time:             Mon 29 Sep 2025 17:26:23 +0000
ROA not before:           Mon 29 Sep 2025 17:21:23 +0000
ROA not after:            Mon 28 Sep 2026 17:26:23 +0000
asID:                     52923
IP address blocks:        177.184.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:99:47:8a:50:40:d4:8c:70:c6:a4:ed:e6:de:88:7d:f4:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Sep 29 17:21:23 2025 GMT
            Not After : Sep 28 17:26:23 2026 GMT
        Subject: CN=395331CE9824C92CAC6A9AD26A1E9422FEC9EBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:48:a2:f5:f3:d5:db:45:15:27:25:0a:a6:
                    a7:7d:15:a5:61:49:5d:36:80:64:fd:74:90:a3:6e:
                    02:40:ed:fb:54:b8:be:a1:25:8f:04:fa:aa:3b:ab:
                    ea:a4:e1:6b:ea:41:5c:4a:02:e1:2c:4e:14:e4:e7:
                    e0:d1:66:fc:ba:bb:e0:0b:ee:08:69:e2:f0:b9:b8:
                    8c:dc:5f:37:f1:99:26:9a:24:f2:51:48:0d:02:85:
                    46:9f:61:31:7d:81:7c:3b:2a:d0:2e:32:56:9c:cd:
                    72:51:ec:83:8a:2f:d5:f7:53:1c:09:33:af:86:2e:
                    45:ed:22:95:41:cc:56:c4:8c:a5:12:e3:a3:e5:8e:
                    ff:bc:5c:a4:60:58:02:a7:e4:15:40:70:f1:00:2c:
                    57:01:12:6f:26:0e:5b:c3:34:7e:92:02:e1:12:d4:
                    9e:df:ad:d8:c6:8f:f3:46:f2:5e:dc:ee:b4:b6:cf:
                    46:a1:3d:7c:96:0a:80:7b:87:ed:23:28:d7:70:63:
                    38:36:18:53:04:05:93:b2:68:e7:73:a2:9c:8b:af:
                    99:b5:11:5a:62:72:a3:34:44:72:28:5f:09:60:94:
                    47:a1:fd:4b:79:dc:35:ee:c3:eb:fa:34:be:ac:5c:
                    4b:7d:9a:51:51:de:4b:9e:0c:7c:37:b9:f8:db:9c:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:31:CE:98:24:C9:2C:AC:6A:9A:D2:6A:1E:94:22:FE:C9:EB:D0
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138332e302f32342d3234203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:c4:84:75:90:9a:6c:9e:28:1a:74:88:29:41:bd:17:f8:
         f5:63:32:7a:d8:49:6e:da:6e:f6:51:94:d2:0b:77:6e:4d:59:
         9d:4b:37:28:49:c5:33:c0:4c:c8:1c:af:a8:cd:43:81:e4:dc:
         fe:f0:24:e3:1a:82:a1:95:73:fb:57:c3:e5:6e:24:6b:a0:cb:
         a7:de:17:fb:b7:76:eb:da:84:43:6d:5c:53:19:53:f1:bd:68:
         c9:4e:f0:8a:73:5e:3a:8e:da:c9:b1:fc:63:87:a2:11:50:44:
         e6:41:15:2a:c9:41:d0:90:27:9a:a5:00:54:7e:e9:aa:c0:6a:
         80:cf:63:9a:33:11:ee:78:7e:3e:25:ae:3f:d4:44:24:42:a3:
         b3:fb:3f:79:a3:7e:46:60:49:30:81:04:86:95:be:11:bb:4f:
         e3:d1:61:72:e1:e0:47:34:92:82:3d:1e:a3:67:0b:95:ef:64:
         3f:28:e9:d9:af:e5:6b:d6:95:ed:9f:ef:37:88:3a:cc:c6:eb:
         4e:36:44:82:e6:7e:b4:8d:91:8a:8d:3f:25:24:29:02:30:71:
         83:03:a7:4c:e8:88:23:80:92:39:8d:75:2c:77:3c:9f:7f:d9:
         35:0e:44:c4:f0:3c:bd:a4:69:d9:e4:32:ee:d3:b2:72:8f:51:
         e0:9f:d5:5c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITeJlHilBA1IxwxqTt5t6IffRRHDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2MjRCODM0NEE1NDI3NjdEODhGNUI1NDRCM0VBMjFEQURD
OEVBMUM4MB4XDTI1MDkyOTE3MjEyM1oXDTI2MDkyODE3MjYyM1owMzExMC8GA1UE
AxMoMzk1MzMxQ0U5ODI0QzkyQ0FDNkE5QUQyNkExRTk0MjJGRUM5RUJEMDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHoSKL189XbRRUnJQqmp30VpWFJ
XTaAZP10kKNuAkDt+1S4vqEljwT6qjur6qTha+pBXEoC4SxOFOTn4NFm/Lq74Avu
CGni8Lm4jNxfN/GZJpok8lFIDQKFRp9hMX2BfDsq0C4yVpzNclHsg4ov1fdTHAkz
r4YuRe0ilUHMVsSMpRLjo+WO/7xcpGBYAqfkFUBw8QAsVwESbyYOW8M0fpIC4RLU
nt+t2MaP80byXtzutLbPRqE9fJYKgHuH7SMo13BjODYYUwQFk7Jo53OinIuvmbUR
WmJyozREcihfCWCUR6H9S3ncNe7D6/o0vqxcS32aUVHeS54MfDe5+NucPEMCAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBQ5UzHOmCTJLKxqmtJqHpQi/snr0DAfBgNVHSME
GDAWgBRiS4NEpUJ2fYj1tUSz6iHa3I6hyDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GZlNNOFlXY1dLV1NmdFFFUmdmOU1ZVjJFUUR2ZjZvSzNOaHJBb2JRdEs1
Sy8wLzYyNEI4MzQ0QTU0Mjc2N0Q4OEY1QjU0NEIzRUEyMURBREM4RUExQzguY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjI0QjgzNDRBNTQyNzY3RDg4
RjVCNTQ0QjNFQTIxREFEQzhFQTFDOC5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmZTTThZV2NXS1dTZnRRRVJnZjlNWVYyRVFEdmY2b0szTmhyQW9iUXRLNUsvMC8z
MTM3MzcyZTMxMzgzNDJlMzEzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUz
MjM5MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALG4tzANBgkqhkiG9w0BAQsFAAOCAQEAA57EhHWQ
mmyeKBp0iClBvRf49WMyethJbtpu9lGU0gt3bk1ZnUs3KEnFM8BMyByvqM1DgeTc
/vAk4xqCoZVz+1fD5W4ka6DLp94X+7d269qEQ21cUxlT8b1oyU7winNeOo7aybH8
Y4eiEVBE5kEVKslB0JAnmqUAVH7pqsBqgM9jmjMR7nh+PiWuP9REJEKjs/s/eaN+
RmBJMIEEhpW+EbtP49FhcuHgRzSSgj0eo2cLle9kPyjp2a/la9aV7Z/vN4g6zMbr
TjZEguZ+tI2Rio0/JSQpAjBxgwOnTOiII4CSOY11LHc8n3/ZNQ5ExPA8vaRp2eQy
7tOyco9R4J/VXA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:51:55 2025 by rpki-client