Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138362e302f32332d3233203d3e203532393233.roa
File:                     3137372e3138342e3138362e302f32332d3233203d3e203532393233.roa (raw, json)
Hash identifier:          GOSa0WZJcEkjSIjAJl0VUUC/RrHL89Y3FsGcW0WuPt0=
Subject key identifier:   14:DB:F7:ED:2B:27:B8:3B:76:D3:EB:26:0B:34:14:B2:D7:0B:0A:27
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       7A439F87D11C8395100C7A23EB7384C5560B29BA
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138362e302f32332d3233203d3e203532393233.roa
Signing time:             Mon 29 Sep 2025 17:26:25 +0000
ROA not before:           Mon 29 Sep 2025 17:21:25 +0000
ROA not after:            Mon 28 Sep 2026 17:26:25 +0000
asID:                     52923
IP address blocks:        177.184.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:43:9f:87:d1:1c:83:95:10:0c:7a:23:eb:73:84:c5:56:0b:29:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Sep 29 17:21:25 2025 GMT
            Not After : Sep 28 17:26:25 2026 GMT
        Subject: CN=14DBF7ED2B27B83B76D3EB260B3414B2D70B0A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:a0:4a:6e:98:6a:d1:1a:62:b7:24:e6:6d:
                    0e:a9:b7:96:df:0e:f0:be:d7:bd:b2:0b:6d:1e:97:
                    44:66:cd:a5:d1:df:6b:59:0c:91:a2:0e:f0:99:36:
                    ec:46:3b:23:77:d4:ca:1f:25:e5:fb:8a:84:cf:e8:
                    da:8b:6c:d5:a3:e0:43:51:94:01:6d:71:15:f4:cc:
                    c4:1e:fb:29:b0:3e:c2:77:cb:17:97:c4:fe:f1:74:
                    ce:db:65:9f:90:4e:e4:3d:07:86:05:ce:f7:45:90:
                    69:a3:8e:d1:55:09:b9:23:73:4e:16:5e:5f:e1:91:
                    9e:3c:4f:8d:f4:91:9c:80:93:01:fa:cf:86:ef:d1:
                    2d:ed:92:c1:6f:ca:78:c3:7b:51:26:f5:70:47:d1:
                    40:89:6e:dc:d5:6a:da:a4:21:1d:20:f3:7c:00:73:
                    cc:6e:dc:bf:2c:a1:96:dd:96:07:40:8c:12:48:8a:
                    3f:1d:d2:28:df:9d:2c:18:a8:52:f0:fa:f8:a1:b3:
                    b5:09:4c:e5:39:4f:fc:b1:d7:2d:f6:83:3f:eb:06:
                    94:ed:19:4d:05:f7:3c:19:8a:d6:30:07:05:33:18:
                    06:63:06:45:68:4e:88:b4:ae:14:db:1a:8c:1c:a4:
                    01:39:3f:8e:7b:a6:ba:4c:a7:f1:96:97:66:37:1b:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:F7:ED:2B:27:B8:3B:76:D3:EB:26:0B:34:14:B2:D7:0B:0A:27
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138362e302f32332d3233203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:2e:c1:be:42:82:50:f2:25:64:fd:09:1e:97:83:65:ca:
         ee:98:fa:cb:59:92:77:74:19:39:34:e1:eb:36:e2:ba:20:31:
         f6:0b:30:70:43:85:8c:bf:88:5e:6f:04:74:0f:63:70:ac:ed:
         ac:23:21:53:c8:31:d8:06:e1:da:07:7d:f6:8c:6a:0f:0d:55:
         64:19:10:28:a6:61:c0:84:34:ad:c2:7f:54:22:2f:81:f6:2b:
         85:39:a4:7f:3a:7e:47:80:74:9d:6e:5c:13:cc:d0:c8:46:bd:
         90:c9:dd:63:9b:7b:2d:e7:10:2c:97:0d:9d:17:8e:d0:70:e7:
         83:44:4e:65:a3:ff:d4:91:69:ca:c1:4e:95:de:47:7b:e9:28:
         f9:54:1d:d6:1a:08:41:87:5c:8c:69:03:0c:07:fc:b2:af:f3:
         dc:8f:15:1b:25:bc:50:f3:3b:a4:c1:ac:e6:da:72:ed:64:68:
         6a:1d:22:77:6c:bf:b7:20:ec:da:b3:17:16:c0:69:fe:b5:57:
         f0:ca:75:ab:93:fc:5e:01:22:87:ea:95:70:94:f6:d5:12:47:
         24:e6:7a:b0:06:2b:71:21:a3:4d:24:44:67:74:81:3f:ce:6c:
         e3:68:6e:85:90:78:8e:bd:3b:07:5d:5b:77:38:70:3e:a6:07:
         69:d3:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:02 2025 by rpki-client