Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3232203d3e20323632343630.roa
File:                     3137372e35332e37362e302f32322d3232203d3e20323632343630.roa (raw, json)
Hash identifier:          vHOEIOYcSLGjUgN6b4UvPie6C0nnLzLVS0TrnA8iAjM=
Subject key identifier:   79:59:F9:41:D8:F0:FD:72:EA:38:12:C9:C6:A8:39:9D:2C:18:C5:4C
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       717B8CF668F57401871F286DC73FFDE222ADE1D7
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3232203d3e20323632343630.roa
Signing time:             Thu 26 Jun 2025 14:37:48 +0000
ROA not before:           Thu 26 Jun 2025 14:32:48 +0000
ROA not after:            Thu 25 Jun 2026 14:37:48 +0000
asID:                     262460
IP address blocks:        177.53.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 08:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7b:8c:f6:68:f5:74:01:87:1f:28:6d:c7:3f:fd:e2:22:ad:e1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Jun 26 14:32:48 2025 GMT
            Not After : Jun 25 14:37:48 2026 GMT
        Subject: CN=7959F941D8F0FD72EA3812C9C6A8399D2C18C54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:18:30:d9:8d:07:a9:e1:fc:16:50:2e:99:
                    a6:0a:87:e1:cd:73:e3:2c:a6:1c:1f:42:39:0b:08:
                    dd:14:77:c5:f8:6b:61:ab:96:b5:21:f8:b8:54:c4:
                    a8:79:5c:85:8b:0f:aa:0f:7f:25:99:97:ad:25:2a:
                    1d:41:55:65:44:91:96:38:04:37:a5:f9:cb:c9:00:
                    26:23:23:8f:63:41:fc:bb:76:a2:c1:f4:74:18:a9:
                    f8:e8:78:ae:cd:31:aa:26:52:f2:3c:ad:17:4e:4b:
                    0b:de:3e:2f:eb:03:2c:15:d1:3c:7e:39:77:76:89:
                    82:f0:d5:46:e9:ac:12:ab:44:52:a8:5d:bd:3c:0b:
                    15:5c:94:66:fe:37:a4:cb:e4:58:fe:73:d4:08:00:
                    04:ad:74:80:df:8b:c2:b6:dd:3b:11:90:b1:51:4f:
                    a4:a6:b6:4e:bd:20:48:24:9e:dd:d1:7f:18:fe:55:
                    06:db:ea:a2:e9:93:22:31:05:0d:88:21:8e:63:5e:
                    65:45:1c:b0:4f:6b:e4:97:0c:64:bb:1a:38:c6:23:
                    38:12:e6:76:fe:f2:b1:75:4d:c6:1f:c9:72:86:74:
                    8e:b0:12:e1:93:f5:34:fe:d1:f0:6f:85:ef:fe:fe:
                    cb:81:5b:4b:ae:55:a6:1f:64:c7:c4:e0:32:32:f2:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:F9:41:D8:F0:FD:72:EA:38:12:C9:C6:A8:39:9D:2C:18:C5:4C
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3232203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:3a:c5:81:6b:9a:e9:13:5c:06:ad:20:55:22:9d:e8:d8:c6:
         4a:ff:e3:9f:bb:fe:3e:b0:ba:49:b8:72:01:3c:f8:7c:6e:66:
         a2:88:97:db:f0:30:09:85:9d:49:7a:62:f4:29:44:c4:44:0a:
         4a:4d:13:19:ae:b8:50:26:1c:f5:00:47:4d:fe:97:dd:a0:69:
         77:b6:eb:c5:40:2f:69:a6:fd:3c:49:60:3d:80:97:fe:cd:9d:
         47:29:8b:e1:24:f0:f1:6e:04:34:cb:fc:e9:de:02:a9:69:0b:
         2a:da:f5:76:8b:19:68:19:e3:41:b1:b9:ee:26:79:db:94:63:
         22:d6:1a:1e:77:7b:b6:58:68:d8:5d:93:b2:76:a9:41:4a:8e:
         75:c5:47:f8:1c:5b:87:5c:92:e7:13:36:3b:9d:2a:46:76:87:
         ee:34:2b:87:da:d1:f2:09:d0:78:a2:ef:9d:9a:13:36:73:9d:
         85:56:11:19:71:a9:3c:92:4d:d5:dd:c9:51:65:41:b5:2c:1c:
         c5:e8:5f:a3:33:44:7e:b7:23:e8:bd:92:49:fd:6f:ba:ab:17:
         39:99:e6:e3:dc:35:49:ac:1a:b7:8d:14:0b:1a:e6:6b:e3:24:
         4f:b6:c0:15:d0:de:d2:77:96:84:c7:6b:b8:2e:07:a7:1e:cb:
         df:e7:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:07:15 2025 by rpki-client