Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa
File:                     3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          LT/EMrL0aMpA3nnms4VQQF0ePtF33/wQqOO8XX/9vSY=
Subject key identifier:   C1:47:46:37:CC:3B:E3:6E:7C:A1:4F:B4:1E:76:E4:6B:8D:27:4A:E5
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       4C776CC2BB1A5A4AD31E6B7C90742AAC69600751
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:59 +0000
ROA not before:           Mon 11 Aug 2025 15:41:59 +0000
ROA not after:            Mon 10 Aug 2026 15:46:59 +0000
asID:                     262773
IP address blocks:        177.22.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:77:6c:c2:bb:1a:5a:4a:d3:1e:6b:7c:90:74:2a:ac:69:60:07:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:59 2025 GMT
            Not After : Aug 10 15:46:59 2026 GMT
        Subject: CN=C1474637CC3BE36E7CA14FB41E76E46B8D274AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:b3:d8:5e:2d:1b:51:0b:68:14:8b:87:30:
                    8f:34:eb:b5:7f:fb:9d:78:26:a1:be:0a:bb:04:91:
                    eb:ed:d2:78:1e:ad:7a:8c:b1:84:64:70:97:85:c0:
                    b4:2c:3b:cd:25:6a:0c:56:ea:60:27:93:a7:a3:3d:
                    03:2c:1a:41:21:64:fd:86:d0:83:ff:b2:a2:28:54:
                    e5:80:a4:11:a5:5e:5c:58:fa:76:69:cb:4d:0b:17:
                    be:28:1d:1c:98:59:22:06:da:94:2d:37:a4:e8:80:
                    2d:19:49:47:94:f5:2e:c4:a2:bd:12:db:c4:e4:7b:
                    de:6b:cf:c6:19:5b:2e:fd:05:71:ea:35:3b:e4:fd:
                    94:e2:6a:22:98:2b:c8:0d:4e:fb:51:1b:53:a2:67:
                    c9:21:28:a8:fc:d0:ba:2e:f4:3a:42:a2:85:8b:13:
                    9b:6c:c2:9b:5c:e9:71:eb:57:f4:bb:96:a0:7e:f2:
                    d8:86:cd:3f:1c:96:b9:ef:69:01:2e:1a:80:0b:f7:
                    24:ae:bf:38:ed:ae:d8:83:99:48:77:c9:68:d7:c5:
                    f0:b9:5f:80:de:05:7f:3b:ed:ba:05:dd:53:c7:c5:
                    ef:fe:ee:ab:50:76:e7:06:24:1f:38:d9:9b:4e:85:
                    b2:1a:3c:93:9c:68:fb:49:a9:e7:fb:16:17:b3:b2:
                    ab:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:47:46:37:CC:3B:E3:6E:7C:A1:4F:B4:1E:76:E4:6B:8D:27:4A:E5
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:c4:ea:db:18:41:1d:80:d9:47:f3:c7:62:47:e9:a8:12:25:
         6c:67:df:e7:46:c7:57:9c:e5:8f:5d:20:ca:42:0b:dc:25:34:
         bf:99:b7:3d:ca:96:66:ec:39:d8:bd:59:df:b5:dc:35:fc:fd:
         d9:5f:d4:3f:73:39:77:0f:f9:31:4e:63:f8:25:51:00:24:e3:
         7c:11:eb:81:4f:6d:e8:73:56:a8:ee:48:f4:a6:a2:da:5b:14:
         9a:3f:5e:70:29:20:3b:2d:74:eb:d6:1e:6f:84:e4:2e:83:ad:
         99:65:84:b7:73:e7:4a:77:92:1f:0a:02:ed:01:3a:1d:9f:93:
         f3:4c:3a:4c:7d:35:44:4f:e4:f4:a3:e4:70:68:37:d1:a0:fc:
         67:84:ed:ce:a8:b3:e3:29:8a:a7:cf:ef:c4:50:fe:fc:5b:7b:
         9f:26:b8:12:44:c7:01:0e:c2:92:2d:f0:f3:aa:92:69:b1:3c:
         fb:27:9c:37:9f:af:db:84:c1:3a:d4:6f:54:8e:ab:ef:54:53:
         73:7d:05:96:9d:2c:ac:60:97:ae:44:70:5d:75:27:a9:ea:c1:
         60:68:8f:3f:bf:33:9f:fd:76:f6:f0:66:d2:99:61:4f:7e:da:
         20:4e:46:61:b0:68:7e:8e:95:81:ed:f6:15:7a:0b:a6:8e:01:
         36:9f:8b:7e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTHdswrsaWkrTHmt8kHQqrGlgB1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MTExNTQxNTlaFw0yNjA4MTAxNTQ2NTlaMDMxMTAvBgNV
BAMTKEMxNDc0NjM3Q0MzQkUzNkU3Q0ExNEZCNDFFNzZFNDZCOEQyNzRBRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCm7PYXi0bUQtoFIuHMI8067V/
+514JqG+CrsEkevt0ngerXqMsYRkcJeFwLQsO80lagxW6mAnk6ejPQMsGkEhZP2G
0IP/sqIoVOWApBGlXlxY+nZpy00LF74oHRyYWSIG2pQtN6TogC0ZSUeU9S7Eor0S
28Tke95rz8YZWy79BXHqNTvk/ZTiaiKYK8gNTvtRG1OiZ8khKKj80Lou9DpCooWL
E5tswptc6XHrV/S7lqB+8tiGzT8clrnvaQEuGoAL9ySuvzjtrtiDmUh3yWjXxfC5
X4DeBX877boF3VPHxe/+7qtQducGJB842ZtOhbIaPJOcaPtJqef7FhezsqvhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwUdGN8w74258oU+0Hnbka40nSuUwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzM3MmUzMjMyMmUzMjM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxFvgwDQYJKoZIhvcNAQELBQADggEBAEbE6tsY
QR2A2Ufzx2JH6agSJWxn3+dGx1ec5Y9dIMpCC9wlNL+Ztz3KlmbsOdi9Wd+13DX8
/dlf1D9zOXcP+TFOY/glUQAk43wR64FPbehzVqjuSPSmotpbFJo/XnApIDstdOvW
Hm+E5C6DrZllhLdz50p3kh8KAu0BOh2fk/NMOkx9NURP5PSj5HBoN9Gg/GeE7c6o
s+MpiqfP78RQ/vxbe58muBJExwEOwpIt8POqkmmxPPsnnDefr9uEwTrUb1SOq+9U
U3N9BZadLKxgl65EcF11J6nqwWBojz+/M5/9dvbwZtKZYU9+2iBORmGwaH6OlYHt
9hV6C6aOATafi34=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:01 2025 by rpki-client