Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3132382e302f32312d3332203d3e20323632373733.roa
File:                     3137372e33382e3132382e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          Sg7anJ63PLejEWS/PUFfZqvozLChM3tig50UQxsJ4Co=
Subject key identifier:   8E:32:0D:E6:48:F6:65:E4:9C:B8:3C:B7:CD:06:64:F0:9D:23:7A:B7
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       06605812EFC822238E645ACE439783AA066AB5BB
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3132382e302f32312d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:59 +0000
ROA not before:           Mon 11 Aug 2025 15:41:59 +0000
ROA not after:            Mon 10 Aug 2026 15:46:59 +0000
asID:                     262773
IP address blocks:        177.38.128.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:60:58:12:ef:c8:22:23:8e:64:5a:ce:43:97:83:aa:06:6a:b5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:59 2025 GMT
            Not After : Aug 10 15:46:59 2026 GMT
        Subject: CN=8E320DE648F665E49CB83CB7CD0664F09D237AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:a5:b7:07:a8:8c:f0:60:03:40:a2:4a:50:
                    85:88:00:73:11:ec:13:10:1e:82:20:96:82:49:50:
                    c5:86:b2:46:a7:f7:34:52:57:6f:ac:b6:c3:4f:8f:
                    6e:8b:4c:e3:cb:1c:4f:f8:4a:c7:6e:94:f9:66:d0:
                    0e:60:32:0f:eb:8b:24:c1:57:2b:ec:64:35:e3:87:
                    3a:b8:71:ef:15:1c:b1:04:0f:78:cd:dd:0a:8f:ea:
                    f2:5c:96:90:64:72:ac:a5:39:52:ca:23:28:c4:e2:
                    0f:90:d0:bd:91:52:78:0b:e1:73:e1:f2:22:97:b4:
                    09:12:68:77:bf:5a:d8:e3:2b:f7:43:df:44:48:9d:
                    93:fd:87:de:97:7d:e7:5f:37:e8:89:6c:46:63:62:
                    38:c1:41:cc:ca:08:99:9d:8d:b3:73:78:71:ea:fd:
                    45:f7:25:df:4c:34:a0:cc:08:09:d6:9c:73:a9:14:
                    c8:b2:27:8b:86:4b:42:a2:23:4b:b0:f6:df:92:c1:
                    e8:b3:59:5b:11:1d:cc:42:f6:48:8b:c8:c9:ba:3a:
                    f3:d4:74:2d:95:fe:ae:e5:82:0b:f6:94:57:c6:15:
                    0a:bb:71:8a:3a:f3:52:c0:ff:62:0b:24:98:d7:d8:
                    99:67:6d:05:bb:17:f8:6a:21:96:69:49:5b:2c:8d:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:0D:E6:48:F6:65:E4:9C:B8:3C:B7:CD:06:64:F0:9D:23:7A:B7
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e33382e3132382e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:2e:9a:2a:70:bd:2b:14:52:4c:08:46:96:86:14:26:8b:
         5f:e8:e7:3e:3e:23:7c:c8:fb:eb:6a:04:aa:1a:e2:0d:af:39:
         11:95:d4:53:c4:d8:0d:8f:1b:a4:6a:94:73:ab:be:c2:19:46:
         bd:aa:56:43:91:4b:54:6c:19:86:46:e4:a7:7c:2d:cd:63:bd:
         ff:b6:20:c2:08:2c:48:ac:9d:8f:6e:e1:ca:c8:81:17:16:fd:
         c8:9c:e5:90:9e:2d:ee:a1:74:52:9e:96:83:48:aa:58:06:96:
         71:a5:5e:1d:a3:6a:5f:3b:20:79:00:8b:8f:5d:18:c0:79:27:
         78:b4:6b:89:67:4d:c7:dc:1a:70:9c:d9:45:aa:0e:36:8b:e3:
         e5:c2:ad:a9:f4:f9:ed:43:cd:ed:32:d7:6d:00:7f:fd:af:07:
         d6:2a:18:24:f1:ef:18:72:ef:f2:73:74:81:ff:62:8b:8b:3f:
         94:65:62:33:7a:01:c3:b7:be:ff:9d:57:6e:c1:a3:56:d5:68:
         b1:8e:d8:c7:2e:4f:e2:0e:9d:96:98:e9:ab:b1:29:95:c3:aa:
         73:f1:9d:b9:b1:9d:41:6c:10:2b:32:de:76:97:f9:c0:a5:9e:
         3e:0f:08:88:e6:ed:b2:eb:00:15:c9:d3:07:35:0d:af:19:ed:
         37:0f:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:17:27 2025 by rpki-client