Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37302e3137362e302f32302d3332203d3e20323632373733.roa
File:                     3137372e37302e3137362e302f32302d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          D241/t3CQQaHKbk5fclK7shSrnmxexLNtA3RQxPpPUM=
Subject key identifier:   5A:DA:3D:A1:62:86:9E:11:22:52:52:98:14:A6:68:83:05:CD:8C:8D
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       18E38C544014DF42CEBD12523F92ACF9B7662B46
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37302e3137362e302f32302d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:58 +0000
ROA not before:           Mon 11 Aug 2025 15:41:58 +0000
ROA not after:            Mon 10 Aug 2026 15:46:58 +0000
asID:                     262773
IP address blocks:        177.70.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e3:8c:54:40:14:df:42:ce:bd:12:52:3f:92:ac:f9:b7:66:2b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:58 2025 GMT
            Not After : Aug 10 15:46:58 2026 GMT
        Subject: CN=5ADA3DA162869E112252529814A6688305CD8C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:e9:fb:d3:aa:8d:63:ca:5f:3f:29:05:10:
                    73:d9:e9:1e:3d:af:0f:3d:77:ee:75:5b:77:54:a5:
                    ec:12:8e:b3:00:84:6b:ce:48:4d:e0:98:c4:a8:66:
                    7b:f9:49:c4:6d:8c:b1:45:29:41:e7:55:d3:59:ce:
                    d5:27:ac:10:7a:23:4c:d2:14:ad:81:73:db:32:b2:
                    a0:41:1f:a5:6c:e9:00:bd:25:12:b3:98:c1:8b:7e:
                    20:44:30:b1:37:af:a0:96:59:8e:91:04:11:4d:1c:
                    ee:9f:5e:7b:79:8e:4b:da:cb:d8:66:5d:0e:57:12:
                    ab:4f:79:be:25:1e:de:14:50:ee:bc:f3:8e:2b:af:
                    40:8d:8e:eb:33:08:92:4e:f7:5d:09:bf:99:c7:52:
                    1f:40:e0:bc:e5:60:79:ca:4a:d7:91:97:98:c8:f4:
                    62:60:89:ee:c5:23:17:da:5d:3b:e6:30:5a:37:85:
                    61:b7:f6:0e:c4:16:4f:81:10:85:d0:d0:75:4e:29:
                    ef:4c:23:c6:6d:11:9a:17:cb:5a:4a:61:87:6d:9f:
                    ff:8c:b4:42:68:8f:b3:0b:ce:d3:8c:fa:7d:9f:a1:
                    d5:8d:83:c2:8e:d2:86:5c:7c:aa:af:b4:a4:f3:e8:
                    f5:a0:ea:9d:a9:cf:25:b7:72:9a:ab:34:9a:62:68:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DA:3D:A1:62:86:9E:11:22:52:52:98:14:A6:68:83:05:CD:8C:8D
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37302e3137362e302f32302d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:34:90:ab:2a:6f:ba:50:7f:7a:62:39:aa:54:0c:ec:38:ab:
         fc:2d:16:f0:b5:68:88:59:4c:58:5f:ec:a5:f7:d0:5e:9d:12:
         55:9c:00:3e:10:1f:1c:87:13:d5:84:7a:b6:eb:21:ea:3c:64:
         8b:53:15:d5:b7:8c:eb:1e:d8:b0:9a:ae:bc:13:24:ee:65:c7:
         3c:03:ba:3a:67:ab:54:3e:94:90:4b:76:21:81:88:6c:7f:ee:
         cf:3b:ef:90:f2:4e:f6:dd:58:44:95:90:72:e1:9a:4e:03:6a:
         fa:59:67:6b:d7:c0:86:41:d0:9f:42:39:49:87:44:85:b4:d5:
         b0:8a:33:d9:73:46:97:2b:71:f8:71:8c:b3:fc:ff:ea:6f:f4:
         3a:a5:70:08:1d:28:38:d7:e3:3e:79:82:a9:7b:22:d8:43:f6:
         57:b4:cc:32:31:b9:c6:09:1c:63:7d:3f:ca:9b:54:90:06:c8:
         32:b8:df:01:30:de:16:cc:1a:47:eb:28:e1:0f:94:00:f2:61:
         4c:ec:a7:cf:0d:45:3c:85:b9:32:33:1a:5a:39:a3:4a:1b:16:
         1d:51:26:79:a1:36:25:91:40:46:08:39:c2:c5:56:de:9d:0b:
         ab:75:40:9a:a6:ba:12:5d:f9:19:21:02:53:b4:dd:9d:0a:a8:
         d5:ca:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:25 2025 by rpki-client