Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3230302e302f32312d3332203d3e20323632373733.roa
File:                     3137372e37332e3230302e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          21vbNdWU35HfLLRuXMLN/5dx02K6ogArOwmbNcGXah0=
Subject key identifier:   D3:4E:45:1F:F3:46:07:F5:60:21:47:25:F9:6D:C1:09:67:F2:DE:E1
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       3472BCBD0F0C3F01980CF6461042CF6399C2B3B6
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3230302e302f32312d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:47:00 +0000
ROA not before:           Mon 11 Aug 2025 15:42:00 +0000
ROA not after:            Mon 10 Aug 2026 15:47:00 +0000
asID:                     262773
IP address blocks:        177.73.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:72:bc:bd:0f:0c:3f:01:98:0c:f6:46:10:42:cf:63:99:c2:b3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:42:00 2025 GMT
            Not After : Aug 10 15:47:00 2026 GMT
        Subject: CN=D34E451FF34607F560214725F96DC10967F2DEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:c4:45:56:82:fe:35:3d:f9:f4:7f:84:65:
                    f5:8b:47:1a:3e:b9:e0:ac:3b:b1:b9:96:de:5c:82:
                    e3:f4:f6:0e:79:a1:a8:5c:5a:4c:4a:3c:29:60:fa:
                    70:d6:5f:55:8b:75:05:be:9f:7b:aa:74:32:27:f8:
                    44:b4:80:fd:f7:62:cb:b1:d5:c2:92:b5:7b:66:0d:
                    a1:19:6b:49:c3:e1:a6:9b:3d:4e:38:81:64:9a:72:
                    9e:b8:ed:b0:df:9e:65:96:95:92:f0:ca:e9:76:39:
                    c0:5f:20:fb:5d:4d:e3:51:52:37:ac:01:27:6a:df:
                    26:f4:b6:9a:c3:96:b4:51:5d:31:f8:13:80:94:36:
                    94:4b:b1:19:47:b4:77:56:3b:ea:88:2d:3f:df:c9:
                    b4:83:33:6b:30:67:87:19:41:49:03:1c:84:11:e1:
                    ab:29:47:a4:8d:b6:51:54:f9:53:4f:96:f5:f4:bb:
                    78:86:ec:73:58:46:aa:0b:ca:c9:aa:76:53:38:ea:
                    6b:37:20:dc:56:c3:33:e2:4c:d8:67:e7:b6:89:9d:
                    ec:92:26:20:14:ac:43:6e:05:ce:c8:5e:f0:a5:77:
                    d3:4a:02:ab:89:12:a5:f4:12:96:46:49:32:8d:30:
                    09:29:72:ec:34:f6:f8:11:2c:fa:97:fc:83:ad:85:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4E:45:1F:F3:46:07:F5:60:21:47:25:F9:6D:C1:09:67:F2:DE:E1
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3230302e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:57:01:ef:cf:2c:2f:22:6f:47:5a:51:0c:ff:12:58:4b:
         ae:85:39:90:17:af:2e:ce:a3:9f:c3:1d:96:ff:78:b6:24:74:
         5c:33:26:4d:b3:68:b4:1c:34:93:9e:b1:64:82:82:66:79:0c:
         58:27:8f:09:65:0f:9e:16:2c:80:93:a9:f5:59:57:1e:ee:b5:
         51:72:11:eb:4f:e4:a2:bd:1b:cc:52:d9:c1:1b:21:c6:26:6b:
         3d:f7:c7:1b:16:3a:6d:a5:56:ad:de:10:c9:57:26:da:a7:59:
         82:5a:6e:c1:45:14:a9:a7:f9:35:b9:43:13:1f:c0:87:bd:d0:
         e7:f4:56:de:17:f6:cc:3b:12:4a:65:77:72:fc:e6:69:fa:d2:
         d0:d0:51:b1:81:83:9d:8a:29:8b:01:40:2e:9b:5c:cd:4b:2b:
         22:d7:60:ba:a2:30:69:26:5e:35:1a:df:3d:01:ba:5f:7a:d8:
         f6:18:8e:bc:fe:eb:f6:40:78:33:fa:84:28:58:9e:37:01:c0:
         98:d6:9e:ba:2c:ad:c0:7a:e4:0c:d1:05:ae:33:58:04:f4:2a:
         6a:82:64:da:fc:4d:cc:ce:66:85:af:e2:f5:1b:6b:49:25:e6:
         66:b0:d1:84:a3:2b:66:7a:e8:5e:18:fc:2c:3d:4e:06:9c:1d:
         af:51:e6:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNHK8vQ8MPwGYDPZGEELPY5nCs7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MTExNTQyMDBaFw0yNjA4MTAxNTQ3MDBaMDMxMTAvBgNV
BAMTKEQzNEU0NTFGRjM0NjA3RjU2MDIxNDcyNUY5NkRDMTA5NjdGMkRFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx28RFVoL+NT359H+EZfWLRxo+
ueCsO7G5lt5cguP09g55oahcWkxKPClg+nDWX1WLdQW+n3uqdDIn+ES0gP33Ysux
1cKStXtmDaEZa0nD4aabPU44gWSacp647bDfnmWWlZLwyul2OcBfIPtdTeNRUjes
ASdq3yb0tprDlrRRXTH4E4CUNpRLsRlHtHdWO+qILT/fybSDM2swZ4cZQUkDHIQR
4aspR6SNtlFU+VNPlvX0u3iG7HNYRqoLysmqdlM46ms3INxWwzPiTNhn57aJneyS
JiAUrENuBc7IXvCld9NKAquJEqX0EpZGSTKNMAkpcuw09vgRLPqX/IOthcTjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU005FH/NGB/VgIUcl+W3BCWfy3uEwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzM3MmUzNzMzMmUzMjMwMzAyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxScgwDQYJKoZIhvcNAQELBQADggEBABjlVwHv
zywvIm9HWlEM/xJYS66FOZAXry7Oo5/DHZb/eLYkdFwzJk2zaLQcNJOesWSCgmZ5
DFgnjwllD54WLICTqfVZVx7utVFyEetP5KK9G8xS2cEbIcYmaz33xxsWOm2lVq3e
EMlXJtqnWYJabsFFFKmn+TW5QxMfwIe90Of0Vt4X9sw7Ekpld3L85mn60tDQUbGB
g52KKYsBQC6bXM1LKyLXYLqiMGkmXjUa3z0Bul962PYYjrz+6/ZAeDP6hChYnjcB
wJjWnrosrcB65AzRBa4zWAT0KmqCZNr8TczOZoWv4vUba0kl5maw0YSjK2Z66F4Y
/Cw9TgacHa9R5vQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:59:06 2025 by rpki-client