Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32322d3232203d3e20323632343434.roa
File:                     3137372e35322e3130342e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          u6P4zwOUJzY89ImLphqzAdyOFI6F8oOkjlTjv9iACN4=
Subject key identifier:   EC:3E:17:F9:ED:6C:0B:AB:B7:D6:90:70:67:35:B0:4B:B4:14:7D:A8
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       56A1112F35FC2AFB1554DFC4B39A4642848D1833
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:44 +0000
ROA not before:           Wed 09 Jul 2025 13:59:44 +0000
ROA not after:            Wed 08 Jul 2026 14:04:44 +0000
asID:                     262444
IP address blocks:        177.52.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 09:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a1:11:2f:35:fc:2a:fb:15:54:df:c4:b3:9a:46:42:84:8d:18:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:44 2025 GMT
            Not After : Jul  8 14:04:44 2026 GMT
        Subject: CN=EC3E17F9ED6C0BABB7D690706735B04BB4147DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2c:56:7c:45:25:ad:51:13:30:9d:fd:f8:89:
                    57:8c:cb:8c:2f:9b:44:98:c5:5a:12:d0:64:1d:19:
                    50:0b:bb:aa:e0:df:84:b2:63:76:da:a3:0b:df:69:
                    30:d6:66:0b:09:8a:94:0a:33:5c:af:f8:87:34:6c:
                    33:12:00:ec:90:c0:7b:2d:3f:6b:0d:40:cc:22:b5:
                    27:f7:89:cd:a1:1b:54:7c:32:3a:e3:49:fd:ed:af:
                    cf:c8:b1:13:b4:c9:1f:d7:cf:62:71:6c:d9:4a:68:
                    14:78:40:e7:ab:f7:0c:48:7a:20:2c:b7:ad:45:28:
                    a3:76:ee:3b:b1:57:c6:29:ac:40:81:86:71:1d:1d:
                    6a:bf:a1:2d:92:f7:63:6a:f4:ea:43:fa:6d:17:6e:
                    64:74:8b:95:c0:d9:0c:e2:c3:23:5f:a1:d0:1c:ac:
                    c9:58:54:6b:8c:61:64:8b:ed:d0:a1:32:db:db:4c:
                    72:1a:cc:09:c8:99:74:32:24:4a:d4:62:f8:1d:b1:
                    7d:8c:4d:c9:af:15:d2:96:38:d1:e5:7f:ad:21:29:
                    93:4a:cd:59:04:82:50:fb:a9:a0:f6:e1:1f:03:ed:
                    07:28:d3:6a:b7:f1:9c:fb:83:91:bd:86:d9:51:10:
                    c6:05:1c:4b:9f:47:c6:e7:b9:83:db:6a:de:c4:75:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3E:17:F9:ED:6C:0B:AB:B7:D6:90:70:67:35:B0:4B:B4:14:7D:A8
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:79:93:f9:76:d7:38:00:44:92:fe:4d:c8:da:c9:94:7d:
         ac:9e:55:2d:0b:c8:7b:8f:e4:b5:5c:d4:18:75:b7:0f:bf:67:
         02:07:a2:61:2e:26:cf:2b:c2:e3:dd:c7:36:aa:0a:c1:0d:21:
         ca:26:0d:23:26:1a:6c:bf:8c:ff:3d:65:92:67:5b:55:a4:28:
         63:fb:07:89:67:84:cc:b3:84:09:57:f1:35:ef:d6:60:67:af:
         e8:1b:81:f0:e5:f7:45:66:3d:a3:31:13:2b:51:bd:1e:f7:5f:
         b5:b8:88:14:63:11:41:05:c3:84:34:47:43:93:4e:c3:a5:2b:
         6d:5f:a5:92:d6:9e:de:e1:31:c4:eb:09:8c:06:37:e2:ea:53:
         f0:db:47:74:bb:7e:54:ab:8d:b3:08:d3:a4:72:32:5e:52:aa:
         2e:58:66:a4:4e:80:50:a0:96:c3:4d:7f:99:d5:bf:0e:0e:86:
         1a:a6:fb:5c:57:da:ea:24:89:a3:69:b6:7c:80:72:e6:93:ce:
         25:28:00:2b:b0:ae:19:05:4b:8b:c1:ab:79:d3:76:04:fb:ad:
         45:27:b8:c0:5c:3c:75:69:c6:1a:1d:00:cd:aa:7d:83:b8:79:
         55:b4:27:df:56:70:bd:7c:a5:47:0c:9a:d0:70:95:01:38:37:
         31:55:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:32:51 2025 by rpki-client