Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3137372e3133372e3232342e302f32302d3234203d3e203238313733.roa
File:                     3137372e3133372e3232342e302f32302d3234203d3e203238313733.roa (raw, json)
Hash identifier:          P+jmW0O8rZAAJi6JNCZmzGHf5sg+/QwADx8jIKb68fM=
Subject key identifier:   CA:A4:5C:19:A0:86:1F:A4:CD:9F:0D:03:71:68:DD:DE:99:59:59:B5
Certificate issuer:       /CN=700C105F866D3955B5DC6A4CACFF8263EED77B4C
Certificate serial:       37A60E8876AABADC6AD57F42AA4A91E687AAB991
Authority key identifier: 70:0C:10:5F:86:6D:39:55:B5:DC:6A:4C:AC:FF:82:63:EE:D7:7B:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3137372e3133372e3232342e302f32302d3234203d3e203238313733.roa
Signing time:             Fri 30 May 2025 17:04:00 +0000
ROA not before:           Fri 30 May 2025 16:59:00 +0000
ROA not after:            Fri 29 May 2026 17:04:00 +0000
asID:                     28173
IP address blocks:        177.137.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.crl
                          rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a6:0e:88:76:aa:ba:dc:6a:d5:7f:42:aa:4a:91:e6:87:aa:b9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700C105F866D3955B5DC6A4CACFF8263EED77B4C
        Validity
            Not Before: May 30 16:59:00 2025 GMT
            Not After : May 29 17:04:00 2026 GMT
        Subject: CN=CAA45C19A0861FA4CD9F0D037168DDDE995959B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:b4:fe:a6:06:44:fd:d6:f4:13:a1:bc:55:
                    fa:3a:c7:6c:5f:2b:2b:28:84:8d:57:62:b0:78:b9:
                    80:cc:0f:8b:ec:8e:34:93:9f:58:f6:f9:39:43:1c:
                    1e:c6:34:ed:d8:39:4b:1b:93:31:0b:5e:bc:b3:9d:
                    c9:f0:6d:73:6a:00:fc:73:32:f4:b4:46:d6:c5:b6:
                    10:c8:b9:4d:c4:a6:2b:b7:d0:3b:13:aa:a5:d0:0f:
                    99:24:53:62:e5:1e:2b:ec:f5:f1:37:11:ea:72:44:
                    d0:3e:ad:3f:5d:2b:6a:91:25:ec:55:f5:b4:16:85:
                    cd:b6:0c:f2:99:5d:f7:a3:d4:ff:fc:ba:3d:f7:ff:
                    93:91:5e:6f:fc:57:26:b2:13:98:82:6c:d2:33:61:
                    2f:41:14:9c:30:90:c4:a6:c1:6a:58:44:11:ef:52:
                    2d:03:b0:3a:bd:9e:b8:7c:8e:35:d0:af:e7:7b:3c:
                    78:59:d7:86:44:19:51:c1:cb:44:84:81:8e:36:d0:
                    dc:ac:9d:1b:fb:c5:a2:ef:4f:d6:fe:17:fb:39:4a:
                    e6:70:0f:1e:9b:25:b1:40:6a:1b:80:7e:bf:e4:77:
                    cc:9d:20:19:e0:e9:33:0e:60:94:3b:cc:85:43:db:
                    ee:24:6f:d3:19:b3:e4:41:02:af:fb:c5:35:c0:33:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:5C:19:A0:86:1F:A4:CD:9F:0D:03:71:68:DD:DE:99:59:59:B5
            X509v3 Authority Key Identifier:
                keyid:70:0C:10:5F:86:6D:39:55:B5:DC:6A:4C:AC:FF:82:63:EE:D7:7B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3137372e3133372e3232342e302f32302d3234203d3e203238313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:ea:f7:df:c8:15:5d:17:84:7d:61:e0:84:b1:59:05:0a:
         b4:42:23:43:77:68:10:b8:a9:b6:b0:f9:09:cc:fb:c6:75:a2:
         b6:4a:96:a1:d6:bc:ea:f9:8d:b4:1f:7a:2c:f6:49:8c:b1:0d:
         d0:72:07:59:f7:a0:b0:c2:56:8a:62:96:89:01:b6:db:eb:c1:
         be:5b:26:91:3b:a3:3f:bd:5c:67:bb:07:95:cc:e2:2e:db:68:
         ec:e5:9b:00:e8:23:ae:5d:67:e6:cf:24:40:3a:49:1a:b8:b9:
         a9:08:66:5e:25:61:35:ad:d0:30:46:25:85:40:a4:8f:22:a8:
         4c:55:4d:a8:74:e7:c8:be:3d:e6:02:51:1e:b5:e6:18:33:89:
         8e:0c:ca:fd:c4:cc:00:8b:78:6f:61:43:d1:96:7d:fd:9a:53:
         41:0b:4a:2d:73:66:86:ea:c7:54:ed:fb:aa:79:b8:a8:77:51:
         27:85:9c:6e:de:56:94:6f:33:75:83:fd:bd:b9:c3:c6:5c:72:
         f0:a0:e5:d7:95:e1:5c:c5:c4:6d:b2:14:e5:a1:bb:e7:25:4e:
         34:d8:94:bc:86:de:ed:82:74:f1:86:bc:c2:97:4a:78:b7:56:
         ec:76:82:28:35:ed:76:f2:3b:37:59:f1:70:c8:ae:7f:af:0a:
         47:7c:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:54:49 2025 by rpki-client