Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3132382e302f32322d3332203d3e20323632343436.roa
File:                     3137372e35322e3132382e302f32322d3332203d3e20323632343436.roa (raw, json)
Hash identifier:          ESUp44aTGK1ik5FS8ufWsb1/mN6nBwsJVYylAavg1tY=
Subject key identifier:   A0:84:50:A7:9F:D8:15:67:A7:4F:40:A7:FB:73:F8:2F:58:AC:71:68
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       3673447F1AE522EC6992893DF82277B5151E5391
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3132382e302f32322d3332203d3e20323632343436.roa
Signing time:             Thu 10 Jul 2025 19:11:49 +0000
ROA not before:           Thu 10 Jul 2025 19:06:49 +0000
ROA not after:            Thu 09 Jul 2026 19:11:49 +0000
asID:                     262446
IP address blocks:        177.52.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 18:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:73:44:7f:1a:e5:22:ec:69:92:89:3d:f8:22:77:b5:15:1e:53:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Jul 10 19:06:49 2025 GMT
            Not After : Jul  9 19:11:49 2026 GMT
        Subject: CN=A08450A79FD81567A74F40A7FB73F82F58AC7168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d4:52:dc:bd:30:41:bd:5f:ac:f4:b7:6e:cc:
                    62:17:fc:0c:aa:c1:85:e7:41:11:26:02:c5:83:51:
                    d5:3f:cf:83:47:ff:cf:6c:07:97:09:c9:23:0a:a5:
                    53:9c:6c:b8:0d:29:d1:97:ad:2e:15:e2:3c:ae:71:
                    7e:9d:79:db:fc:c9:8b:35:67:2d:c4:61:de:67:7e:
                    4b:9b:25:b7:60:77:5b:05:26:81:c3:aa:e3:6e:09:
                    a8:58:e9:2a:08:fa:20:b6:4c:ad:31:32:fd:19:99:
                    fe:b4:00:9d:5a:22:c3:ad:8d:b1:e2:98:98:41:04:
                    74:af:ac:cc:11:dc:9e:e9:51:77:61:22:e1:89:be:
                    73:ad:01:d1:18:77:d8:9e:58:97:12:16:c3:1d:19:
                    31:a2:70:54:28:43:aa:a1:f9:b5:12:97:37:07:d3:
                    52:0f:1e:d0:ed:28:04:9c:f8:30:0d:55:f4:4f:08:
                    41:1f:00:f6:0d:f9:e6:c9:e5:e7:6b:e3:94:1b:d7:
                    66:7e:a8:a8:39:58:bb:a5:6c:91:c6:77:1f:d8:90:
                    a3:3e:90:76:4d:22:4b:e8:64:e2:1c:dd:7d:ef:60:
                    e7:fd:f7:ec:0a:e5:fb:bd:20:e4:aa:39:10:ad:bf:
                    7a:40:82:0d:5b:bf:58:8d:83:07:cb:a6:bf:05:b3:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:50:A7:9F:D8:15:67:A7:4F:40:A7:FB:73:F8:2F:58:AC:71:68
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3132382e302f32322d3332203d3e20323632343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:8f:70:09:a9:24:bb:6a:8b:ff:c9:1a:9a:e2:67:f4:9c:0d:
         85:5f:9c:7d:1f:c0:63:d4:09:e6:f6:64:6a:83:81:08:e5:8f:
         bc:f2:c0:ff:9c:2b:2c:c0:47:7d:75:c7:55:5b:90:82:d9:27:
         98:79:46:96:48:9b:0f:61:be:f9:18:cf:e6:c0:cb:ae:d4:59:
         39:bb:59:33:97:19:b7:a1:09:e4:6a:5e:6b:fe:7f:47:dc:d0:
         6b:0f:40:e0:22:48:63:53:96:a9:78:24:b8:15:53:93:da:2d:
         fa:c7:47:1e:91:72:2f:b5:91:6a:28:d1:fd:e6:80:77:ba:bd:
         77:0c:93:67:29:b6:25:0b:6f:6a:d9:76:28:4b:6f:3d:ae:31:
         78:c2:06:30:29:ab:f3:7a:8b:66:e8:56:a9:e8:42:0b:11:96:
         8b:55:48:cf:52:30:7b:20:7b:0e:3c:fb:59:21:26:00:29:e3:
         34:c0:b9:31:08:33:43:40:0c:f5:a1:78:12:13:85:71:54:37:
         4e:7a:39:65:5c:cb:16:26:c4:9f:08:27:b1:38:eb:1f:cd:c1:
         d0:66:2b:97:e9:c4:09:81:5d:47:c2:e7:b8:72:ed:0e:d6:36:
         e8:cf:a4:e1:cc:47:7e:e3:58:b8:b5:d3:fa:7b:c9:f0:e4:cc:
         9f:32:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:34 2025 by rpki-client