Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136302e302f32302d3230203d3e20323632343539.roa
File:                     3137372e32322e3136302e302f32302d3230203d3e20323632343539.roa (raw, json)
Hash identifier:          vFfwxqz1v5yzn/HyUNYSzLjB6caLoUU89hvd0mAcTx0=
Subject key identifier:   C0:D2:AE:B5:55:11:48:83:D1:23:6E:7B:F9:51:BB:07:61:AD:CF:2B
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       5562F02BF2F13353156F1FAEC1E4AB29134CF8EF
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136302e302f32302d3230203d3e20323632343539.roa
Signing time:             Fri 16 May 2025 21:00:25 +0000
ROA not before:           Fri 16 May 2025 20:55:25 +0000
ROA not after:            Fri 15 May 2026 21:00:25 +0000
asID:                     262459
IP address blocks:        177.22.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 01:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:62:f0:2b:f2:f1:33:53:15:6f:1f:ae:c1:e4:ab:29:13:4c:f8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: May 16 20:55:25 2025 GMT
            Not After : May 15 21:00:25 2026 GMT
        Subject: CN=C0D2AEB555114883D1236E7BF951BB0761ADCF2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:6b:b3:d3:81:95:7f:06:e6:99:c6:9a:9c:
                    52:ef:2f:c3:a8:75:36:ad:33:d7:29:23:35:c3:db:
                    77:a5:59:fa:84:08:f3:92:b7:f1:f6:0f:c5:3f:02:
                    a6:71:e2:9f:40:ef:2c:51:26:bf:ab:f7:e0:95:fb:
                    4a:e0:c7:0d:46:f7:06:01:3e:00:a0:23:dd:d9:7b:
                    84:8b:d7:96:1d:a2:02:0d:0d:d6:37:f7:52:c0:b5:
                    a3:65:33:07:2f:2a:f8:7b:ac:da:d0:5a:83:9b:3b:
                    d4:07:0e:91:73:29:46:3c:52:7d:43:8d:89:19:87:
                    fa:86:de:4c:a1:26:18:81:b4:1d:b5:25:e3:40:ac:
                    a8:a6:14:08:74:52:36:9f:82:58:19:ec:e1:62:10:
                    fe:63:a5:e3:55:d7:54:51:9c:db:93:3e:6a:e3:e3:
                    c8:e5:64:74:6c:eb:b0:a8:94:47:71:f5:88:a8:59:
                    ba:b1:ee:c8:79:9d:ac:69:04:7f:b0:a1:86:c3:63:
                    93:56:75:00:95:35:8c:ca:66:6c:22:b9:ec:85:01:
                    57:7a:cc:c8:df:0d:72:d6:fd:b6:fc:61:2d:b5:65:
                    90:8f:df:27:ce:a4:30:78:fd:1d:32:69:5c:07:6e:
                    88:28:64:b7:cd:5c:ce:91:65:45:20:0e:82:01:e6:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D2:AE:B5:55:11:48:83:D1:23:6E:7B:F9:51:BB:07:61:AD:CF:2B
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136302e302f32302d3230203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:89:0a:9d:ff:c2:45:3e:1d:e0:4d:c7:20:6a:0a:16:80:
         09:db:64:cc:31:19:7c:65:7a:0e:9a:26:0a:4b:55:e7:17:20:
         e5:82:94:f1:18:8f:9e:7a:02:44:ba:d7:38:ed:85:54:44:d2:
         40:87:d1:ff:e3:be:85:09:a0:5a:dc:34:6d:c1:04:80:b1:83:
         47:ea:ff:07:99:8a:95:1f:e2:ac:54:93:15:8b:a8:6e:85:71:
         69:66:d4:86:ce:4d:df:f6:e4:0b:4d:b4:35:24:7b:d0:09:5d:
         33:21:06:c5:0c:3c:07:45:15:2e:d0:75:0b:e4:61:11:88:80:
         a7:a4:0b:9e:0e:cf:30:cb:fe:4c:58:a6:29:1e:db:d6:57:eb:
         77:c6:11:5f:5f:d7:73:00:7b:6e:31:62:84:75:a9:ed:98:78:
         ff:6e:92:cc:63:7d:70:14:4d:8e:f8:ff:32:5b:03:d3:53:b9:
         09:83:b0:d4:09:95:62:fb:71:53:11:44:68:d0:06:a5:9d:74:
         00:82:16:cf:cb:f8:f9:1c:76:dd:50:02:b4:6a:e3:a9:8f:cb:
         13:9f:69:9f:41:af:a5:df:b0:be:2f:15:34:d4:94:57:26:76:
         52:2f:2e:c9:7f:20:50:88:f2:92:8e:ee:76:e0:ed:22:23:06:
         92:2b:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:14:34 2025 by rpki-client