Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa
File:                     3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa (raw, json)
Hash identifier:          xjGiboFURCaKzC9y0ok0ZG3l+n3Q+QUyLTkU5N0EF/o=
Subject key identifier:   EF:18:8D:73:D0:CC:F0:27:10:2D:CE:A3:DA:E4:64:27:CD:B5:E5:3B
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       6DC42C1902BEEC8743BAFA78F0A5E5CB9ADF709A
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa
Signing time:             Fri 16 May 2025 21:00:25 +0000
ROA not before:           Fri 16 May 2025 20:55:25 +0000
ROA not after:            Fri 15 May 2026 21:00:25 +0000
asID:                     262459
IP address blocks:        177.22.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 14:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:2c:19:02:be:ec:87:43:ba:fa:78:f0:a5:e5:cb:9a:df:70:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: May 16 20:55:25 2025 GMT
            Not After : May 15 21:00:25 2026 GMT
        Subject: CN=EF188D73D0CCF027102DCEA3DAE46427CDB5E53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:a1:01:79:09:a2:72:b7:9c:d5:06:46:2f:
                    38:b4:3a:9d:9f:6a:d3:2f:d5:49:23:bb:51:cd:3d:
                    43:ce:fa:da:46:90:e4:c5:72:d3:bf:51:14:73:81:
                    5a:8d:f8:dc:d7:33:57:a0:ec:22:70:03:12:d0:ef:
                    ab:0c:fe:90:34:11:9a:22:ce:e6:b4:af:73:e3:f7:
                    02:c7:76:2c:2f:6d:15:f4:e9:e0:b7:f9:5c:62:5f:
                    b8:0c:f1:74:75:ae:06:d3:3b:4b:ab:79:fb:20:55:
                    9c:f6:12:c8:17:c7:39:95:39:c8:fd:ba:b6:9c:a1:
                    a2:23:e9:08:ad:a3:6c:2f:c8:99:21:fc:6e:98:7c:
                    8a:de:16:6d:ab:2e:17:aa:50:43:3d:93:50:e3:fa:
                    52:7e:bc:10:cd:73:55:9c:cb:cc:34:04:c8:51:33:
                    7a:71:ea:81:5a:b2:5a:29:b3:83:45:85:78:ce:0d:
                    0c:7c:8a:c0:f3:66:91:2f:bc:bb:5d:ae:9b:e6:16:
                    29:b0:1d:5e:d7:87:02:70:07:3e:67:ef:38:f7:8f:
                    91:45:88:80:13:6f:70:cd:8a:12:a7:f3:ef:77:52:
                    8d:cd:67:53:d9:af:0e:16:27:bf:b3:8d:52:4f:10:
                    cd:fc:a7:24:42:41:16:a8:5a:08:46:5b:86:d3:0f:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:18:8D:73:D0:CC:F0:27:10:2D:CE:A3:DA:E4:64:27:CD:B5:E5:3B
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136382e302f32312d3231203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e0:68:b3:ef:17:b8:af:d7:aa:d5:2a:77:6a:b2:87:23:94:2e:
         2f:d3:12:1d:b8:d3:64:90:88:23:77:53:22:66:f9:5c:50:42:
         58:4c:34:41:37:a6:63:4f:18:25:75:8a:2d:16:4a:69:14:0d:
         14:5b:36:a4:ec:a1:1e:d6:b2:ba:4a:11:3b:7d:ce:ba:d4:f1:
         99:e8:00:e8:27:c1:90:c8:f6:91:f6:d0:5e:22:be:7d:03:27:
         7c:a5:ca:e3:88:67:f7:44:d9:47:f8:c2:09:61:ae:9a:23:0c:
         af:af:43:71:34:c2:7d:3f:6d:b0:ec:2f:06:80:ce:05:a4:17:
         b1:db:6f:ea:c7:ef:f7:a4:8b:7c:f0:91:9a:d9:0c:ae:68:0c:
         6f:8a:75:b3:4c:bd:69:d1:82:6e:15:44:f0:98:90:26:03:25:
         15:cd:49:4c:c2:d7:6f:d4:e9:c0:e8:5d:9e:7a:17:da:5a:b3:
         d9:1d:6a:16:e9:56:5a:6b:c7:c9:66:c7:ea:59:39:c9:f7:6a:
         dd:05:9d:87:09:ea:27:d8:a5:a3:cc:6d:b0:30:8b:89:4e:3b:
         ed:2f:ac:73:23:bb:ad:95:98:2a:89:8b:91:6b:01:cc:57:18:
         93:77:1b:ed:46:1d:43:fe:81:f2:ee:55:43:1e:b0:5f:34:48:
         79:98:8d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:00:19 2025 by rpki-client