Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32312d3234203d3e203532383031.roa
File:                     3137372e35322e38382e302f32312d3234203d3e203532383031.roa (raw, json)
Hash identifier:          x4cLKPY6sZa5jDBPH2tf2xfMFTtHmnSbyAA8zcPaDtM=
Subject key identifier:   44:3C:EE:5E:7B:A1:32:61:2F:AB:65:A4:91:12:C8:4D:9C:81:DD:34
Certificate issuer:       /CN=B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76
Certificate serial:       715BD0E4A167ADDFC6089402A0945AAFCC0B7D2A
Authority key identifier: B8:3A:6A:E8:DE:82:CF:A4:4A:83:D4:A5:3B:11:D9:A6:FC:3E:8E:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32312d3234203d3e203532383031.roa
Signing time:             Mon 15 Sep 2025 17:40:29 +0000
ROA not before:           Mon 15 Sep 2025 17:35:29 +0000
ROA not after:            Mon 14 Sep 2026 17:40:29 +0000
asID:                     52801
IP address blocks:        177.52.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.crl
                          rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 12:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5b:d0:e4:a1:67:ad:df:c6:08:94:02:a0:94:5a:af:cc:0b:7d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76
        Validity
            Not Before: Sep 15 17:35:29 2025 GMT
            Not After : Sep 14 17:40:29 2026 GMT
        Subject: CN=443CEE5E7BA132612FAB65A49112C84D9C81DD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:89:5c:b1:b4:48:1e:6d:8a:d2:eb:b4:c1:
                    6c:9a:79:19:4e:98:18:82:e2:ff:40:03:45:63:1d:
                    f8:5f:3c:e7:c7:f4:1f:44:5e:86:d8:34:f3:0a:81:
                    eb:7d:85:9f:97:ed:47:d9:b6:fb:57:a6:42:4f:0f:
                    03:04:8c:7c:24:75:ce:1f:fa:9b:48:88:f2:a6:54:
                    e3:fe:27:fb:9e:f4:ac:13:f6:bf:76:26:bc:90:11:
                    a7:f0:d3:d0:25:5c:e0:8f:81:6c:b2:77:3b:8c:65:
                    cb:36:ca:fa:fb:8f:04:f0:14:b9:9e:98:1d:18:56:
                    9f:9b:a4:dc:b2:67:28:27:f1:c7:8f:4c:d0:38:c8:
                    48:d6:6f:9d:20:0b:09:b3:c9:88:57:56:43:bc:44:
                    b2:fa:68:d0:07:cc:23:5d:9d:15:01:09:6f:30:e3:
                    c9:e8:4e:bf:91:73:05:28:93:9d:b2:98:16:46:39:
                    66:a4:69:f6:1b:ff:ef:2a:b6:46:a5:9d:f9:0e:61:
                    68:4c:ed:33:e5:c7:36:27:cd:56:79:08:4e:04:3c:
                    67:71:d1:32:41:0c:4e:62:bc:36:91:8b:e9:df:ed:
                    59:9f:48:43:0f:a2:7b:e6:0d:4e:88:da:d1:75:5f:
                    c0:55:a5:31:23:48:2b:2b:75:dc:e2:da:d6:60:3d:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3C:EE:5E:7B:A1:32:61:2F:AB:65:A4:91:12:C8:4D:9C:81:DD:34
            X509v3 Authority Key Identifier:
                keyid:B8:3A:6A:E8:DE:82:CF:A4:4A:83:D4:A5:3B:11:D9:A6:FC:3E:8E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83A6AE8DE82CFA44A83D4A53B11D9A6FC3E8E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32312d3234203d3e203532383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:0a:cf:2a:e5:55:80:ba:59:a6:4a:4e:da:37:4b:30:5b:
         03:ca:fd:15:1c:64:c2:7d:b4:98:9b:9f:70:8a:b7:a5:73:16:
         ab:f1:b3:11:8f:13:94:84:9f:b1:7f:b5:10:32:e6:b1:c5:70:
         a2:c3:ea:07:1e:51:81:ff:a2:8e:52:95:2d:65:c0:96:7c:c4:
         6c:a9:3d:e3:51:f8:fd:cc:29:60:6f:02:5c:38:7c:7e:a8:86:
         a4:6c:7e:ff:94:d7:a6:d5:41:68:b1:0f:ae:df:8b:02:d4:b4:
         4c:e9:43:94:b0:aa:2b:f0:ba:30:26:ef:10:f6:ed:ed:60:f2:
         f6:24:35:6e:8f:1f:1b:6a:7d:f2:e6:29:84:34:bc:0e:66:f4:
         3e:b3:fb:e1:af:22:95:ed:c5:c0:ad:3d:37:c9:e0:9c:61:c0:
         5c:de:0f:87:ac:36:21:bc:29:d2:48:4c:e1:c5:19:06:2f:fc:
         1e:59:f3:c7:72:22:6c:30:22:88:90:63:21:1d:a0:f9:c2:4a:
         ea:e6:2d:f5:c3:e5:d1:1e:aa:ae:29:ee:80:49:a5:c0:f5:7c:
         1b:c3:1c:6d:dc:bf:41:d9:45:f4:0d:04:08:20:7f:4d:1c:67:
         24:c6:30:b7:f6:cd:8d:d1:57:f9:92:46:3c:78:21:bc:a0:8a:
         e9:81:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:52:44 2025 by rpki-client