Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/3137372e39332e3139322e302f31392d3234203d3e203533303735.roa
File:                     3137372e39332e3139322e302f31392d3234203d3e203533303735.roa (raw, json)
Hash identifier:          rRpRIdcP9Yu5WrS5vMJ/eXcDS0b/t7hTt7y9tD3StKo=
Subject key identifier:   7F:7D:C4:9B:15:1C:A7:B1:C8:C6:F3:6C:2F:91:71:8A:B8:A0:DB:E1
Certificate issuer:       /CN=BA068D5846A4AF59663BC88CA78AED0F7F45CCD1
Certificate serial:       37DD45EAD08F920BDE4F9633A85D8919DEBAC682
Authority key identifier: BA:06:8D:58:46:A4:AF:59:66:3B:C8:8C:A7:8A:ED:0F:7F:45:CC:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/3137372e39332e3139322e302f31392d3234203d3e203533303735.roa
Signing time:             Sat 17 May 2025 14:36:01 +0000
ROA not before:           Sat 17 May 2025 14:31:01 +0000
ROA not after:            Sat 16 May 2026 14:36:01 +0000
asID:                     53075
IP address blocks:        177.93.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 06:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:dd:45:ea:d0:8f:92:0b:de:4f:96:33:a8:5d:89:19:de:ba:c6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA068D5846A4AF59663BC88CA78AED0F7F45CCD1
        Validity
            Not Before: May 17 14:31:01 2025 GMT
            Not After : May 16 14:36:01 2026 GMT
        Subject: CN=7F7DC49B151CA7B1C8C6F36C2F91718AB8A0DBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:f4:99:81:7a:a8:c4:7c:65:e8:d4:b1:4f:
                    14:dc:3b:4b:29:1a:a9:67:2d:5a:d1:4b:fa:c1:6e:
                    c4:82:10:58:e7:75:04:32:02:9b:98:67:11:a4:1b:
                    9b:2c:89:0d:3a:d1:5a:aa:2d:87:cb:75:0f:b7:f6:
                    ac:22:00:9e:da:6e:5e:e1:e7:af:0c:fb:a8:47:b6:
                    53:84:58:bb:6f:23:8b:59:2a:63:58:39:0d:a3:26:
                    4a:4a:86:f7:e9:b3:9e:08:14:51:2e:9a:1b:a6:95:
                    4f:91:ff:2b:a6:4d:17:34:54:3b:52:81:d9:c6:ff:
                    8f:f1:35:11:63:f5:c5:85:8a:5f:0e:ba:63:e3:9d:
                    6a:7d:1e:3b:dc:b7:a7:ad:73:2a:ca:b1:07:42:b6:
                    69:c7:29:af:e6:65:7e:51:31:10:d6:ea:fb:bc:05:
                    ae:0e:ee:39:32:ef:c7:ac:94:b7:37:8c:76:db:e8:
                    59:43:c0:b6:6e:ad:c7:f0:db:25:dd:57:63:b1:28:
                    2d:40:ce:90:07:08:36:f7:f5:63:63:c4:91:7f:4e:
                    d6:a6:5e:14:df:65:86:c8:1b:f0:3f:8f:46:4c:01:
                    4c:37:2b:31:fb:bc:9e:e4:2f:2b:15:fa:25:8f:6a:
                    86:64:19:40:e6:ee:16:e9:51:c4:46:13:57:a9:d1:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7D:C4:9B:15:1C:A7:B1:C8:C6:F3:6C:2F:91:71:8A:B8:A0:DB:E1
            X509v3 Authority Key Identifier:
                keyid:BA:06:8D:58:46:A4:AF:59:66:3B:C8:8C:A7:8A:ED:0F:7F:45:CC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/3137372e39332e3139322e302f31392d3234203d3e203533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:06:d7:9c:6c:68:b4:42:41:67:d8:a9:b8:6e:6f:d2:58:09:
         33:e1:47:0d:2c:a2:5c:dd:59:d4:76:4d:4e:ee:12:06:9f:05:
         f3:db:2e:91:eb:9d:25:b2:ae:15:49:87:47:8a:5d:15:30:5c:
         ab:a9:6f:d5:e0:ff:46:0a:8f:e6:bc:42:65:e9:95:c6:8e:ff:
         95:54:47:52:7b:08:ff:59:d8:6d:9f:63:c5:cc:5e:01:fb:36:
         a5:bc:2d:7a:f0:88:b0:53:dd:a8:48:a3:b7:f7:01:9e:aa:aa:
         e6:30:ac:2b:16:57:02:0e:e1:b9:3e:79:7c:12:af:55:33:e0:
         a8:04:ea:cd:25:ff:31:13:d4:2b:ba:4f:0f:8f:79:59:3a:a6:
         42:51:89:3f:6a:91:45:1a:ab:0f:a3:8c:e6:f4:17:1d:10:af:
         91:dd:10:1e:a5:7d:a1:ac:5c:0f:1d:7e:4f:6a:b7:a8:21:eb:
         18:b3:48:5c:55:25:31:72:b9:37:9b:ff:cc:2f:7b:2b:77:42:
         9a:25:38:e3:ff:29:5b:f5:12:d1:b5:f1:b8:59:b3:57:03:7c:
         fa:8e:bc:3a:75:cd:a8:5c:0a:68:91:2e:94:b9:ef:33:58:49:
         8c:8e:0d:84:66:9c:69:5d:d6:81:b3:dd:12:fa:36:ae:10:c0:
         1c:04:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:18 2025 by rpki-client