Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa
File:                     3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa (raw, json)
Hash identifier:          aZFVOMgpGQ5J4rg1azWk8+K2uFFGkeiysjVEOiSdFkY=
Subject key identifier:   57:CA:3C:B4:EE:43:66:B9:1A:A5:EA:4B:1B:6D:33:A2:8B:AC:56:33
Certificate issuer:       /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
Certificate serial:       4CE0D630EE20C5ED80C50397D34A11CC636542AA
Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa
Signing time:             Thu 06 Mar 2025 02:00:15 +0000
ROA not before:           Thu 06 Mar 2025 01:55:15 +0000
ROA not after:            Thu 05 Mar 2026 02:00:15 +0000
asID:                     262531
IP address blocks:        177.55.223.1/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl
                          rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e0:d6:30:ee:20:c5:ed:80:c5:03:97:d3:4a:11:cc:63:65:42:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
        Validity
            Not Before: Mar  6 01:55:15 2025 GMT
            Not After : Mar  5 02:00:15 2026 GMT
        Subject: CN=57CA3CB4EE4366B91AA5EA4B1B6D33A28BAC5633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:15:75:7c:5f:7c:e3:16:cf:d9:8f:01:02:
                    23:e8:93:17:a8:3d:f9:1e:e7:3d:d5:72:ed:f3:4b:
                    39:b1:35:6b:4b:57:5b:7e:d2:48:39:ad:57:36:29:
                    a4:a1:34:e6:d0:d0:89:50:00:6f:c1:b4:e3:f6:46:
                    52:4b:39:5b:c2:0f:18:d4:07:96:01:87:3d:0b:23:
                    1e:bd:7c:2d:75:b4:d2:c8:2d:b9:b0:4e:9a:e4:da:
                    15:66:fc:74:5d:05:eb:db:ee:16:d8:db:82:f9:d9:
                    22:e4:b6:9b:df:84:f8:5c:16:97:89:39:d6:7c:91:
                    7f:d3:68:4f:79:d7:d2:fa:39:b5:6f:d9:f6:43:1d:
                    6c:8f:10:c4:76:01:c7:86:35:3f:19:9a:49:61:a2:
                    02:c3:1e:bb:fa:11:08:35:6c:0c:75:85:a0:ae:e4:
                    a9:63:26:c7:9d:10:68:c1:69:7e:5a:57:bb:62:c3:
                    b2:29:cb:e0:23:cd:66:96:ef:5f:41:9a:7f:10:e6:
                    8b:24:6f:80:4d:03:50:9c:eb:d8:8a:63:69:a0:25:
                    ce:df:05:32:92:73:43:81:90:f0:9e:6d:67:91:e5:
                    af:f3:5e:c4:a0:df:5d:13:42:ff:89:d3:12:11:04:
                    66:55:63:94:b2:19:03:b0:0d:7f:0b:d9:70:b4:a8:
                    75:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:3C:B4:EE:43:66:B9:1A:A5:EA:4B:1B:6D:33:A2:8B:AC:56:33
            X509v3 Authority Key Identifier:
                keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.223.1/32

    Signature Algorithm: sha256WithRSAEncryption
         38:53:51:2b:26:b8:03:32:de:2b:5b:c2:19:1e:d5:33:fc:d7:
         a9:d1:85:23:9d:a1:9e:e7:42:cd:2a:d0:a3:73:9c:23:eb:de:
         42:99:f0:c3:80:c1:bc:d5:b0:74:24:35:eb:16:58:7c:d3:c5:
         c1:2f:81:db:b2:76:ca:b9:bf:0f:30:6b:26:65:b7:32:ca:c8:
         65:82:75:31:c1:5d:35:6b:ca:ff:df:16:14:fe:47:bc:4d:27:
         fe:e7:9c:ea:78:53:91:4d:e2:69:c1:7f:17:8f:c2:97:a0:3d:
         60:51:13:fb:3b:a3:4f:f8:21:a2:3a:63:e7:67:29:3a:c9:c5:
         f7:fd:8e:64:4d:df:86:62:34:ea:a5:54:80:b3:55:0d:7f:22:
         b8:4c:7e:3a:44:a8:db:8f:6a:c2:3d:b6:c5:dd:b2:e7:4e:fa:
         60:49:68:10:90:1a:f3:98:c9:87:ee:3e:aa:e1:c7:b2:3a:d9:
         77:d7:1d:d7:07:38:dc:0d:55:6f:45:d0:4a:c2:bf:3e:85:e6:
         0c:72:e3:d1:af:ed:62:53:b1:10:72:dc:fc:03:81:ce:e5:e6:
         1c:16:ed:31:1a:cd:83:57:d4:c3:41:05:d6:cb:1f:5e:71:da:
         81:0d:bd:4f:87:af:7c:53:ce:20:f0:14:d4:2b:54:5d:c9:05:
         37:c1:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:50:23 2025 by rpki-client