Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131362e302f32342d3234203d3e20323731303530.roa
File:                     3138372e38342e3131362e302f32342d3234203d3e20323731303530.roa (raw, json)
Hash identifier:          M9gNJhHcupsPaelaLQBTZHX/QYip7ycMykxODMZ1ZDs=
Subject key identifier:   D6:75:3C:1F:7F:88:95:92:02:E4:BB:F6:19:9C:DA:EF:68:E4:5E:DD
Certificate issuer:       /CN=77FC05774545175D19D108F204EAE421372252B0
Certificate serial:       4B1DD366B22075341D5337798FA4FB5A9EA2EB83
Authority key identifier: 77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131362e302f32342d3234203d3e20323731303530.roa
Signing time:             Thu 05 Jun 2025 16:01:41 +0000
ROA not before:           Thu 05 Jun 2025 15:56:41 +0000
ROA not after:            Thu 04 Jun 2026 16:01:41 +0000
asID:                     271050
IP address blocks:        187.84.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1d:d3:66:b2:20:75:34:1d:53:37:79:8f:a4:fb:5a:9e:a2:eb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77FC05774545175D19D108F204EAE421372252B0
        Validity
            Not Before: Jun  5 15:56:41 2025 GMT
            Not After : Jun  4 16:01:41 2026 GMT
        Subject: CN=D6753C1F7F88959202E4BBF6199CDAEF68E45EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:70:ad:dc:55:f0:6d:24:f6:c1:ca:2b:fa:
                    74:4f:64:06:e0:82:5d:15:5b:2c:6a:41:72:0e:ee:
                    4d:6d:cc:d8:ee:93:2d:0c:0f:25:3c:8b:a5:7f:96:
                    36:09:6d:be:b7:55:f3:4f:ef:57:92:5f:e9:34:6a:
                    33:dd:2d:ca:db:07:47:77:74:3b:0d:31:1e:56:7f:
                    9b:67:63:79:75:92:6d:b6:aa:45:08:ec:26:75:4d:
                    5d:63:53:35:0a:af:41:7d:0f:49:68:a7:f7:cb:2d:
                    88:f7:29:21:f9:a4:0a:b5:d1:77:bf:7e:ca:09:6f:
                    ba:c0:b0:c5:9f:2d:63:8f:c7:23:4d:43:5b:dd:fe:
                    de:07:2f:7b:a9:e2:bd:0d:47:9e:b4:14:fb:56:18:
                    40:3b:14:21:d2:d6:d3:2e:20:ed:9a:bf:d2:00:67:
                    38:5e:1f:87:fc:3a:62:f6:fb:cc:ce:4e:a0:f3:2b:
                    30:30:03:ed:55:0c:71:41:44:78:6c:61:b3:21:22:
                    4d:d2:cb:06:fc:97:ca:db:0b:26:d2:7a:bd:d3:87:
                    47:83:6e:53:4c:e8:0d:a5:b6:c5:cb:8d:81:73:c7:
                    26:42:85:04:9d:25:35:ac:b6:62:a1:44:1b:a0:00:
                    0c:5f:8d:75:d9:65:fd:be:a9:f7:cf:6c:bb:6f:36:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:75:3C:1F:7F:88:95:92:02:E4:BB:F6:19:9C:DA:EF:68:E4:5E:DD
            X509v3 Authority Key Identifier:
                keyid:77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131362e302f32342d3234203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:c8:7e:8d:f4:4e:0c:b5:60:9d:b1:dc:9e:96:b5:f7:e9:
         8b:e5:74:e4:5c:d7:c9:a4:4a:77:36:66:9d:aa:1e:0d:12:2a:
         45:74:37:ec:fa:8e:db:a2:ca:cd:b6:4c:53:d8:0f:29:5b:43:
         d6:25:fb:d9:2a:b7:5f:14:53:8a:a4:d4:7f:d8:4d:87:6a:d8:
         0e:be:a8:d4:6e:6d:ef:d7:cc:df:cd:39:55:ad:ce:ac:1d:dc:
         6a:61:af:f2:44:e5:f7:e1:c6:a9:4b:ac:a9:c4:4d:74:66:c0:
         37:4b:96:11:d7:a9:7c:99:a1:b1:a6:8d:94:2f:80:20:98:44:
         2b:61:fc:4c:d7:ee:aa:c3:33:7d:74:01:2b:43:13:f2:03:fd:
         a4:85:38:87:8b:dd:b9:b3:e2:a8:7e:93:ee:97:c3:58:58:07:
         4a:d5:97:29:ba:ef:4e:a5:01:d7:3a:d0:bf:4a:c3:c1:d7:24:
         a7:76:ef:93:65:ff:31:dd:c4:79:6c:3a:89:5f:da:ae:a9:92:
         e7:a8:f1:5f:a2:30:1a:c4:43:03:05:c8:49:e9:f8:84:c8:a7:
         46:d3:bf:e8:94:fc:2b:5d:31:0f:74:e8:a8:f5:c4:dc:65:75:
         6e:00:40:61:69:94:ca:88:2f:4e:bf:06:13:10:b1:98:fe:3b:
         f7:75:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:35:09 2025 by rpki-client