Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131392e302f32342d3234203d3e20323731303530.roa
File:                     3138372e38342e3131392e302f32342d3234203d3e20323731303530.roa (raw, json)
Hash identifier:          AjkFwsZjou4I4FUqZhwRMJyIAI3sP8+fxU3lJz39/DQ=
Subject key identifier:   AC:60:30:AE:20:38:9D:2D:86:66:FB:4B:6A:9A:C8:53:D3:12:22:52
Certificate issuer:       /CN=77FC05774545175D19D108F204EAE421372252B0
Certificate serial:       54B2AB0828D6B4C18A629CBC413E258777387B8D
Authority key identifier: 77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131392e302f32342d3234203d3e20323731303530.roa
Signing time:             Thu 05 Jun 2025 16:02:19 +0000
ROA not before:           Thu 05 Jun 2025 15:57:19 +0000
ROA not after:            Thu 04 Jun 2026 16:02:19 +0000
asID:                     271050
IP address blocks:        187.84.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 22:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b2:ab:08:28:d6:b4:c1:8a:62:9c:bc:41:3e:25:87:77:38:7b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77FC05774545175D19D108F204EAE421372252B0
        Validity
            Not Before: Jun  5 15:57:19 2025 GMT
            Not After : Jun  4 16:02:19 2026 GMT
        Subject: CN=AC6030AE20389D2D8666FB4B6A9AC853D3122252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:60:a5:9d:50:ef:bf:e2:6a:93:be:cf:a8:55:
                    16:3a:c7:5b:65:99:ee:ae:65:01:3d:2f:31:ec:80:
                    b6:3c:5d:d1:ae:9b:34:f1:1f:80:c9:62:a0:5e:8a:
                    13:15:66:35:f7:f4:b5:54:8d:c4:d8:3b:d2:4f:a8:
                    03:33:c4:68:95:7d:41:61:0e:d3:ae:9c:9a:87:0f:
                    45:be:6d:49:1c:3a:48:a6:40:08:bf:34:44:fa:6e:
                    e6:45:fa:a4:57:69:dd:1f:46:a9:f7:15:f0:bc:fa:
                    41:d4:1a:72:ae:3c:59:d2:12:f1:ea:27:e9:78:dc:
                    16:58:ac:d2:fe:d0:e2:d9:62:d8:1d:93:52:cc:62:
                    5d:53:e8:04:1f:de:a4:c3:6c:ae:fe:49:8f:14:dc:
                    32:13:9b:65:70:36:9f:13:da:38:73:11:ec:7d:c1:
                    d3:c9:31:ed:87:fc:ed:8f:00:80:60:81:ca:92:ac:
                    79:c8:ec:f9:ce:a2:a6:ca:a2:71:c4:e2:c3:0e:9a:
                    af:02:ff:ea:9b:6d:f8:cd:8a:40:d9:79:c6:aa:2a:
                    38:e2:c6:0c:ce:49:e3:25:b1:cf:1c:35:c2:25:c6:
                    3a:c8:e3:55:0d:cd:d6:44:9c:92:e4:8d:21:3d:38:
                    3e:b9:4c:04:62:60:98:e8:17:e7:29:68:c8:fd:50:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:30:AE:20:38:9D:2D:86:66:FB:4B:6A:9A:C8:53:D3:12:22:52
            X509v3 Authority Key Identifier:
                keyid:77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131392e302f32342d3234203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ef:ac:31:7d:fa:77:1e:f9:9a:15:18:b0:46:bd:7e:26:9b:
         a0:97:79:36:d2:09:f7:bd:3a:a8:5e:df:fb:22:af:17:14:20:
         ce:b7:75:c1:6d:28:9d:66:53:75:50:70:50:b6:cb:7c:46:72:
         30:69:e5:1d:b5:00:4a:ec:6e:16:76:26:a7:3f:bf:5a:d3:fe:
         a9:39:85:fc:fc:5e:c1:72:be:f0:c1:1a:6b:93:fa:b6:01:de:
         3c:a1:08:a7:36:01:18:c9:eb:20:58:b8:ed:df:96:84:8a:1a:
         89:06:58:88:5d:3f:83:2d:fc:1c:33:34:2b:03:38:77:e3:cc:
         12:52:2d:5d:08:81:a0:d2:51:d9:7f:10:ba:72:9b:61:2a:13:
         37:11:11:85:91:98:26:f2:ab:34:18:e5:b4:4a:fd:d8:ba:bf:
         a1:e3:e2:b9:72:da:95:b3:72:0b:f8:84:44:d1:2b:80:e0:97:
         9f:f3:07:1e:f0:52:03:81:6e:66:4a:a9:a7:8b:72:00:8c:e6:
         43:7a:1e:e8:ed:ec:9e:ec:e7:7a:38:2e:a6:fc:f3:e9:27:0d:
         b5:a0:d7:66:88:89:ec:2d:2e:52:96:05:7d:9e:72:1e:d4:d3:
         f9:4c:47:e5:ab:c7:f3:46:d9:2d:cb:d7:03:5d:73:79:b4:1e:
         29:59:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:25 2025 by rpki-client