Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136372e302f32342d3332203d3e20323632353037.roa
File:                     3137372e35352e3136372e302f32342d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          NIEGM5AslHIM6T11I0mz2s4e6q9XisYj77N/kVpSE44=
Subject key identifier:   51:8B:FD:98:F6:F3:66:8D:B3:10:6C:EF:CB:C2:F7:FF:63:4B:D2:7E
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       2A2475514A006957C71DAA92529BEC0245438D7E
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136372e302f32342d3332203d3e20323632353037.roa
Signing time:             Sat 14 Jun 2025 01:32:07 +0000
ROA not before:           Sat 14 Jun 2025 01:27:07 +0000
ROA not after:            Sat 13 Jun 2026 01:32:07 +0000
asID:                     262507
IP address blocks:        177.55.167.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:24:75:51:4a:00:69:57:c7:1d:aa:92:52:9b:ec:02:45:43:8d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jun 14 01:27:07 2025 GMT
            Not After : Jun 13 01:32:07 2026 GMT
        Subject: CN=518BFD98F6F3668DB3106CEFCBC2F7FF634BD27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:00:27:33:34:89:d6:59:f6:53:1b:36:e2:
                    dc:ce:05:69:00:a6:1e:8c:64:3b:c0:2c:28:56:d5:
                    50:90:d8:7a:8f:47:d0:f8:1e:fd:a1:54:33:dc:62:
                    51:6e:80:2f:d5:78:e9:db:35:69:db:d7:33:fb:71:
                    a2:c9:29:9a:7e:f2:31:a9:dd:cb:ca:19:c7:28:86:
                    b0:30:4b:68:69:61:43:49:c8:6b:a2:e6:9e:e7:52:
                    c1:ba:e7:aa:34:85:f2:22:f4:c4:cd:72:34:de:21:
                    96:2e:fa:41:2b:d3:27:5d:de:af:12:af:5f:94:99:
                    c0:1f:68:37:95:bb:99:cc:67:6d:1a:0d:6c:8d:09:
                    22:6f:42:98:95:d5:cd:03:ed:7b:bd:ec:dd:ff:ae:
                    d3:2e:7c:a8:57:a8:dc:db:4a:84:a1:ec:3a:4a:e5:
                    cb:87:f5:34:28:97:3f:0c:e8:52:81:02:e9:29:f9:
                    85:5a:3d:5e:43:9c:03:06:0a:ae:7d:17:9a:e0:01:
                    39:f1:c3:f0:0d:5e:27:8f:f4:45:72:05:59:88:de:
                    4f:f7:60:ff:ba:d2:74:9b:48:f7:17:f6:64:50:66:
                    0a:10:b3:91:ef:6e:7b:76:fe:b1:51:cf:a3:7b:63:
                    6c:cc:b0:0e:01:0e:3b:05:91:dc:8c:28:f0:55:de:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8B:FD:98:F6:F3:66:8D:B3:10:6C:EF:CB:C2:F7:FF:63:4B:D2:7E
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136372e302f32342d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:dd:fa:f9:b0:21:a9:0c:0d:83:c2:b8:46:ad:1d:f4:56:
         ea:0b:f5:07:32:cc:ea:7d:dd:a5:35:ee:28:ba:24:0c:2a:78:
         fc:7d:b1:f5:71:62:cb:93:89:a5:44:ec:7c:8f:f5:4e:39:a7:
         f1:26:dc:4c:27:04:a0:f1:a4:78:9a:18:f0:da:0c:38:b2:ef:
         40:24:24:9e:70:7c:83:4d:2f:94:44:ef:21:af:db:a5:10:1f:
         94:d8:72:d8:2b:33:d3:36:04:99:ab:38:b6:c1:85:5d:8f:b6:
         a9:50:0a:aa:7c:1e:6b:d4:64:69:11:91:5a:de:96:39:b9:b9:
         51:b6:dd:ba:2a:36:3c:10:85:d1:71:e5:e9:b4:89:2e:21:64:
         5e:44:bd:28:00:ed:02:6f:99:3e:09:92:52:95:5c:58:cd:ba:
         64:c1:f3:dc:1b:af:67:77:36:0c:8c:31:36:6a:80:e2:f4:40:
         b0:86:3b:72:45:a3:63:6b:09:ce:a0:1c:86:fa:e9:e4:06:0f:
         3f:04:77:73:f7:f6:2a:f4:36:b7:bd:5a:1a:f7:76:dc:4c:eb:
         70:ed:40:2e:0c:66:e7:67:bc:15:be:7e:68:64:97:47:7f:b3:
         8b:f7:2b:d3:f3:6e:44:ba:db:e3:67:d6:da:f3:8c:46:dd:37:
         11:03:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:11:31 2025 by rpki-client