Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa
File:                     3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          AQFyRHBhcmTJSZvONCP5Qy17VXk+dXWPQ2CSVG+uIls=
Subject key identifier:   0B:E8:09:1A:53:C8:4A:98:9A:EC:2C:96:F1:17:E7:28:E5:30:8F:43
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       4FF42994898CB7F9776C6544B3EECED721C264AD
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa
Signing time:             Sat 14 Jun 2025 01:32:07 +0000
ROA not before:           Sat 14 Jun 2025 01:27:07 +0000
ROA not after:            Sat 13 Jun 2026 01:32:07 +0000
asID:                     262507
IP address blocks:        177.55.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f4:29:94:89:8c:b7:f9:77:6c:65:44:b3:ee:ce:d7:21:c2:64:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jun 14 01:27:07 2025 GMT
            Not After : Jun 13 01:32:07 2026 GMT
        Subject: CN=0BE8091A53C84A989AEC2C96F117E728E5308F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:ca:0c:d0:d0:51:da:ac:a0:34:8f:28:81:
                    45:ce:b8:09:5e:51:4b:02:d9:87:ea:ad:73:23:40:
                    0d:c2:e0:50:bb:00:eb:0f:89:8d:33:25:b4:d9:06:
                    35:6e:4c:7c:b8:5f:48:c7:20:d9:29:05:dd:c5:58:
                    49:2b:33:6f:71:1f:26:a3:d1:49:93:12:57:0d:2e:
                    8f:58:10:41:35:7c:d5:78:b3:a5:98:52:11:78:7e:
                    f2:73:35:dd:b1:b6:66:0b:c5:15:d6:59:4d:93:4d:
                    be:91:7b:60:9e:9f:ab:3a:bc:86:c5:fe:3c:17:30:
                    5b:d4:3d:5a:27:6e:67:9b:7e:92:da:59:af:1c:69:
                    9c:45:dc:f6:3c:6e:6c:78:dc:81:34:21:50:db:e5:
                    67:11:e5:72:d5:14:31:6a:4a:ce:04:dc:ec:3b:1a:
                    b7:7f:56:36:17:33:b1:20:23:10:27:55:10:00:46:
                    2a:14:16:51:28:28:d1:4a:90:64:48:07:2a:a3:43:
                    8d:2c:8b:0f:eb:b3:68:49:ba:23:cb:b8:f3:c4:18:
                    eb:f7:ad:93:fb:90:2d:d6:69:b6:9f:0a:94:b8:67:
                    7f:93:41:6d:5a:f7:3f:5f:80:61:f2:cc:1b:be:3e:
                    6f:81:20:ee:6b:d1:3b:b9:98:5f:8f:54:1e:21:ef:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E8:09:1A:53:C8:4A:98:9A:EC:2C:96:F1:17:E7:28:E5:30:8F:43
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:55:41:b0:57:55:67:bb:c5:b0:87:0a:08:fd:95:17:82:
         b9:89:58:da:4d:36:05:42:2a:26:6d:67:91:42:a7:77:7c:cf:
         21:eb:eb:2a:32:b3:69:b8:e0:a1:aa:c8:75:4c:c8:47:38:36:
         c7:0f:9e:d3:04:92:d0:d0:92:ec:3a:a6:4f:c0:15:5f:4b:bb:
         a7:7e:c0:f7:e8:30:3d:09:2e:d1:13:fa:7a:2e:de:ae:a1:c7:
         1b:44:18:cd:30:37:2d:f4:d4:46:4c:47:36:ea:67:a7:97:67:
         9e:a1:01:1b:1c:47:3a:4b:d6:54:b5:9b:57:c3:37:c7:ea:24:
         a0:85:a2:9b:ff:9d:a8:a8:aa:71:54:6d:49:2f:5a:76:92:48:
         8a:7c:80:d8:69:22:9e:3e:fc:d9:2e:a1:b3:8d:fc:8f:de:a0:
         63:95:4f:73:d0:dd:a7:aa:0a:17:dc:65:19:da:fa:28:57:93:
         d3:02:94:2d:0b:33:ec:bb:9b:b1:a8:25:e7:fc:e5:46:36:a1:
         e8:63:39:ee:6d:85:35:b0:c4:70:bf:ca:2b:8a:f1:d9:50:d3:
         43:ac:57:d1:d7:51:f8:b9:e5:3b:73:d7:02:da:28:4e:62:22:
         f9:4a:39:ee:fc:89:78:09:b4:05:f6:fb:24:3f:36:d7:e6:bd:
         ca:9d:30:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT/QplImMt/l3bGVEs+7O1yHCZK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFDQkU4Mzc5NjRBMTgxMDEwRTVFQkNCQUJENzdFNzI3
RUJBMEE3MTAeFw0yNTA2MTQwMTI3MDdaFw0yNjA2MTMwMTMyMDdaMDMxMTAvBgNV
BAMTKDBCRTgwOTFBNTNDODRBOTg5QUVDMkM5NkYxMTdFNzI4RTUzMDhGNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLMoM0NBR2qygNI8ogUXOuAle
UUsC2YfqrXMjQA3C4FC7AOsPiY0zJbTZBjVuTHy4X0jHINkpBd3FWEkrM29xHyaj
0UmTElcNLo9YEEE1fNV4s6WYUhF4fvJzNd2xtmYLxRXWWU2TTb6Re2Cen6s6vIbF
/jwXMFvUPVonbmebfpLaWa8caZxF3PY8bmx43IE0IVDb5WcR5XLVFDFqSs4E3Ow7
Grd/VjYXM7EgIxAnVRAARioUFlEoKNFKkGRIByqjQ40siw/rs2hJuiPLuPPEGOv3
rZP7kC3WabafCpS4Z3+TQW1a9z9fgGHyzBu+Pm+BIO5r0Tu5mF+PVB4h74GHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUC+gJGlPISpia7CyW8RfnKOUwj0MwHwYDVR0j
BBgwFoAU+svoN5ZKGBAQ5evLq9d+cn66CnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWhGNUZZcTNUaVJWWE1ORER6RUpwOW5FTEdETDFDdjdRVndoRjg2d1hS
QTUvMC9GQUNCRTgzNzk2NEExODEwMTBFNUVCQ0JBQkQ3N0U3MjdFQkEwQTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQ0JFODM3OTY0QTE4MTAx
MEU1RUJDQkFCRDc3RTcyN0VCQTBBNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVoRjVGWXEzVGlSVlhNTkREekVKcDluRUxHREwxQ3Y3UVZ3aEY4NndYUkE1LzAv
MzEzNzM3MmUzNTM1MmUzMTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxN6gwDQYJKoZIhvcNAQELBQADggEBAI72VUGw
V1Vnu8WwhwoI/ZUXgrmJWNpNNgVCKiZtZ5FCp3d8zyHr6yoys2m44KGqyHVMyEc4
NscPntMEktDQkuw6pk/AFV9Lu6d+wPfoMD0JLtET+nou3q6hxxtEGM0wNy301EZM
RzbqZ6eXZ56hARscRzpL1lS1m1fDN8fqJKCFopv/naioqnFUbUkvWnaSSIp8gNhp
Ip4+/NkuobON/I/eoGOVT3PQ3aeqChfcZRna+ihXk9MClC0LM+y7m7GoJef85UY2
oehjOe5thTWwxHC/yiuK8dlQ00OsV9HXUfi55Ttz1wLaKE5iIvlKOe78iXgJtAX2
+yQ/NtfmvcqdMJw=
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:14:57 2025 by rpki-client