Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3332203d3e20323633353731.roa
File:                     3137372e35352e38382e302f32322d3332203d3e20323633353731.roa (raw, json)
Hash identifier:          DGttXf45KzZryqybNaUukZoMHdluRMfGLx4eBVsxaDk=
Subject key identifier:   39:C9:4D:36:1D:B7:0D:73:43:C8:45:3E:B8:FB:AE:42:D9:B9:D7:C5
Certificate issuer:       /CN=342097A4083A2B31789F16928A1E82F5C9CDA419
Certificate serial:       026415D95649CC247D5B8270C26704A241B59CCC
Authority key identifier: 34:20:97:A4:08:3A:2B:31:78:9F:16:92:8A:1E:82:F5:C9:CD:A4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3332203d3e20323633353731.roa
Signing time:             Wed 03 Sep 2025 18:16:32 +0000
ROA not before:           Wed 03 Sep 2025 18:11:32 +0000
ROA not after:            Wed 02 Sep 2026 18:16:32 +0000
asID:                     263571
IP address blocks:        177.55.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.crl
                          rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:64:15:d9:56:49:cc:24:7d:5b:82:70:c2:67:04:a2:41:b5:9c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342097A4083A2B31789F16928A1E82F5C9CDA419
        Validity
            Not Before: Sep  3 18:11:32 2025 GMT
            Not After : Sep  2 18:16:32 2026 GMT
        Subject: CN=39C94D361DB70D7343C8453EB8FBAE42D9B9D7C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:78:00:ac:90:25:0c:01:fd:c6:90:2d:9d:
                    c7:b8:0c:a0:d5:dc:ed:82:3e:a5:d4:e2:e9:0f:22:
                    27:49:90:de:3e:2d:3a:d0:f2:85:ce:51:69:10:2d:
                    b3:74:ba:68:1b:47:38:a3:17:b8:64:01:19:b2:0b:
                    bf:46:74:bd:11:82:d6:d9:37:f6:92:8f:9e:f5:20:
                    fb:8b:af:ea:de:68:c0:a1:74:9d:40:4d:6b:87:05:
                    fb:42:82:29:31:99:d9:f1:8c:c8:fd:63:f1:25:ac:
                    01:80:34:b6:2b:3c:52:4d:f6:d4:66:cd:bc:0f:5d:
                    06:2d:03:d7:cb:dc:98:77:e2:29:85:4c:15:a3:b6:
                    21:31:f1:4a:df:71:18:24:9e:69:e8:59:17:1f:a2:
                    5b:7c:15:17:68:23:66:8e:32:19:19:56:a0:7f:33:
                    de:f7:bc:43:a9:4e:b8:9a:1d:b4:84:e1:17:53:88:
                    d9:d3:05:c0:3c:68:1e:b9:b4:84:e0:19:5c:7a:5d:
                    c9:90:a5:3c:4a:c1:cf:b9:23:8b:54:e6:9a:2c:5f:
                    da:2f:f7:d7:68:bd:73:86:b8:18:af:85:2d:86:b9:
                    0c:be:15:d2:15:48:42:12:ac:5c:73:1d:a2:1e:f2:
                    18:ca:b5:01:5f:d9:94:64:f7:97:d2:e6:6c:61:66:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C9:4D:36:1D:B7:0D:73:43:C8:45:3E:B8:FB:AE:42:D9:B9:D7:C5
            X509v3 Authority Key Identifier:
                keyid:34:20:97:A4:08:3A:2B:31:78:9F:16:92:8A:1E:82:F5:C9:CD:A4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/342097A4083A2B31789F16928A1E82F5C9CDA419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342097A4083A2B31789F16928A1E82F5C9CDA419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3332203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:ab:59:40:51:bc:57:47:7c:6d:9e:45:ac:47:c8:36:ed:99:
         1a:ef:e3:80:eb:48:84:56:f8:62:9a:ef:ea:e9:a0:2d:ee:d7:
         16:37:f6:3b:c8:80:bf:00:12:65:e4:e3:a0:4d:55:bf:8e:85:
         b0:bc:80:5b:9a:b0:94:a3:79:7e:f0:c0:fa:bd:86:41:28:c5:
         b9:49:8f:d5:d0:8d:00:7d:21:40:48:41:65:45:dc:8b:95:80:
         fd:a0:d1:de:9e:6d:01:5c:11:a8:97:80:2b:8b:0a:16:31:b5:
         86:fd:99:e2:e9:00:da:d2:49:80:7b:08:47:01:2c:20:46:76:
         f5:d6:3c:a2:44:59:86:f2:3b:48:f6:5f:2d:eb:af:80:d1:68:
         46:17:67:a9:26:1e:83:1f:93:a9:80:40:33:28:70:a5:c4:56:
         6a:b8:27:80:01:3b:b7:c1:33:ad:df:45:67:79:89:89:fe:b6:
         51:ff:f4:17:69:f6:85:aa:1b:14:7c:53:87:ad:e3:a4:ef:7f:
         20:60:47:b8:e5:5b:35:55:db:34:03:4a:ca:b9:23:bb:c6:aa:
         57:f4:28:99:47:71:9d:e2:58:2a:cd:58:0e:f7:07:16:a6:f1:
         5f:56:dd:8d:3d:f9:94:af:77:95:69:cf:df:b1:f1:98:d7:88:
         85:8e:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:05 2025 by rpki-client