Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa
File:                     3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          66RVH+ryy0Ti/KrQj+gNhv4PTWrgTso4ZYKL2mHEpTs=
Subject key identifier:   53:64:8D:49:58:FA:E0:D1:EB:C8:54:31:82:FE:CF:22:AB:5D:8E:66
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       7CB361617E104A0E85823026AB6BC886E3B5AAEB
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa
Signing time:             Thu 29 May 2025 19:05:15 +0000
ROA not before:           Thu 29 May 2025 19:00:15 +0000
ROA not after:            Thu 28 May 2026 19:05:15 +0000
asID:                     262313
IP address blocks:        177.105.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 07:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b3:61:61:7e:10:4a:0e:85:82:30:26:ab:6b:c8:86:e3:b5:aa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: May 29 19:00:15 2025 GMT
            Not After : May 28 19:05:15 2026 GMT
        Subject: CN=53648D4958FAE0D1EBC8543182FECF22AB5D8E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:66:9f:4c:c2:42:f8:3c:a5:a0:c6:5b:38:
                    b0:a0:f2:bd:56:6a:05:5d:0c:6f:52:ab:64:db:44:
                    f4:89:e6:20:92:c5:fc:18:6d:44:6a:9f:58:d7:54:
                    fc:30:83:fb:ee:79:d9:63:f7:9b:c8:4d:b5:be:69:
                    56:1e:69:a0:65:b3:92:77:3e:26:01:87:d5:5d:8b:
                    54:0a:d5:d0:67:d4:6c:5b:3d:2d:ef:ed:7e:45:f6:
                    80:f2:c9:a7:1b:1d:22:9a:da:12:e7:53:d2:2e:cd:
                    c4:aa:a4:3f:c5:86:df:96:93:2f:f0:0b:94:c0:8c:
                    f8:6d:d1:4e:8a:27:04:8c:48:8a:02:dc:10:7d:2f:
                    3c:4a:99:88:7b:d2:41:ee:8c:30:ee:12:3b:22:0d:
                    60:61:ba:ca:31:b7:07:18:07:f8:db:03:05:a6:be:
                    d8:aa:8d:20:04:9e:19:08:aa:6f:24:9f:2c:88:25:
                    01:24:62:96:6f:5c:7a:77:99:5c:b4:f4:52:86:e9:
                    cc:59:54:2a:0b:88:cc:9a:e7:17:5b:cf:6b:4e:a9:
                    ce:47:7a:3e:e5:e0:3d:8e:52:75:ed:33:b2:d0:f9:
                    32:c3:c4:c1:4d:3a:b8:e2:78:ad:62:2f:63:c8:36:
                    8e:26:92:cb:ef:e8:38:72:e3:f7:1c:68:f2:6a:e2:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:64:8D:49:58:FA:E0:D1:EB:C8:54:31:82:FE:CF:22:AB:5D:8E:66
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:05:70:9e:a2:b9:95:09:87:84:d3:0f:72:85:ea:d6:2a:90:
         6b:e8:4d:d3:49:44:95:43:b7:a7:d9:68:45:dd:d5:85:2d:e0:
         42:92:23:43:d0:a2:26:15:42:b0:71:9e:f6:b4:e3:ea:ce:72:
         d0:a3:87:17:74:c5:f5:d2:39:e0:ed:c2:53:9e:ea:0c:3e:60:
         c4:5e:01:29:78:68:f5:57:bc:84:67:6b:50:70:14:dc:7f:50:
         22:00:19:db:f9:9d:d2:fd:7b:bf:26:f4:34:0f:39:9a:90:de:
         88:de:98:f4:0a:94:96:b6:23:c1:3c:2c:e5:da:b2:af:ec:49:
         71:30:20:b0:d8:cf:03:5f:9f:57:ac:10:8b:b9:92:7b:f2:98:
         68:ba:ec:b8:d9:fd:85:bd:ef:c6:2a:25:c3:d4:44:7a:96:c3:
         2a:4d:f2:a8:63:a9:cd:16:11:07:da:19:da:de:08:4f:48:dd:
         e8:8d:e3:15:18:4f:2a:93:41:f7:cd:85:8c:bb:96:4f:1d:ee:
         c7:5b:69:0a:54:f3:b9:2c:af:e2:c8:02:0a:40:9f:c0:f9:07:
         cf:e4:43:79:39:87:ba:ce:d0:be:2c:1a:8c:3c:92:65:53:05:
         7c:68:ea:f5:61:7a:4f:70:ea:92:f3:db:28:ea:23:d3:5b:e0:
         d4:4a:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:24:49 2025 by rpki-client