Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          qe9Jff+tGp27uj0Fv/r4SWJj8LOqDymfhQOPFTvPvVA=
Subject key identifier:   14:9F:03:F6:3A:24:E3:C6:CC:4D:07:CF:FA:78:2E:87:7A:41:94:78
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       2C7378223EC67598881C0C610335FF198BF0577F
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa
Signing time:             Tue 03 Jun 2025 21:25:52 +0000
ROA not before:           Tue 03 Jun 2025 21:20:52 +0000
ROA not after:            Tue 02 Jun 2026 21:25:52 +0000
asID:                     52587
IP address blocks:        177.87.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:78:22:3e:c6:75:98:88:1c:0c:61:03:35:ff:19:8b:f0:57:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jun  3 21:20:52 2025 GMT
            Not After : Jun  2 21:25:52 2026 GMT
        Subject: CN=149F03F63A24E3C6CC4D07CFFA782E877A419478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:68:c6:d0:4a:92:54:55:c9:ab:c5:fa:94:
                    54:ed:db:96:d2:77:18:b1:24:d3:69:34:b7:d4:ec:
                    4f:f9:45:14:21:10:09:6e:a6:67:a6:2e:a4:62:67:
                    e1:75:6f:24:68:61:3b:7b:12:55:18:90:81:4c:33:
                    57:e5:b8:20:72:7f:03:68:b1:18:5a:aa:6a:05:f8:
                    b5:49:b1:62:e4:b9:bb:4e:57:09:22:53:58:88:20:
                    9e:5d:4f:5e:00:ee:fd:21:79:f0:26:7b:af:b9:96:
                    47:fb:3d:6b:10:4b:d4:c3:12:ff:d7:fc:fc:88:56:
                    33:a3:2a:e8:fb:c9:4d:cc:f5:47:a2:67:fb:a7:3e:
                    11:d5:36:d4:3f:18:fc:40:9e:c4:99:38:5c:ec:ed:
                    80:fe:b3:66:28:c8:a3:c5:e3:f3:46:da:56:5a:8e:
                    f4:f0:e7:49:1c:ee:bc:d2:16:4f:47:6f:b1:d0:ca:
                    47:10:34:78:3a:d2:05:63:5b:96:cb:61:9e:16:75:
                    91:b3:c8:c0:ae:33:55:3a:82:79:c1:2f:d4:7d:79:
                    17:87:6f:64:d1:a0:f1:4d:57:63:69:44:1a:bb:11:
                    10:c8:70:4f:30:a1:82:32:2a:ff:c7:b4:04:cf:80:
                    22:2d:7e:12:e3:99:b7:81:d7:57:d2:37:50:3e:b9:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9F:03:F6:3A:24:E3:C6:CC:4D:07:CF:FA:78:2E:87:7A:41:94:78
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:fd:18:a1:a0:45:ab:20:53:7f:52:28:d3:9a:50:61:ad:ae:
         4c:33:c0:2a:a4:b1:33:28:b1:51:77:1e:50:38:93:19:9e:b0:
         05:16:8d:60:41:7b:95:4f:e7:20:55:69:a6:4e:6c:f6:08:cc:
         cd:4d:9d:0c:32:6c:e9:ee:19:98:ce:3d:25:6a:eb:f4:8e:7b:
         cc:6a:52:1d:9c:85:9c:d1:00:cf:50:a3:f3:fc:cd:6a:ad:04:
         38:c8:37:e3:e5:9e:59:c1:4f:6a:1f:68:d9:b1:f6:d5:d1:ba:
         aa:4a:73:19:4f:23:69:28:9b:c7:46:09:cc:ed:d4:b3:c0:e9:
         b8:49:08:04:a3:10:25:01:a6:9c:90:96:f7:de:76:f0:18:68:
         48:b4:8a:b9:5e:3e:d3:83:59:b1:44:02:6c:fc:c5:03:cc:80:
         a7:b7:2a:bb:6e:83:38:71:98:2a:99:78:b5:42:e6:5d:28:c8:
         ab:54:0a:ac:08:44:97:37:76:16:e7:89:3e:d3:26:3f:27:e8:
         91:98:71:67:17:9b:ba:5c:1d:15:0e:94:08:84:5d:92:f8:e9:
         8c:86:68:39:a2:26:5e:fa:b1:b8:22:2a:ba:b7:ec:37:ca:52:
         be:49:0e:87:5a:56:fc:65:4a:85:4f:20:2e:34:da:cd:21:36:
         b0:15:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:38:36 2025 by rpki-client