Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230332e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230332e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          IDaJJjIwRkalTiqK0J3wyePr87APf8T4eQ7uvcqZAhI=
Subject key identifier:   A4:2F:7A:08:D2:7C:55:99:37:77:BB:3E:4F:1F:28:59:FA:F4:C0:E7
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       2E738F70526D339CA717D2EE73BAC9CBA715FED0
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230332e302f32342d3234203d3e203532353837.roa
Signing time:             Tue 03 Jun 2025 21:25:55 +0000
ROA not before:           Tue 03 Jun 2025 21:20:55 +0000
ROA not after:            Tue 02 Jun 2026 21:25:55 +0000
asID:                     52587
IP address blocks:        177.87.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:73:8f:70:52:6d:33:9c:a7:17:d2:ee:73:ba:c9:cb:a7:15:fe:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jun  3 21:20:55 2025 GMT
            Not After : Jun  2 21:25:55 2026 GMT
        Subject: CN=A42F7A08D27C55993777BB3E4F1F2859FAF4C0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:c6:e4:77:5a:c6:4f:06:7e:db:a1:a2:37:
                    a9:91:11:cf:e9:be:e1:bb:15:8a:08:f6:9c:54:fc:
                    32:a4:25:79:2b:f5:2a:2c:2f:ae:f3:97:0d:d1:52:
                    19:b3:96:a9:d2:72:75:00:df:97:0c:f5:13:82:db:
                    38:e5:0b:26:b9:1b:4d:e2:a5:7b:23:4a:f4:b4:58:
                    93:2a:94:65:7a:97:54:73:a6:41:d4:c1:97:4f:2a:
                    37:e7:02:63:53:78:7d:77:5b:07:98:87:28:36:30:
                    54:90:8c:c6:ec:cc:e4:2e:d6:ae:63:87:68:fd:00:
                    c4:b4:2c:32:8b:67:e4:3f:60:b9:20:eb:36:25:ee:
                    71:2e:3e:0f:bd:6e:27:e6:ba:f2:2b:7f:9f:a6:9a:
                    61:33:03:34:61:e7:3d:b5:2b:ef:56:87:8b:5f:63:
                    29:ea:62:36:54:24:49:f4:40:d5:38:80:74:1e:51:
                    d7:54:3d:2c:13:e4:40:88:df:0d:02:a1:e6:d3:12:
                    09:15:2a:19:23:f9:c8:d5:50:ca:6c:75:15:5a:d5:
                    98:09:de:69:e6:e6:1e:f2:19:a6:52:c4:4b:d5:c5:
                    10:e7:61:eb:35:96:85:4f:89:51:51:2d:b0:9a:b2:
                    b7:9d:ea:52:a3:14:5f:b8:d8:d0:2c:49:0c:7f:89:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2F:7A:08:D2:7C:55:99:37:77:BB:3E:4F:1F:28:59:FA:F4:C0:E7
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230332e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:64:90:2f:32:dd:3e:6f:1c:3a:ff:80:24:a8:81:07:0b:75:
         e4:14:40:e2:bb:43:5f:dc:76:f4:74:2f:49:91:3d:02:e4:23:
         e6:e5:24:72:10:55:1e:d8:0a:3b:10:51:a1:a9:b0:14:9e:58:
         02:f5:b1:4a:80:51:8a:b1:02:9c:20:1a:ac:cc:ae:30:d2:7e:
         60:50:1b:fe:a3:db:9a:56:cb:3d:79:30:b8:d1:a7:06:2d:e2:
         d3:fb:bf:e7:bd:fd:a9:ed:7f:7b:33:1b:63:85:ed:f0:28:64:
         87:30:a8:be:0f:5b:34:7e:01:f3:d6:d9:ef:54:93:88:a4:c6:
         46:69:a7:8d:03:09:07:f0:d8:d0:3d:04:5c:ef:a8:aa:8f:51:
         2a:3b:c9:20:5e:77:36:e3:56:dd:75:bd:33:bb:c8:49:6f:f9:
         00:ee:c0:0f:28:fe:20:ce:4c:90:c7:99:4c:cc:58:12:88:ea:
         ac:99:05:7c:27:e2:04:61:fe:65:3c:bf:51:cc:5f:60:b3:ba:
         8c:b3:49:23:0f:4e:a5:df:53:21:8c:af:5e:33:c1:9b:87:36:
         59:17:4e:53:8d:21:fd:96:59:3c:9d:18:9b:a7:24:4b:4f:1f:
         35:a0:24:da:18:bf:af:0e:31:c0:b5:70:a8:16:65:23:13:ee:
         16:0f:11:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:02:00 2025 by rpki-client