Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32342d3234203d3e20323633303335.roa
File:                     3137372e32302e3137362e302f32342d3234203d3e20323633303335.roa (raw, json)
Hash identifier:          Kk+VNp/je2BEYWXyXG9TA8b6ZZVNni4pgYWiQssz7/E=
Subject key identifier:   F8:6A:F8:87:BF:06:85:21:9B:5A:3A:55:1F:0C:BC:4C:29:59:5F:45
Certificate issuer:       /CN=3811D3CF68BD6E1D457066AF72C5B80697140952
Certificate serial:       56F8021713E4DD8C591424676D29D2F7CF42FD76
Authority key identifier: 38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32342d3234203d3e20323633303335.roa
Signing time:             Thu 05 Jun 2025 13:44:08 +0000
ROA not before:           Thu 05 Jun 2025 13:39:08 +0000
ROA not after:            Thu 04 Jun 2026 13:44:08 +0000
asID:                     263035
IP address blocks:        177.20.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 16:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f8:02:17:13:e4:dd:8c:59:14:24:67:6d:29:d2:f7:cf:42:fd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3811D3CF68BD6E1D457066AF72C5B80697140952
        Validity
            Not Before: Jun  5 13:39:08 2025 GMT
            Not After : Jun  4 13:44:08 2026 GMT
        Subject: CN=F86AF887BF0685219B5A3A551F0CBC4C29595F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:70:e3:25:dd:ea:75:ef:b2:25:22:50:1b:
                    95:f0:a9:23:77:ce:de:e9:b8:c0:c9:80:10:1c:63:
                    fe:72:f8:83:88:09:9d:97:13:3f:4b:32:3f:6a:72:
                    e3:d2:1c:9e:1a:97:dd:6f:de:cf:aa:50:5e:e5:e2:
                    dc:50:89:ba:8a:34:f4:1f:1e:36:d1:29:cc:8f:73:
                    18:b1:36:ee:fc:7e:bf:af:bb:de:95:f3:9b:2c:bd:
                    e6:f5:ca:61:d0:64:02:59:de:d1:17:6a:d0:ef:e7:
                    53:4b:89:ad:58:b3:ef:40:aa:bb:aa:d3:4a:72:e5:
                    32:8c:8b:d1:15:ad:6d:ef:50:99:6a:f8:d8:6c:00:
                    6a:63:c5:79:ad:a5:bd:5e:5c:c1:db:da:8f:39:d3:
                    e5:7a:46:cf:2c:95:6c:f5:ab:60:2d:3d:1f:19:92:
                    8a:3e:37:90:70:c6:68:4f:b9:cb:7e:e4:d6:66:a7:
                    6d:29:9f:68:d9:01:e5:26:a1:fd:8e:03:ba:f7:73:
                    2d:88:bd:8b:3d:89:59:9f:be:91:81:19:d7:6d:83:
                    5d:90:b3:94:35:d6:bf:27:5e:a4:7f:ad:c8:82:29:
                    b0:6d:30:c2:5b:c5:d6:89:3f:2d:66:f7:2e:51:b3:
                    a3:0f:70:0e:c7:28:95:fd:a5:1f:4c:8c:7d:e3:c0:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6A:F8:87:BF:06:85:21:9B:5A:3A:55:1F:0C:BC:4C:29:59:5F:45
            X509v3 Authority Key Identifier:
                keyid:38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32342d3234203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:fb:25:7a:45:06:40:d4:35:a3:91:93:86:69:f8:b1:dc:ac:
         34:53:62:54:51:53:56:eb:9f:51:e4:01:b9:a9:12:ef:c6:77:
         a0:49:f7:84:77:a5:4d:a5:3f:3b:ff:ef:bd:06:23:5f:72:68:
         e6:cb:1b:c7:b5:8a:a2:ea:a8:a1:67:a1:43:7b:40:c8:3d:e5:
         05:9c:c6:5a:99:0c:d2:69:32:30:aa:fb:68:93:e3:f3:f0:2f:
         ba:e0:e8:ab:41:19:83:40:2d:7f:48:75:29:b1:21:a3:4b:24:
         5f:1f:a1:d8:73:5c:07:b5:cb:59:fe:0e:37:69:43:25:56:bb:
         a2:62:4d:ce:45:c3:72:a9:3b:2f:1a:9d:30:80:45:b6:d3:e1:
         a9:ae:62:f4:60:8d:91:23:30:86:3a:aa:54:1a:ec:ca:e8:48:
         d3:d4:51:45:ac:2c:a9:34:8e:3a:30:09:6a:87:b2:1c:eb:14:
         c5:a4:8b:47:e3:64:5e:97:a9:d2:54:3f:9e:85:19:b5:16:f3:
         46:e2:69:eb:ef:93:d6:f9:a2:04:3b:e5:3a:02:f5:92:ad:90:
         27:f6:de:bc:6b:29:99:0e:1e:6f:2e:8c:d5:78:c3:e7:2f:69:
         a7:f6:c1:05:59:a2:bd:0e:e9:32:55:48:53:35:f0:9f:12:1a:
         f8:95:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:29:02 2025 by rpki-client