Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa
File:                     3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa (raw, json)
Hash identifier:          624IAq74gYVg2o/YRcntsIQ4jDdp8xYPVypobjo24a8=
Subject key identifier:   FC:18:F3:2C:12:31:16:EF:4B:CC:E2:40:E1:55:87:63:A4:D6:D5:30
Certificate issuer:       /CN=3811D3CF68BD6E1D457066AF72C5B80697140952
Certificate serial:       59B4AF9BD65EF2623BADD65FB4552A1754E5C2C1
Authority key identifier: 38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa
Signing time:             Thu 05 Jun 2025 13:44:06 +0000
ROA not before:           Thu 05 Jun 2025 13:39:06 +0000
ROA not after:            Thu 04 Jun 2026 13:44:06 +0000
asID:                     263035
IP address blocks:        177.20.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 08:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b4:af:9b:d6:5e:f2:62:3b:ad:d6:5f:b4:55:2a:17:54:e5:c2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3811D3CF68BD6E1D457066AF72C5B80697140952
        Validity
            Not Before: Jun  5 13:39:06 2025 GMT
            Not After : Jun  4 13:44:06 2026 GMT
        Subject: CN=FC18F32C123116EF4BCCE240E1558763A4D6D530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:e8:a3:d2:d4:3c:f6:ab:fd:b7:5b:c7:e9:
                    90:a0:70:bb:8e:13:51:a6:18:5c:93:aa:2a:e4:b7:
                    28:e6:d9:ca:45:b8:78:c1:7c:e3:46:86:93:c8:1f:
                    49:85:77:a5:2b:50:73:87:bf:cf:1c:ad:9e:9f:d9:
                    14:fb:2d:1c:6d:07:3e:76:e5:d3:ee:4d:ec:1b:44:
                    22:57:6e:1c:6b:90:23:5d:bb:15:39:76:a6:60:df:
                    29:13:37:98:2b:c7:58:33:fc:77:ce:6b:1d:61:56:
                    c9:c8:5e:79:fb:ad:cc:4d:a5:d8:86:ba:93:0b:3e:
                    bb:06:1b:94:3d:58:6c:18:95:ff:5e:37:0c:e5:c8:
                    96:ad:17:ee:19:54:b1:00:19:bf:c6:56:a8:a1:a9:
                    82:0f:f2:2f:d4:dc:de:2b:1e:c7:17:cb:4c:fc:73:
                    50:69:26:23:c3:b3:e5:98:ff:06:08:9c:33:16:9d:
                    fe:e8:be:63:18:60:05:a2:c5:29:a5:0d:21:a9:a5:
                    1f:66:71:5b:81:29:32:48:33:3b:2d:e5:ad:d3:5d:
                    a9:61:16:34:c1:d3:fb:a6:33:aa:fa:04:8b:45:d3:
                    25:dd:21:eb:37:54:e1:1b:bb:e9:f0:fd:68:ec:8a:
                    b4:ae:42:28:90:ad:ae:18:54:4f:58:4a:73:dd:02:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:18:F3:2C:12:31:16:EF:4B:CC:E2:40:E1:55:87:63:A4:D6:D5:30
            X509v3 Authority Key Identifier:
                keyid:38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:c9:81:8b:44:e0:7b:b2:2d:21:bc:5a:d8:fa:2a:af:fd:
         73:ab:0c:f0:aa:63:e6:05:f1:3b:76:4e:c1:4a:09:85:2a:45:
         75:2f:7e:2c:b3:6e:14:20:15:02:e7:cf:af:dc:68:3f:38:13:
         c2:38:bd:d0:81:20:30:db:68:a8:45:33:78:ee:d4:ef:6f:8d:
         d6:7d:25:30:b9:c8:d1:57:87:83:bc:28:2c:ac:13:a9:73:d3:
         c5:da:61:93:5a:12:9d:4b:34:75:22:8b:c5:73:32:20:f1:81:
         4b:fe:64:60:d3:2c:3c:de:46:35:55:c3:4a:a2:77:66:2c:34:
         b5:91:8a:12:ab:68:aa:be:c3:42:87:49:9e:61:7f:a8:67:91:
         05:3a:e2:fd:01:06:c7:31:a8:5b:f9:a4:99:3e:33:e9:a2:d0:
         dc:66:c1:d8:18:84:6a:08:c4:4f:63:b0:02:bf:fa:d0:1a:a3:
         50:4b:8c:22:12:3c:02:29:88:67:92:f4:72:a2:a5:e9:12:9b:
         ce:7b:56:b8:84:83:2a:17:64:bd:a5:ba:ab:02:a1:b0:8b:d6:
         15:63:7a:ab:ce:ff:45:26:8c:4b:0d:00:28:d8:df:a9:85:1f:
         46:25:dd:9a:3a:a8:fc:67:ee:3e:74:2f:fa:8c:b2:bb:38:c9:
         1a:57:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:07:09 2025 by rpki-client