Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e33322e302f32322d3332203d3e20323632343336.roa
File:                     3137372e35322e33322e302f32322d3332203d3e20323632343336.roa (raw, json)
Hash identifier:          RtrsE+xGCCVr2chEHvLdQ7AT5f/sRQG9Zyqj0JzNMs0=
Subject key identifier:   2E:B1:18:CE:68:8C:AE:9C:7F:DB:B3:A0:D3:70:20:78:1D:46:4B:A2
Certificate issuer:       /CN=BD11125724CB8C5430E605E8628C6235B0ECD037
Certificate serial:       3D78D6DE86CB5361419C4DCD21651D5350A7FC57
Authority key identifier: BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e33322e302f32322d3332203d3e20323632343336.roa
Signing time:             Wed 16 Apr 2025 10:37:46 +0000
ROA not before:           Wed 16 Apr 2025 10:32:46 +0000
ROA not after:            Wed 15 Apr 2026 10:37:46 +0000
asID:                     262436
IP address blocks:        177.52.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl
                          rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:d6:de:86:cb:53:61:41:9c:4d:cd:21:65:1d:53:50:a7:fc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD11125724CB8C5430E605E8628C6235B0ECD037
        Validity
            Not Before: Apr 16 10:32:46 2025 GMT
            Not After : Apr 15 10:37:46 2026 GMT
        Subject: CN=2EB118CE688CAE9C7FDBB3A0D37020781D464BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:9b:f0:b5:4b:88:ec:6e:ae:81:6d:d5:f4:
                    22:1d:e2:1f:5c:66:51:c5:e1:be:84:2b:bc:27:2a:
                    87:ca:42:34:24:f2:fb:39:41:01:1d:7b:fd:64:7b:
                    ec:41:36:26:3b:1a:47:3d:7d:b6:ef:26:66:c1:20:
                    de:65:85:b1:c0:cf:99:4e:09:e2:b1:ae:10:c7:4a:
                    e5:6a:b8:ac:37:0f:8e:69:a2:36:5c:51:37:92:20:
                    d1:f1:70:00:51:85:13:8f:90:fa:e0:52:1f:48:73:
                    82:e5:b5:53:c4:50:60:6e:79:5e:3b:d8:aa:a2:48:
                    5c:44:2c:cf:a7:1b:73:0a:42:08:6b:6b:e8:31:65:
                    e3:ed:e7:d2:69:13:a1:15:a3:f3:9a:8f:ec:cd:bd:
                    11:d4:35:85:60:69:ba:d0:9c:56:cc:aa:d5:b3:f3:
                    37:66:23:07:b6:28:bd:cb:a2:6a:70:62:ab:80:41:
                    07:a6:a9:cd:fa:1c:fd:90:8a:f2:6e:3f:a3:c5:46:
                    0d:88:43:34:4e:25:18:32:78:f5:bf:d3:c6:20:e8:
                    ad:cc:48:7b:4e:67:ad:60:9f:d5:5a:8f:47:66:6a:
                    35:1a:c8:91:26:6e:43:d8:e8:d6:84:ab:1b:67:d6:
                    c8:1e:7a:31:67:0c:9c:bf:83:c9:5d:a1:41:e7:f8:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B1:18:CE:68:8C:AE:9C:7F:DB:B3:A0:D3:70:20:78:1D:46:4B:A2
            X509v3 Authority Key Identifier:
                keyid:BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e33322e302f32322d3332203d3e20323632343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:1b:11:7b:8b:a8:8b:96:08:59:e2:91:ed:f1:2f:4d:3d:
         f7:24:d3:27:ae:eb:6c:ff:70:d7:23:33:be:98:77:a0:ce:95:
         52:ed:eb:a7:b2:98:7a:c3:3d:58:ee:30:37:23:3a:7c:a6:d8:
         53:d3:13:b1:c3:fc:f7:df:c2:a0:c6:f4:cb:d7:f4:8a:58:85:
         c3:a6:47:d0:14:6b:b6:e7:d5:22:f9:35:f9:12:a2:89:cc:f7:
         66:8b:f2:aa:5f:86:54:a6:5b:27:a9:35:b2:7b:c5:df:76:fe:
         66:29:05:38:7c:09:64:19:3f:5f:e6:e4:6d:ad:da:58:8f:3d:
         05:cb:5a:23:6b:52:3c:73:d6:5a:85:84:2f:68:63:20:fa:16:
         ce:7c:16:a6:da:58:d1:44:45:e6:d6:74:2e:fd:28:c0:20:57:
         91:1d:2b:97:a5:36:a4:ea:e5:96:dd:96:9e:12:c4:00:27:ab:
         1a:9d:78:69:f6:5b:ee:97:dd:d5:ba:10:35:90:95:8e:22:09:
         a2:48:39:f9:49:8e:21:46:9b:05:05:39:26:93:11:4d:e8:73:
         2f:94:98:c0:77:89:fe:74:af:94:40:b1:f3:02:84:50:76:a0:
         60:3d:85:2c:ae:e6:6c:41:ad:12:a6:9f:0b:9f:c4:13:9d:33:
         2d:7c:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:53:31 2025 by rpki-client