Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233342e302f32342d3234203d3e203532383932.roa
File:                     3137372e37322e3233342e302f32342d3234203d3e203532383932.roa (raw, json)
Hash identifier:          1njjuFbQ/9sZC+OeEcpUqdDGr/lV0K3BDq74onOhw04=
Subject key identifier:   A2:EE:BE:7E:7F:52:83:57:FF:02:AD:6B:6A:A0:2D:1A:4C:68:89:AB
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       56853FD9153CB5C05CF7CDDB6654B0A29C64DCF1
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233342e302f32342d3234203d3e203532383932.roa
Signing time:             Tue 20 May 2025 03:52:43 +0000
ROA not before:           Tue 20 May 2025 03:47:43 +0000
ROA not after:            Tue 19 May 2026 03:52:43 +0000
asID:                     52892
IP address blocks:        177.72.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:85:3f:d9:15:3c:b5:c0:5c:f7:cd:db:66:54:b0:a2:9c:64:dc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 20 03:47:43 2025 GMT
            Not After : May 19 03:52:43 2026 GMT
        Subject: CN=A2EEBE7E7F528357FF02AD6B6AA02D1A4C6889AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:0f:d3:6a:25:d8:c3:3e:46:40:5c:34:ad:
                    fe:37:c7:ac:54:31:49:e3:cc:ec:c2:82:d7:c0:01:
                    e1:57:8c:66:76:86:78:47:08:88:b4:56:f2:f1:d6:
                    81:52:47:c5:24:b2:45:1f:92:8a:23:d8:1d:06:2b:
                    79:87:7f:be:53:b9:b5:da:41:32:50:dd:50:54:4a:
                    e3:d5:8c:6c:e2:2a:f1:ac:ac:b9:80:58:a4:b1:3c:
                    59:e3:a8:1d:9d:d3:a9:c0:93:5e:a5:1a:4c:4e:58:
                    ec:30:7a:50:8c:c8:46:31:11:92:dc:3d:45:ee:89:
                    e1:c5:6a:8e:79:41:e2:cb:50:bc:db:0f:ac:3e:8b:
                    13:81:71:cf:93:cb:dd:5e:e0:f0:ea:c8:3e:3c:d0:
                    b0:b9:22:c9:46:28:79:f8:fe:5a:89:49:7b:d6:76:
                    81:c0:ed:7f:a9:81:cc:c5:72:46:fb:91:d7:4d:ba:
                    41:21:4c:63:9a:cc:f7:e2:e0:fe:b5:cf:5d:5a:b9:
                    b4:6c:82:d0:70:07:c6:81:05:2a:d7:81:44:92:a5:
                    d6:15:a9:04:5e:a4:c6:c8:e1:16:2d:91:fb:8a:d8:
                    90:95:df:e6:f4:a1:05:53:f7:22:8b:d3:ef:30:64:
                    0c:83:e9:7f:5a:bb:35:f9:3a:86:5f:83:94:1d:02:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EE:BE:7E:7F:52:83:57:FF:02:AD:6B:6A:A0:2D:1A:4C:68:89:AB
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e37322e3233342e302f32342d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:13:52:e5:0f:63:4e:99:53:a5:2c:14:91:ef:f5:01:f9:
         fa:bc:64:20:6c:8d:50:a9:15:23:37:5e:a5:26:70:0d:12:b1:
         82:1e:4e:55:fc:46:70:63:92:0f:69:f2:54:98:23:6e:80:0b:
         d3:59:75:ee:98:16:39:33:1c:30:5f:2d:12:b4:67:f8:c8:04:
         d3:8d:8e:07:6b:19:13:2e:58:df:49:88:48:d0:1b:b1:55:13:
         29:cb:94:e6:1e:e4:c0:cb:9b:2a:8d:4f:d0:d7:94:74:d7:b1:
         64:d3:80:94:40:e9:75:ee:df:48:54:b4:bf:61:d5:a8:88:2f:
         68:e2:9e:7a:70:d4:52:09:ed:8b:88:56:9e:cd:12:47:c7:73:
         bf:b2:3a:01:11:91:a0:ea:6c:43:fb:b7:84:d0:81:4d:21:41:
         ad:cf:15:0b:1e:0e:5d:08:dc:55:a1:e9:34:6f:8a:45:15:31:
         40:33:9a:8c:b5:b3:4a:a2:09:c0:d6:69:0e:83:38:e3:5b:da:
         b4:80:54:d6:5d:e0:b4:c5:36:cb:a4:ee:b8:9e:c5:ba:83:52:
         a2:67:17:73:93:21:c2:53:8c:46:34:f4:74:cc:00:34:41:e8:
         ca:df:b2:6f:d3:46:37:fa:d1:4f:fb:f2:14:c2:75:67:6b:9e:
         f7:9c:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:17:13 2025 by rpki-client