Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa
File:                     3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa (raw, json)
Hash identifier:          YjGrnWzYnTTxLNqJBqhuiy+v80Vyl6D6n64H6L1kPwA=
Subject key identifier:   8E:72:1E:19:84:71:82:95:95:81:ED:30:7E:D7:FB:79:69:ED:44:8C
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       6D386417AE1F5457987781457A1243618A3EBD68
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa
Signing time:             Tue 13 May 2025 17:07:04 +0000
ROA not before:           Tue 13 May 2025 17:02:04 +0000
ROA not after:            Tue 12 May 2026 17:07:04 +0000
asID:                     61889
IP address blocks:        177.152.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 06:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:38:64:17:ae:1f:54:57:98:77:81:45:7a:12:43:61:8a:3e:bd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: May 13 17:02:04 2025 GMT
            Not After : May 12 17:07:04 2026 GMT
        Subject: CN=8E721E19847182959581ED307ED7FB7969ED448C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:d4:ee:bc:8a:3b:27:c2:7b:0f:c1:35:39:
                    12:62:f4:f1:30:e5:ef:23:8d:11:ba:7b:e5:67:5e:
                    d6:05:d8:a7:80:ea:b2:a8:9c:a1:8d:76:6c:0b:fc:
                    03:5b:e5:2f:a7:3d:44:b3:6c:e3:74:38:22:57:54:
                    1b:f4:dd:79:fd:5d:82:8f:01:52:6b:6c:3a:91:4d:
                    b5:0e:9b:6a:89:c2:33:6e:74:04:3b:82:8d:b3:c1:
                    e4:6e:69:06:b0:ed:d3:76:5e:6a:d5:6a:5b:a2:ac:
                    f6:ad:38:43:e1:5f:e1:f4:c8:20:9f:ee:17:0f:f3:
                    7a:f3:89:f7:0e:a6:a9:bd:7f:05:15:ed:fa:02:4f:
                    60:c0:ef:68:d3:b2:c7:9a:86:b5:a8:f9:fd:b2:39:
                    d5:63:68:02:97:4a:5c:bd:4d:fb:b8:b9:c2:8f:0d:
                    67:1f:4f:f0:e3:f7:65:36:20:e8:8c:5c:d0:f2:83:
                    8f:2f:99:97:9e:77:7f:c6:51:f2:a1:dd:fd:19:0a:
                    fc:5e:c1:48:29:ca:25:95:f3:48:53:4d:0f:be:df:
                    db:74:9c:c4:b5:95:95:37:ab:19:17:4d:6f:a7:0b:
                    58:22:d5:7b:55:94:d7:60:e1:d6:45:ad:f1:1e:93:
                    5d:4c:e6:a8:64:6d:b2:07:5d:e7:33:33:ad:6b:2f:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:72:1E:19:84:71:82:95:95:81:ED:30:7E:D7:FB:79:69:ED:44:8C
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:b2:2a:8d:c6:57:c5:a7:8f:cc:4f:73:ad:54:56:90:23:
         08:0c:7a:c9:52:86:47:5e:0b:b3:a5:6e:b8:03:63:03:9e:14:
         7e:7c:7d:63:9f:d2:29:66:61:22:e5:72:c5:36:2f:b8:6d:3a:
         b9:8c:76:1c:bf:36:e9:f3:3f:bf:5f:88:84:eb:c0:a6:93:cd:
         ad:ba:66:7e:6b:be:87:53:60:2e:ea:80:68:d5:c4:ab:c5:79:
         d1:63:ff:c7:29:a3:d3:c0:46:f0:d9:de:1e:c5:5a:38:f0:10:
         74:55:51:1a:aa:5b:8b:54:70:92:8d:02:cd:c7:2c:5b:d4:b5:
         53:e1:2e:a1:c4:69:c3:08:d7:38:be:6a:4b:91:60:b2:3b:0c:
         0e:74:eb:c5:95:c3:d7:54:d0:a7:38:f4:13:11:90:e0:3c:0e:
         43:26:03:6f:ba:53:48:30:8e:d3:11:4b:38:94:e8:0d:c7:de:
         b6:30:62:4e:3a:2f:56:99:4d:26:7b:f7:3c:34:52:65:99:da:
         0e:98:c2:65:56:35:0a:a9:c7:83:36:34:20:9c:33:f0:c2:7e:
         4e:f6:b0:be:13:34:b2:17:4f:b2:04:0b:dc:ff:02:79:07:0f:
         75:48:41:9e:7f:4e:5e:bd:fc:b3:ac:1f:00:d6:b3:5b:9d:8a:
         75:b6:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:57:26 2025 by rpki-client