Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137372e38372e39322e302f32322d3234203d3e203532353932.roa
File:                     3137372e38372e39322e302f32322d3234203d3e203532353932.roa (raw, json)
Hash identifier:          P5NQ1X7a5/OWP9HCAuVjTa6sRlB4EGzVBG3V/7t0LkI=
Subject key identifier:   32:78:68:93:05:B7:83:E0:5B:2B:F3:18:21:37:B7:C5:3C:E2:F1:8A
Certificate issuer:       /CN=CFF957416ABC451AD3955260CF69F31756051BD6
Certificate serial:       5C8F6301FBC318E62753A2AE832549BEA6EF1D1A
Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137372e38372e39322e302f32322d3234203d3e203532353932.roa
Signing time:             Thu 29 May 2025 12:47:52 +0000
ROA not before:           Thu 29 May 2025 12:42:52 +0000
ROA not after:            Thu 28 May 2026 12:47:52 +0000
asID:                     52592
IP address blocks:        177.87.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl
                          rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8f:63:01:fb:c3:18:e6:27:53:a2:ae:83:25:49:be:a6:ef:1d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6
        Validity
            Not Before: May 29 12:42:52 2025 GMT
            Not After : May 28 12:47:52 2026 GMT
        Subject: CN=3278689305B783E05B2BF3182137B7C53CE2F18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:e2:5b:0c:5d:1a:32:b4:0e:96:5b:a8:78:
                    7c:67:08:6b:e5:fd:9b:58:5c:dd:0a:b8:71:c4:da:
                    73:66:7b:7b:48:20:5c:e3:89:eb:05:97:ac:bb:ab:
                    fd:ac:11:68:99:27:92:a3:0d:5b:ee:58:d0:f3:46:
                    97:14:9e:dc:8f:70:a3:33:5e:d3:6f:30:33:73:b9:
                    b1:06:49:92:90:e0:a8:8c:3c:3c:14:42:63:ad:99:
                    4e:41:69:30:9d:32:b4:e7:0d:64:6d:ff:bf:31:3d:
                    c3:11:92:cb:0e:a3:4b:8b:3c:f5:bf:f1:c4:28:4d:
                    a7:ae:e1:66:8a:da:19:2c:a8:7a:65:12:02:67:50:
                    7f:ce:da:80:1b:69:8e:8f:fc:9c:db:46:e6:33:b4:
                    f9:45:be:6f:e1:76:74:fc:ed:32:59:9d:9e:e9:72:
                    a4:25:06:97:e8:dd:29:0d:6e:1f:c1:d8:fa:cd:33:
                    16:d4:a1:6f:14:92:99:7a:3d:ee:fd:82:b9:7c:49:
                    ef:cc:5e:73:77:7b:ec:f8:42:2a:ee:eb:7e:4b:a5:
                    48:10:b9:a9:b4:56:bd:c7:95:5b:e7:cf:21:74:bb:
                    75:eb:b0:9f:18:4e:0f:8e:90:46:e8:a6:f0:89:3d:
                    a6:50:50:51:68:b3:72:ad:50:95:95:62:79:50:32:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:78:68:93:05:B7:83:E0:5B:2B:F3:18:21:37:B7:C5:3C:E2:F1:8A
            X509v3 Authority Key Identifier:
                keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137372e38372e39322e302f32322d3234203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:8d:e4:44:25:56:78:7e:e3:bd:70:d6:d5:14:bc:e6:46:
         6d:ad:8a:90:70:07:31:b5:2f:6f:9b:02:21:60:ef:dc:0e:97:
         c0:b6:b0:f7:35:02:dd:5d:f8:42:e9:9b:70:b6:85:81:a5:75:
         7c:99:93:7d:d2:5d:e0:8d:ca:de:79:24:a8:ad:0a:7f:8f:19:
         de:8c:20:ef:9d:36:72:78:93:cf:43:3e:30:ea:a0:e4:52:5b:
         83:de:da:16:71:30:b7:e7:66:43:9e:d9:2e:35:37:13:a0:e0:
         5e:19:38:b4:3a:6a:87:0e:39:eb:ff:23:67:bc:cb:b4:42:91:
         b6:c6:48:87:05:a3:bb:48:fa:9e:49:44:02:bd:7e:4c:1f:6e:
         d5:ba:2b:f5:d1:e9:83:72:bf:0a:bf:8e:1d:31:af:84:e4:cf:
         40:b6:e6:e1:e4:0e:aa:46:a6:fc:50:3f:dc:82:2c:1f:03:0e:
         02:f7:18:b5:59:1a:82:12:ff:95:3c:ba:63:7a:77:db:79:15:
         ff:cb:2c:47:48:1f:8c:4a:79:e1:13:99:ca:f6:14:5c:0a:8d:
         c6:65:7a:e9:ec:ce:b6:86:8d:8d:ac:0a:95:16:09:2f:74:23:
         8d:86:0a:d7:51:80:de:59:6d:ee:fa:84:b9:8d:0c:3b:41:bd:
         79:a7:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:37:47 2025 by rpki-client