Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa
File:                     3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa (raw, json)
Hash identifier:          bm2zT90Wlj++J96HeTz4+GiMZ0L4TLT9dFbAdbz+eEE=
Subject key identifier:   1E:B2:2F:EF:51:63:6E:4C:CA:83:DD:CF:E2:8D:98:D4:36:FF:B9:DD
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       7ED571DE94042E91250EE599887C85E9E6646A33
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa
Signing time:             Wed 30 Apr 2025 18:28:55 +0000
ROA not before:           Wed 30 Apr 2025 18:23:55 +0000
ROA not after:            Wed 29 Apr 2026 18:28:55 +0000
asID:                     52547
IP address blocks:        177.152.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:71:de:94:04:2e:91:25:0e:e5:99:88:7c:85:e9:e6:64:6a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr 30 18:23:55 2025 GMT
            Not After : Apr 29 18:28:55 2026 GMT
        Subject: CN=1EB22FEF51636E4CCA83DDCFE28D98D436FFB9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:64:df:6a:9a:d4:ff:91:31:63:3f:e4:b7:
                    87:70:12:af:02:98:30:ef:f8:8e:c8:e0:a0:ba:71:
                    be:a5:e0:cc:77:3d:cb:30:5e:e4:c7:49:bb:8c:10:
                    7e:6f:a1:87:cf:db:d2:88:e3:c4:9b:a6:d2:d0:e6:
                    79:bc:47:b0:09:83:61:ca:d6:97:7b:9f:6b:16:8c:
                    91:67:52:e6:85:aa:b1:97:24:b2:8d:2a:44:13:29:
                    df:7e:a6:5d:2d:e5:bf:2a:f6:cd:eb:76:4e:30:58:
                    c7:52:76:b8:b6:d7:57:62:1f:80:85:ee:56:5a:a9:
                    85:98:76:b3:b4:a7:f7:d8:d4:30:ba:c6:52:70:a9:
                    39:35:c9:a8:d6:ba:0c:cd:f7:9e:53:36:d3:a1:7e:
                    86:c4:60:6d:14:1e:14:b2:26:c5:db:09:6b:5a:b1:
                    45:b6:7b:df:b6:62:94:cc:27:e3:6f:9b:94:47:13:
                    bc:89:71:fe:66:57:0f:34:71:9b:ee:f6:ad:63:00:
                    4f:25:66:fd:86:f1:36:df:e2:e8:1a:17:2a:82:50:
                    ca:0f:0b:49:4f:61:59:5d:7d:35:99:5c:20:cf:11:
                    28:38:01:16:55:5e:fb:53:3b:a5:85:22:5b:8f:e1:
                    9f:84:c6:0f:4f:04:e7:25:2f:f0:e7:0c:91:be:fe:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:2F:EF:51:63:6E:4C:CA:83:DD:CF:E2:8D:98:D4:36:FF:B9:DD
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:65:e9:b0:92:37:30:42:a0:d5:bc:30:90:84:c8:72:d3:e2:
         e3:50:e2:46:6a:05:38:6f:01:c7:f5:54:61:39:4a:99:0c:bd:
         61:88:63:83:26:36:93:ba:04:02:9d:ba:dc:14:b8:06:ef:c6:
         b6:a4:fc:b4:0a:5e:b4:53:ac:fb:ab:ce:12:2f:57:94:89:56:
         5b:43:58:d3:a5:0f:e1:86:5b:50:31:3a:8a:a9:17:66:2c:68:
         0f:a2:73:97:54:6a:91:8d:a9:27:ea:07:3e:34:b2:d1:35:e7:
         d7:9d:2c:c6:27:7f:0f:be:de:9f:12:81:57:fe:03:fd:13:5d:
         29:c6:98:e9:e0:84:e9:ab:17:07:fe:b4:4b:a3:6e:cf:0d:1e:
         2c:51:0b:74:50:87:65:7c:8b:96:2b:4f:0d:a9:88:ea:9a:98:
         e3:d8:2b:bc:78:98:66:f8:cd:f4:cd:24:bd:20:1d:5e:a2:81:
         f7:01:1a:2f:c5:cf:2a:76:e4:3b:ca:d6:7f:53:b5:16:e7:37:
         50:32:25:37:95:ac:2e:7c:83:73:ba:d3:60:d9:64:42:e3:89:
         55:6d:e4:73:f5:b6:05:6e:e5:af:6a:06:99:74:60:f6:cd:f5:
         0e:a7:e2:a6:9d:4d:c6:44:3e:d7:95:a5:99:9f:c7:5c:5d:db:
         3e:d2:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:57:24 2025 by rpki-client