Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32322d3232203d3e203532373936.roa
File:                     3137372e35322e34342e302f32322d3232203d3e203532373936.roa (raw, json)
Hash identifier:          soLAkjXBPK2bz7dUuYvwF+iMaf4v+T4PtGggdZjRSO0=
Subject key identifier:   25:CE:CB:46:1D:F6:FB:3C:E6:EE:7E:8F:E6:3C:D2:C3:19:DC:D9:4D
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       7A6EFBA415B3FB447303D0308BA021B9BF2B5FE0
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32322d3232203d3e203532373936.roa
Signing time:             Tue 28 Oct 2025 17:47:51 +0000
ROA not before:           Tue 28 Oct 2025 17:42:51 +0000
ROA not after:            Tue 27 Oct 2026 17:47:51 +0000
asID:                     52796
IP address blocks:        177.52.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
                          rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6e:fb:a4:15:b3:fb:44:73:03:d0:30:8b:a0:21:b9:bf:2b:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Oct 28 17:42:51 2025 GMT
            Not After : Oct 27 17:47:51 2026 GMT
        Subject: CN=25CECB461DF6FB3CE6EE7E8FE63CD2C319DCD94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:5b:ac:8a:9b:55:2a:cb:38:72:bd:d8:85:
                    84:64:6e:8e:f8:97:5a:01:d4:0f:da:3a:07:b6:e7:
                    f1:ae:10:b2:6c:93:a5:55:b9:2a:19:67:c6:ae:9f:
                    2e:e2:a8:94:38:f8:18:b3:de:aa:b5:23:bb:25:11:
                    73:59:35:42:b2:00:0f:e7:60:74:c6:0f:51:c7:67:
                    05:31:ba:2d:39:3d:7f:72:12:4a:5b:6c:00:3e:4b:
                    93:a1:c7:57:77:76:3e:cb:c6:c0:54:94:2e:87:4d:
                    3a:98:1d:a3:29:a0:6b:2a:3f:1a:35:73:4c:2b:47:
                    5a:92:31:f5:b0:ac:f0:a6:48:f8:4e:08:17:f8:57:
                    d1:de:4a:e7:91:15:a1:a8:9e:8b:af:dd:e8:16:e1:
                    d3:af:1b:3a:02:44:07:c4:7d:78:0e:8e:5f:18:6d:
                    b6:40:bd:fc:95:3b:21:d8:e7:02:2b:18:df:a5:59:
                    9b:65:b1:15:13:a5:07:8a:2c:e7:eb:e3:b9:6d:6a:
                    de:f4:a3:d0:d7:25:cf:af:e9:8e:7f:f4:03:4b:f0:
                    39:41:4e:46:b4:e6:ac:c3:83:41:cb:3e:df:56:a8:
                    05:f5:1a:c3:31:ca:d6:3d:79:f0:c1:9c:c2:22:b7:
                    ab:6c:d2:18:a5:b9:9c:77:45:8e:ff:43:9d:c8:c1:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CE:CB:46:1D:F6:FB:3C:E6:EE:7E:8F:E6:3C:D2:C3:19:DC:D9:4D
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32322d3232203d3e203532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:74:bc:30:1e:25:90:c2:06:c5:89:3e:88:3f:4a:79:31:
         02:f5:05:7a:a7:5a:da:e7:22:04:32:2c:a8:6f:7c:b9:48:a2:
         6a:be:8d:bf:6e:44:a4:ea:28:ff:c8:6d:d7:b9:50:48:e5:02:
         7b:7e:6e:e5:50:36:28:78:7d:0c:fc:ca:1d:f7:8c:d8:9c:70:
         7c:e4:7c:c6:bc:3d:43:19:3b:0d:d4:5a:ab:1d:d9:87:cc:cf:
         89:63:aa:89:91:1f:99:a9:5b:1a:05:99:f4:a7:a2:90:3f:a5:
         ca:31:86:48:49:4a:fe:8f:e9:90:dc:71:66:36:16:14:8e:14:
         74:7f:60:55:6d:77:52:fd:98:65:ff:2b:71:6a:ec:ad:bd:78:
         70:a9:46:90:ec:3f:88:35:f4:e8:5d:3e:e7:76:ec:ee:8a:d9:
         18:8a:0a:92:18:bd:e3:f6:a4:5c:7c:3e:4c:1a:1f:e0:2d:18:
         ef:b4:f7:b4:c2:33:50:dd:7b:35:f4:4c:ee:ff:d8:52:69:c0:
         e6:2d:81:c6:39:12:14:a4:89:4c:b5:0d:bf:59:18:77:47:b7:
         ce:28:f5:78:ba:c4:bb:e2:0f:15:6f:fe:fa:ae:c9:cf:ec:7e:
         68:01:0b:ee:cd:a8:b5:08:3a:89:01:f5:a3:40:f5:e0:6f:11:
         70:31:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:30:03 2025 by rpki-client