Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/3137372e38352e3137322e302f32322d3234203d3e203532373436.roa
File:                     3137372e38352e3137322e302f32322d3234203d3e203532373436.roa (raw, json)
Hash identifier:          KCrFqTQzO17kQlL8SOLSVWkU5WyJdtvB7e1wLs8BQYA=
Subject key identifier:   1D:18:7A:87:7A:C9:95:03:E3:DC:79:69:61:1F:F7:5C:F7:D6:A7:7C
Certificate issuer:       /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
Certificate serial:       4A0100E7761A948E424A1C2B970F5401FF56A03C
Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/3137372e38352e3137322e302f32322d3234203d3e203532373436.roa
Signing time:             Sat 17 May 2025 01:37:02 +0000
ROA not before:           Sat 17 May 2025 01:32:02 +0000
ROA not after:            Sat 16 May 2026 01:37:02 +0000
asID:                     52746
IP address blocks:        177.85.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl
                          rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 22:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:01:00:e7:76:1a:94:8e:42:4a:1c:2b:97:0f:54:01:ff:56:a0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
        Validity
            Not Before: May 17 01:32:02 2025 GMT
            Not After : May 16 01:37:02 2026 GMT
        Subject: CN=1D187A877AC99503E3DC7969611FF75CF7D6A77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:2b:d8:3d:b1:3a:e6:81:3f:bd:cc:85:f9:
                    4d:1e:95:0c:a9:07:4a:83:9a:93:cf:4f:35:c4:4a:
                    e3:0e:8c:8d:0f:1c:0b:80:42:c8:16:cb:c9:0c:de:
                    eb:a6:f6:52:17:89:6a:b8:bf:e1:1b:7a:f6:ed:70:
                    55:a2:78:42:45:99:68:04:dc:47:c7:07:27:47:59:
                    9e:25:02:d5:36:04:c5:8a:22:af:5d:3c:58:19:1a:
                    aa:6f:99:fa:16:18:02:0a:18:f1:8e:6a:9d:65:1a:
                    a3:22:88:44:2f:e6:45:c5:5d:a2:d1:a2:6f:f6:b3:
                    b6:3e:93:22:ec:70:c2:b6:7f:a5:88:b0:42:df:d3:
                    fc:9d:52:ba:16:04:76:b8:dc:11:f9:95:e4:19:d6:
                    d2:70:a1:3d:50:54:f2:ac:f5:bc:df:72:d2:88:28:
                    98:99:0d:b4:9f:e4:52:42:8e:56:1c:d9:12:33:a5:
                    2d:4a:4e:80:71:4e:3a:0b:a7:4f:ba:44:d8:cb:ea:
                    aa:54:4c:ec:72:77:cb:ea:e5:c9:61:f4:45:3a:f9:
                    2f:36:20:6c:e7:89:6b:11:bf:39:e8:a8:68:31:87:
                    5f:fc:80:79:c4:5a:98:14:d1:65:3f:f7:d2:94:42:
                    84:12:33:ad:ac:19:ae:b1:1d:ee:c6:80:68:61:6e:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:18:7A:87:7A:C9:95:03:E3:DC:79:69:61:1F:F7:5C:F7:D6:A7:7C
            X509v3 Authority Key Identifier:
                keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/3137372e38352e3137322e302f32322d3234203d3e203532373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:d2:ef:e5:0b:70:3a:8b:d7:62:ac:b3:0f:6c:3e:59:dc:
         e9:c3:76:62:f3:6a:a2:e2:9e:65:7f:ec:95:c6:b1:6f:64:91:
         84:a9:1d:21:9e:dc:35:44:1b:73:b6:c6:21:19:18:52:63:90:
         45:95:92:ed:d0:cf:50:95:b8:08:99:a5:a2:d6:38:09:a5:f7:
         e0:33:27:b9:f1:fd:cd:fc:c8:7c:1a:fe:c5:98:3e:ee:73:65:
         fc:13:f7:c5:02:68:d3:88:00:d4:68:32:b1:1e:55:1c:f0:fb:
         b8:4c:40:e9:21:31:7a:15:5a:bc:30:aa:c9:f1:84:65:a6:9a:
         1d:ac:76:74:d2:19:a5:08:63:b8:a6:2b:d6:e6:cb:5d:d3:2f:
         de:41:4e:16:60:58:5c:7d:09:69:9b:24:6a:88:f9:41:a5:2f:
         82:72:8f:1e:c6:11:fd:c8:c5:d1:57:2e:0d:f2:bc:72:f2:4c:
         a7:cc:7f:b8:f5:81:54:95:ba:00:c8:16:68:2e:da:ae:d3:8e:
         5f:51:38:b6:71:9d:f9:8e:70:20:bd:7b:a0:c7:af:0a:31:08:
         79:76:dd:27:c6:64:d8:f6:3b:cc:48:ae:dc:9f:e9:04:4f:59:
         02:17:a5:8c:45:3f:5f:d7:d7:23:5d:0f:e1:ec:9f:32:4e:1a:
         7e:18:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:47:54 2025 by rpki-client