Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3137372e36372e3135322e302f32342d3234203d3e20323634393431.roa
File:                     3137372e36372e3135322e302f32342d3234203d3e20323634393431.roa (raw, json)
Hash identifier:          0+nyoaEZ32AJjRNp6FaLncd9WY8QFRtchSPA9LlwC0A=
Subject key identifier:   E5:B1:88:E2:C4:DD:E0:17:9B:AD:6A:BC:DA:78:6C:9D:FF:AB:B2:38
Certificate issuer:       /CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
Certificate serial:       55BCB06214C1181C78604F5F9101F160D2DFABA6
Authority key identifier: E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3137372e36372e3135322e302f32342d3234203d3e20323634393431.roa
Signing time:             Tue 02 Sep 2025 00:31:09 +0000
ROA not before:           Tue 02 Sep 2025 00:26:09 +0000
ROA not after:            Tue 01 Sep 2026 00:31:09 +0000
asID:                     264941
IP address blocks:        177.67.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl
                          rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bc:b0:62:14:c1:18:1c:78:60:4f:5f:91:01:f1:60:d2:df:ab:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
        Validity
            Not Before: Sep  2 00:26:09 2025 GMT
            Not After : Sep  1 00:31:09 2026 GMT
        Subject: CN=E5B188E2C4DDE0179BAD6ABCDA786C9DFFABB238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:9c:02:5e:dc:af:99:af:f7:37:2b:ea:56:
                    55:90:28:09:8e:9c:5e:89:d6:5b:11:7f:5c:15:12:
                    ec:0d:4d:48:e4:7e:bf:08:e9:f5:38:27:e5:9f:14:
                    0d:38:5f:e5:6f:15:ab:20:fc:02:b1:fe:22:89:31:
                    44:e2:2b:c2:32:39:cb:b6:b2:12:1b:be:8a:f4:65:
                    a3:85:d7:a2:9d:02:b8:42:68:70:2a:98:98:a8:aa:
                    1f:b0:34:1c:6e:94:d2:b2:03:01:b7:3a:da:bf:e9:
                    43:2e:b3:07:85:40:4d:56:bd:16:f0:83:db:6a:ed:
                    e2:b7:28:27:04:86:a6:bb:27:4b:d3:88:0f:36:95:
                    84:ee:df:b2:6c:b9:a1:07:2e:6a:6b:64:c1:89:39:
                    e4:3f:50:41:4b:a3:09:95:c6:d3:dc:51:83:88:92:
                    e0:92:b9:e7:19:ed:9b:52:32:72:6a:8f:97:42:87:
                    fe:ca:04:df:35:4e:c4:b5:2f:67:e3:d4:2b:5c:c8:
                    b3:5c:cd:33:d1:66:26:b3:8a:f4:12:ef:5d:b5:22:
                    07:c3:c3:c7:ae:8b:dc:b3:88:9b:50:1b:9d:d8:90:
                    f7:b3:83:f1:9c:5b:0e:66:a6:23:08:c1:65:a7:6f:
                    31:41:0e:8f:2b:64:77:db:d2:70:04:2d:3a:4f:44:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:88:E2:C4:DD:E0:17:9B:AD:6A:BC:DA:78:6C:9D:FF:AB:B2:38
            X509v3 Authority Key Identifier:
                keyid:E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3137372e36372e3135322e302f32342d3234203d3e20323634393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:35:f9:a3:41:0f:ab:9f:aa:ca:c2:b5:18:fc:57:4e:30:
         23:5c:15:a7:82:06:7c:e5:8c:31:97:51:e3:48:76:d7:9a:b5:
         a7:17:c5:73:a1:9b:c4:b8:f0:7e:a8:eb:be:fa:2b:e2:1f:f7:
         91:07:2c:0b:71:c9:74:46:bc:fb:19:7c:3d:5d:d0:87:f4:70:
         7d:52:24:73:f5:a5:76:50:f7:1d:e6:b5:a9:ef:3c:cd:da:3c:
         5c:82:08:e7:d8:0d:ec:bb:62:4e:8b:bd:3d:3c:a2:9b:4a:d9:
         7a:af:c3:5b:6a:10:fe:e3:6b:85:23:b3:c0:0d:da:e0:49:c9:
         60:6f:43:d3:21:d7:b4:4f:b7:64:8a:3b:83:25:19:4b:18:66:
         d6:8a:23:d3:b8:d9:fc:49:aa:39:a5:8f:f9:23:b7:6f:89:4b:
         b1:0c:a6:c9:38:66:bd:c8:61:47:73:a0:ae:0e:84:d5:85:07:
         a6:6b:5c:e9:22:d4:b4:6a:91:93:2d:61:f9:0e:16:cc:f0:e2:
         31:42:bf:f1:9f:ab:fd:d6:53:d7:44:c1:d4:18:62:ef:07:a4:
         d0:20:d1:c5:50:55:86:49:17:9c:18:dd:fb:fd:92:66:f4:bd:
         84:04:b3:1b:85:3d:7c:06:0e:ed:12:74:f0:c4:dc:93:ff:32:
         63:60:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:42:56 2025 by rpki-client