Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3137372e37352e36342e302f32302d3234203d3e203533303837.roa
File:                     3137372e37352e36342e302f32302d3234203d3e203533303837.roa (raw, json)
Hash identifier:          e2d3JdwIbInCEXEF7qcTYvGdVpncPMup8+Gi7qV9wXs=
Subject key identifier:   3F:6B:AD:61:2C:D3:4A:0B:FF:FE:0F:70:C6:78:AB:5E:1F:DC:8E:47
Certificate issuer:       /CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
Certificate serial:       57EDEBDE31445E34942D1F1091F85E0854FE94DF
Authority key identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3137372e37352e36342e302f32302d3234203d3e203533303837.roa
Signing time:             Wed 17 Sep 2025 20:25:02 +0000
ROA not before:           Wed 17 Sep 2025 20:20:02 +0000
ROA not after:            Wed 16 Sep 2026 20:25:02 +0000
asID:                     53087
IP address blocks:        177.75.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl
                          rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ed:eb:de:31:44:5e:34:94:2d:1f:10:91:f8:5e:08:54:fe:94:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
        Validity
            Not Before: Sep 17 20:20:02 2025 GMT
            Not After : Sep 16 20:25:02 2026 GMT
        Subject: CN=3F6BAD612CD34A0BFFFE0F70C678AB5E1FDC8E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:d2:c3:14:7a:0f:dd:24:c0:7a:cf:14:ae:
                    5a:4f:bf:72:1d:72:34:34:c4:fb:04:59:01:2f:b6:
                    e5:2a:49:25:23:66:a2:60:31:db:48:55:eb:41:a0:
                    f8:05:81:ff:1c:6f:48:5e:11:aa:0a:c9:89:d7:6e:
                    6c:2e:97:3f:46:67:72:74:2b:77:c5:28:35:1c:e1:
                    7c:6e:61:9f:7e:36:0f:f2:69:6e:f0:15:17:df:8d:
                    2f:17:38:37:b8:df:ab:02:49:e8:df:ee:b6:fe:33:
                    f4:5c:ad:64:75:c3:13:23:6b:30:9a:17:6e:47:a1:
                    f7:54:91:82:ff:bc:d4:a6:cf:d3:2c:c2:31:d1:e9:
                    f6:3f:9f:d3:96:58:fd:2c:32:f2:2d:58:4b:e3:25:
                    c5:77:7f:ad:af:64:fb:90:96:b7:7c:d3:01:df:c6:
                    3b:14:b7:10:41:57:ab:12:5d:40:00:62:e1:9e:02:
                    a7:93:d9:9d:e7:4d:71:d6:fb:23:ce:00:f8:e7:c2:
                    64:f8:0a:91:93:f3:20:5f:07:0f:4f:f4:2c:66:fd:
                    6f:be:78:ab:c6:59:be:48:de:76:6e:35:3e:fa:3a:
                    d7:11:c2:9d:18:0c:a5:4c:6b:63:a6:c7:2b:80:4c:
                    6f:0c:cf:b6:b5:3b:44:38:6b:44:7c:1e:4b:91:84:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6B:AD:61:2C:D3:4A:0B:FF:FE:0F:70:C6:78:AB:5E:1F:DC:8E:47
            X509v3 Authority Key Identifier:
                keyid:E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3137372e37352e36342e302f32302d3234203d3e203533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:05:e5:fb:70:ba:da:ca:d7:c7:0f:7e:d0:f2:50:3d:d6:de:
         6f:46:9f:45:00:e4:db:dd:9e:77:41:5e:b4:98:cd:7e:03:9d:
         f5:4b:41:19:b7:79:db:c7:58:01:5c:3a:84:bc:72:f9:b1:9a:
         78:07:92:a8:a7:3b:ba:f4:de:19:63:57:64:55:4d:50:63:7a:
         36:5f:e5:26:73:3b:98:d1:50:a5:ed:e2:d8:86:aa:7d:6f:0f:
         97:35:8e:23:e3:5e:24:ff:8c:59:45:48:0f:56:fa:61:a7:f8:
         81:e1:c4:18:f5:4d:2c:df:66:6c:58:6c:01:0c:c8:14:41:98:
         ac:28:b2:ad:88:7e:cc:f0:8d:d8:31:0c:de:ce:0b:cc:da:47:
         80:8c:ec:4b:1c:30:b9:09:e9:49:f5:5d:a3:5d:d7:d0:4f:4b:
         c6:88:75:8a:95:5f:63:a5:38:5d:73:57:a8:9f:35:70:6d:18:
         89:82:b9:89:e5:06:b2:fc:e0:98:22:ce:59:ad:de:a6:5f:7b:
         39:68:ce:37:bd:e8:4f:76:e9:03:32:7c:63:ac:69:8b:f9:4d:
         0b:9e:b7:2b:e0:d0:e9:d3:88:4c:9f:ed:11:f7:7d:63:71:9a:
         cc:cc:9a:e6:9f:ea:22:4e:6e:b8:33:dd:70:54:e3:cd:23:8e:
         49:90:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:48:48 2025 by rpki-client