Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa
File:                     3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa (raw, json)
Hash identifier:          7dK9IjQo7l30GXdriklsLv1LlGLMCS0TSARyyYDtDWM=
Subject key identifier:   3B:C9:CB:7F:28:3E:6F:E5:21:8E:FD:14:F6:72:90:13:9E:C0:DF:B4
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       5CBDA1AF2349EA1E23B0EB7D9A9C035B8FEF4531
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa
Signing time:             Tue 03 Jun 2025 18:22:12 +0000
ROA not before:           Tue 03 Jun 2025 18:17:12 +0000
ROA not after:            Tue 02 Jun 2026 18:22:12 +0000
asID:                     263586
IP address blocks:        177.155.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 15:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bd:a1:af:23:49:ea:1e:23:b0:eb:7d:9a:9c:03:5b:8f:ef:45:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Jun  3 18:17:12 2025 GMT
            Not After : Jun  2 18:22:12 2026 GMT
        Subject: CN=3BC9CB7F283E6FE5218EFD14F67290139EC0DFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:69:83:e9:a1:c3:1b:79:44:46:69:ce:97:86:
                    90:46:de:4f:37:12:ab:d4:31:77:d3:20:6a:76:bf:
                    ea:64:6c:e8:b0:6e:d6:8a:2b:fa:d3:b5:a2:28:e2:
                    6a:40:3c:e9:bf:40:e2:48:98:75:3f:e3:7d:d1:f1:
                    50:69:2b:e2:1d:57:f9:08:c7:4e:6a:ae:ca:94:08:
                    fa:bb:ea:b9:82:2d:65:cd:66:5b:e9:78:40:1e:72:
                    ce:a0:af:14:23:1b:4d:b9:f1:64:cc:df:64:64:99:
                    7f:17:f0:e1:de:0a:a2:94:ff:30:16:91:85:49:30:
                    ab:40:03:af:06:1d:2a:5f:4e:b8:9f:da:d9:0a:be:
                    aa:14:69:3b:2d:bc:02:78:a2:60:6f:f3:89:b1:3b:
                    6d:ee:12:07:eb:ab:d4:b9:3d:66:9c:24:6b:84:f0:
                    94:b9:47:54:0e:52:83:cb:3b:f3:3b:d1:68:81:61:
                    d9:57:2a:42:cd:27:c4:5e:c9:83:98:79:6a:dd:b1:
                    87:3a:80:2c:dc:65:ce:2b:9b:d9:40:82:d8:ff:a7:
                    9e:7d:59:ac:46:c6:fa:e7:44:44:59:5b:00:f5:6f:
                    20:0c:77:87:e3:35:f7:af:56:2d:3c:43:77:c7:5a:
                    6e:31:38:73:5b:3b:a6:2c:7e:17:53:0b:29:7e:8b:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:CB:7F:28:3E:6F:E5:21:8E:FD:14:F6:72:90:13:9E:C0:DF:B4
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:4a:5c:92:fa:97:da:57:7b:4a:1d:c7:31:41:97:f5:38:
         00:39:f1:0a:69:82:7e:80:73:cd:ae:2d:9b:a9:9d:13:8e:df:
         55:a3:ce:76:4d:6e:82:9c:9f:5e:f3:5a:ef:85:cf:58:26:a5:
         e9:05:f2:42:c7:64:22:a8:2b:4e:dd:57:60:68:51:4a:13:8a:
         cd:5d:a4:ad:30:47:a9:22:f6:a1:a5:22:a4:e5:f5:eb:5e:d4:
         8d:ca:c6:b5:5d:df:e3:0c:92:5b:1d:a5:0b:3f:68:af:20:a0:
         ed:9c:64:53:e2:1b:a7:43:8b:44:a5:c9:9b:fd:39:66:e5:af:
         0d:5d:57:57:8a:a9:68:cb:6b:19:55:bd:83:42:80:d2:4f:de:
         ce:b6:3c:58:0d:57:05:c7:17:fb:52:18:e0:c4:b6:1c:4e:f6:
         db:02:ad:c9:d0:22:5e:24:7b:04:ed:4b:0a:a3:14:96:0e:ac:
         46:da:66:b7:e2:c3:01:96:ed:a2:6e:c6:05:5e:06:57:41:21:
         e3:88:b5:8a:5e:2d:f0:c6:40:0b:1c:97:7c:11:d9:ef:3a:b1:
         78:09:46:e0:18:c1:9c:16:37:79:62:ea:36:e1:8c:b5:ed:44:
         0f:96:d8:73:ca:df:0f:27:1e:51:c1:f3:a3:b4:41:1b:6d:e3:
         09:78:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:33:31 2025 by rpki-client