Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3137372e38362e33362e302f32342d3234203d3e203532353439.roa
File:                     3137372e38362e33362e302f32342d3234203d3e203532353439.roa (raw, json)
Hash identifier:          HV92tDOW5r1qXWmn40UoT4Kc8uEAMWDiRI0jL6rHD30=
Subject key identifier:   5F:15:CE:10:1B:62:7A:96:9B:10:06:C2:27:2D:5D:9C:6C:C0:30:75
Certificate issuer:       /CN=5F8F031A7D99BDA7B63CC80436979A44A62B14CF
Certificate serial:       0BC6024AA6B137FBE60C7D01433F319F7536572E
Authority key identifier: 5F:8F:03:1A:7D:99:BD:A7:B6:3C:C8:04:36:97:9A:44:A6:2B:14:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3137372e38362e33362e302f32342d3234203d3e203532353439.roa
Signing time:             Tue 03 Jun 2025 16:49:32 +0000
ROA not before:           Tue 03 Jun 2025 16:44:32 +0000
ROA not after:            Tue 02 Jun 2026 16:49:32 +0000
asID:                     52549
IP address blocks:        177.86.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl
                          rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 02:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c6:02:4a:a6:b1:37:fb:e6:0c:7d:01:43:3f:31:9f:75:36:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F8F031A7D99BDA7B63CC80436979A44A62B14CF
        Validity
            Not Before: Jun  3 16:44:32 2025 GMT
            Not After : Jun  2 16:49:32 2026 GMT
        Subject: CN=5F15CE101B627A969B1006C2272D5D9C6CC03075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:77:12:b1:b8:cb:b0:35:6c:c9:c6:ef:e2:
                    29:20:53:8f:14:1c:3d:4c:13:55:37:37:07:b9:ed:
                    74:27:2b:61:53:9c:ab:a7:2d:45:99:b6:d9:fb:5e:
                    4c:d1:2b:66:b2:c7:a9:47:6c:be:5d:99:ec:ca:94:
                    77:fb:fd:9c:a4:a1:b6:f1:3d:64:cf:3c:b9:e4:d8:
                    24:5b:a1:a2:19:98:ef:26:e1:fa:c2:4f:63:f0:f8:
                    d0:70:4f:ae:21:46:4d:df:d9:ec:9d:9c:ce:5b:3d:
                    d7:a7:f9:95:49:3f:9d:2a:33:fa:18:b0:3e:48:b8:
                    d6:7e:78:91:2a:84:f1:16:ce:c2:e4:77:01:a9:a9:
                    53:22:58:f2:e8:ce:8b:3b:8e:af:01:c8:95:18:21:
                    a9:94:f6:49:2d:28:bf:ff:e7:d5:b1:74:bf:39:61:
                    ef:d8:ae:a9:07:75:7e:24:53:70:8f:15:59:2e:a3:
                    92:e0:73:24:2c:bf:df:c3:f0:47:7f:ea:8a:5a:1b:
                    c4:2a:45:12:e7:a6:c6:b8:07:37:dc:95:4f:34:39:
                    bb:8c:99:7c:02:e9:ba:1f:6a:4e:08:41:fe:69:4a:
                    19:90:d5:a5:f2:71:40:34:48:73:bd:f2:66:98:a5:
                    3c:08:89:7f:7e:b5:9f:ea:3b:3b:92:1b:61:50:ad:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:15:CE:10:1B:62:7A:96:9B:10:06:C2:27:2D:5D:9C:6C:C0:30:75
            X509v3 Authority Key Identifier:
                keyid:5F:8F:03:1A:7D:99:BD:A7:B6:3C:C8:04:36:97:9A:44:A6:2B:14:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3137372e38362e33362e302f32342d3234203d3e203532353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:99:ae:e0:ec:83:d8:f6:85:68:e7:af:88:e4:c1:f3:86:ae:
         17:68:0d:d5:b7:74:1f:2f:c3:44:17:6c:8a:47:46:4a:ac:ab:
         0e:08:47:ed:e1:da:6e:13:a0:38:71:15:06:eb:78:10:44:cd:
         61:94:26:51:8e:fb:41:5c:93:62:f4:16:71:a0:b2:43:63:4e:
         8a:78:21:b5:b1:cd:00:53:c6:a2:4c:9a:7e:ff:05:b1:34:fb:
         88:93:f2:f9:72:ff:65:11:7f:1f:ee:e5:74:d2:e4:99:8f:49:
         2a:cf:20:05:5f:2c:4e:09:82:61:4f:63:02:b2:f6:26:f3:6a:
         a4:18:33:8c:2f:1e:5f:c3:71:ec:17:31:8e:13:57:9a:83:70:
         da:fd:ee:46:5d:70:38:38:0a:77:07:a2:f8:9f:de:97:8c:76:
         91:51:bc:6e:b0:b2:d2:94:06:17:5c:00:e6:b4:ce:27:27:e4:
         4f:dc:d9:43:62:50:be:e3:72:b3:4f:c8:48:23:b0:b5:32:d2:
         b6:ce:c1:6b:90:6f:9b:02:a9:4f:1c:89:1a:af:d6:c1:05:88:
         a5:55:94:8e:ad:4a:88:1d:a9:b4:c1:76:fa:52:27:a5:e2:aa:
         2c:c3:63:28:be:6e:97:9d:21:90:18:c9:d4:9e:a5:93:43:54:
         39:86:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:43:01 2025 by rpki-client