Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa
File:                     3137372e35332e3134382e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          maSwoHPCcQuafYTdap6s53+4+J8mBP0LAXWguZra56s=
Subject key identifier:   3D:C5:7E:E5:B4:88:99:80:37:24:25:24:68:A8:69:D5:4C:9F:E9:D8
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       5765DE9C47797BFEA03F4D49A67E99BA743FDBFB
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa
Signing time:             Tue 08 Jul 2025 01:04:45 +0000
ROA not before:           Tue 08 Jul 2025 00:59:45 +0000
ROA not after:            Tue 07 Jul 2026 01:04:45 +0000
asID:                     53107
IP address blocks:        177.53.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 09:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:65:de:9c:47:79:7b:fe:a0:3f:4d:49:a6:7e:99:ba:74:3f:db:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jul  8 00:59:45 2025 GMT
            Not After : Jul  7 01:04:45 2026 GMT
        Subject: CN=3DC57EE5B48899803724252468A869D54C9FE9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:06:90:c6:98:26:3e:6f:cd:9f:a5:be:92:
                    72:22:7e:e8:18:58:c6:29:be:1f:92:78:2f:b1:c6:
                    ca:19:eb:a6:a4:38:17:98:4a:03:73:2d:d9:c9:8b:
                    16:06:49:d5:e4:64:55:64:f5:04:64:53:7c:78:70:
                    96:69:16:4d:82:c0:6a:9f:15:81:26:4a:a5:7a:df:
                    ac:45:66:b5:c7:b4:78:8b:37:64:97:3f:c4:b9:c9:
                    81:76:87:68:ed:1e:1f:c1:82:ca:dc:5d:07:05:65:
                    a7:37:a9:67:4a:f0:e2:44:6d:34:fe:1b:b9:00:22:
                    4b:4a:05:1d:c8:1f:dc:00:3d:db:c5:21:36:7a:25:
                    ed:88:3f:71:19:0f:dc:21:ef:09:75:13:54:22:81:
                    57:52:94:26:2a:ea:73:38:da:2f:81:fb:95:59:1d:
                    32:2c:50:d8:d8:4f:b5:77:28:19:ec:37:86:a9:7d:
                    7a:ce:be:fe:ec:8e:06:f0:30:78:20:60:79:86:45:
                    3a:15:ee:a4:53:b9:9d:75:33:09:d7:47:c3:eb:74:
                    cb:af:4c:58:37:e0:74:b7:69:98:8f:94:28:ad:f7:
                    96:b4:23:7b:b1:22:66:71:c6:c7:a9:ce:52:93:fa:
                    f6:8e:38:1a:80:f9:28:84:7f:50:05:78:34:bd:ee:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C5:7E:E5:B4:88:99:80:37:24:25:24:68:A8:69:D5:4C:9F:E9:D8
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:f3:be:1e:f2:f2:e2:62:c0:16:de:a6:e8:05:12:f2:38:36:
         05:4f:85:9d:a0:ed:bc:ad:7d:9d:18:65:43:8a:c9:63:4f:8e:
         83:b1:31:c1:f6:e8:7e:df:75:99:6a:ea:04:4a:83:d1:eb:23:
         04:f5:9f:62:6a:68:c5:36:7d:1c:a4:b1:cd:1a:01:9b:94:ed:
         cc:10:32:6c:12:0f:0e:84:3e:51:31:58:73:2f:fd:99:81:66:
         26:1e:c8:fd:02:52:ef:89:45:43:fa:05:c1:1c:79:4c:87:7c:
         9f:f1:4a:5c:6a:e0:ef:2d:95:f3:26:fa:98:4b:2a:ea:01:00:
         f0:76:08:22:37:74:93:45:dc:58:d6:fe:3d:ff:81:51:24:2a:
         9d:0c:3e:e2:20:22:bd:01:a7:35:9e:9a:fb:e6:5d:ba:c9:b7:
         28:f0:b5:d5:1c:e6:cb:37:6d:6d:f2:d7:e0:6c:ee:11:17:8d:
         a4:6c:89:be:be:7e:80:e5:5e:51:60:1e:a8:75:08:26:a0:ec:
         26:b0:59:53:92:89:ca:b2:03:96:a4:38:4a:fb:44:d1:36:3f:
         a8:f7:e2:8e:f7:97:50:41:c8:a7:33:a3:7b:88:d3:75:92:74:
         94:c6:c0:fc:fe:3c:64:97:1f:e6:ea:bc:5b:1f:d3:d1:a5:fa:
         dd:ba:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:03:33 2025 by rpki-client