Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235322e302f32332d3233203d3e20323633333839.roa
File:                     3137372e38372e3235322e302f32332d3233203d3e20323633333839.roa (raw, json)
Hash identifier:          ch8XTm7ZUQlA5JMjkY9nrGp29Qy7grIUZKqj5QoPfag=
Subject key identifier:   D3:80:9C:FD:6A:28:D9:4A:FB:8B:1D:AC:6F:0D:48:C2:0B:3E:9A:10
Certificate issuer:       /CN=11A3253369B722D4E05779F8F48046A43B02EAD1
Certificate serial:       142C8D683809F7E008DE7915F7DC9E73384022DA
Authority key identifier: 11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235322e302f32332d3233203d3e20323633333839.roa
Signing time:             Wed 07 May 2025 14:37:16 +0000
ROA not before:           Wed 07 May 2025 14:32:16 +0000
ROA not after:            Wed 06 May 2026 14:37:16 +0000
asID:                     263389
IP address blocks:        177.87.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl
                          rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 15:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2c:8d:68:38:09:f7:e0:08:de:79:15:f7:dc:9e:73:38:40:22:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A3253369B722D4E05779F8F48046A43B02EAD1
        Validity
            Not Before: May  7 14:32:16 2025 GMT
            Not After : May  6 14:37:16 2026 GMT
        Subject: CN=D3809CFD6A28D94AFB8B1DAC6F0D48C20B3E9A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:93:51:b6:ff:6e:df:a5:93:80:96:5d:44:
                    56:0e:06:0a:b1:51:8f:e4:1c:0b:9c:c5:98:6a:bb:
                    0b:c2:d7:77:c3:94:d2:69:cc:a3:53:ff:5e:57:12:
                    06:d4:bd:0b:ac:95:08:ab:0c:64:ea:a2:7e:ca:e6:
                    aa:ca:10:e3:f4:2a:45:a2:e5:63:29:f3:fe:d8:fa:
                    33:98:9c:47:da:ef:d9:3c:cc:ce:f9:d3:20:0e:d5:
                    24:fc:65:47:8d:da:9d:c9:de:b4:d7:ba:c5:a9:36:
                    38:2c:83:15:b7:96:42:c0:b8:7d:58:38:a9:c5:91:
                    82:d3:0a:3d:f7:b0:e3:15:84:c8:da:f9:66:8a:70:
                    4c:ed:bb:2a:71:bb:98:90:11:32:c0:be:b6:44:01:
                    5c:34:11:a0:7d:e4:12:81:c5:c6:1f:ac:c7:e7:46:
                    27:56:67:10:fa:28:55:40:a0:bc:c4:60:0e:eb:a6:
                    3e:8b:2c:44:de:e5:44:65:b6:f2:66:82:82:9b:06:
                    82:1a:32:9b:c0:06:12:10:f2:a2:fe:c1:e6:92:29:
                    94:26:ab:31:70:76:be:9f:42:12:aa:76:bc:11:fc:
                    63:b3:fc:43:81:77:a8:3b:01:77:fa:7d:46:80:e4:
                    de:84:ca:a5:b6:8a:4c:e9:a8:72:da:c1:c5:c6:7d:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:80:9C:FD:6A:28:D9:4A:FB:8B:1D:AC:6F:0D:48:C2:0B:3E:9A:10
            X509v3 Authority Key Identifier:
                keyid:11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235322e302f32332d3233203d3e20323633333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:20:1e:f2:17:45:df:a3:35:76:5d:09:63:5f:68:db:eb:85:
         57:5a:63:22:98:eb:e0:1f:2d:7d:50:7a:8f:b5:c3:ac:7d:a0:
         5a:9f:c6:a8:eb:48:1f:ca:12:62:d3:e8:23:61:aa:52:ad:89:
         6e:2e:d0:2d:aa:0e:85:af:6e:39:85:06:84:9a:b4:f5:6c:c3:
         d2:a5:b3:a8:b5:1d:34:12:20:16:18:4f:64:24:a8:c4:e0:46:
         ee:55:f4:4f:92:0f:3c:0c:62:63:7b:68:ec:63:43:3a:88:e2:
         fa:b4:ac:ee:e3:20:bf:fa:05:fc:ea:7d:13:1f:bc:ac:9b:5a:
         a3:e4:c3:bd:90:af:6c:95:db:6b:20:1a:9d:c6:f4:39:28:c1:
         ff:0b:bf:34:00:70:a4:49:6e:98:ee:24:6d:83:d6:17:d2:20:
         ef:cf:11:14:a7:52:8b:9f:8b:df:d0:7e:2f:e6:d7:92:9b:20:
         6b:58:1f:5b:85:a9:fb:48:33:1d:45:8d:6a:d2:a6:ac:63:26:
         3a:74:05:8f:85:81:4c:2b:c3:b9:74:53:ee:28:a7:a4:48:77:
         ff:5b:7e:73:81:4d:38:92:7b:22:6c:e1:e1:fa:83:8a:e1:ed:
         c1:b7:76:61:c0:d8:a9:38:d1:38:30:a9:6a:87:a4:13:5a:d0:
         60:f9:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:20:25 2025 by rpki-client