Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235322e302f32342d3234203d3e20323633333839.roa
File:                     3137372e38372e3235322e302f32342d3234203d3e20323633333839.roa (raw, json)
Hash identifier:          338tw8nLS+z9DU+gKxTKHyY9xIuevL+MhiRqm63LwoI=
Subject key identifier:   2F:70:D0:10:28:0D:F9:00:CD:2D:38:94:6E:94:22:EC:7B:D1:FC:2D
Certificate issuer:       /CN=11A3253369B722D4E05779F8F48046A43B02EAD1
Certificate serial:       34914FABD8ADC49A59196CEC73D86BA9F3BCF23D
Authority key identifier: 11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235322e302f32342d3234203d3e20323633333839.roa
Signing time:             Wed 07 May 2025 14:37:14 +0000
ROA not before:           Wed 07 May 2025 14:32:14 +0000
ROA not after:            Wed 06 May 2026 14:37:14 +0000
asID:                     263389
IP address blocks:        177.87.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl
                          rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:91:4f:ab:d8:ad:c4:9a:59:19:6c:ec:73:d8:6b:a9:f3:bc:f2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A3253369B722D4E05779F8F48046A43B02EAD1
        Validity
            Not Before: May  7 14:32:14 2025 GMT
            Not After : May  6 14:37:14 2026 GMT
        Subject: CN=2F70D010280DF900CD2D38946E9422EC7BD1FC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:10:b1:d0:9a:20:9e:1a:8d:d5:72:ce:86:
                    d8:a4:20:fe:a7:bc:69:88:6c:02:2f:01:1e:31:99:
                    53:9e:00:b2:b3:f7:57:ff:0d:83:6c:2c:96:7c:83:
                    66:72:8b:8b:fd:3b:a6:04:37:be:89:56:33:f4:75:
                    26:90:87:96:df:2c:b4:47:42:bd:ef:0f:53:27:38:
                    c4:fe:7e:ee:cb:be:52:3b:db:4c:9b:fe:99:1f:80:
                    44:08:d1:dc:6c:6d:b8:5a:2e:0e:c0:d7:4d:19:c1:
                    0b:6d:9f:0b:2d:1e:71:7b:97:98:2d:86:fd:24:42:
                    41:bd:27:c8:b2:59:82:73:e2:44:b6:cc:6b:dc:62:
                    90:d3:90:a4:cb:78:82:6f:33:54:61:68:42:a7:9d:
                    6f:51:ad:05:3a:f0:5d:18:dd:82:17:bb:55:74:8e:
                    c6:de:f2:65:51:29:1a:56:00:32:60:e7:3d:c1:36:
                    bc:12:8c:08:2e:7d:4d:c9:9c:c6:a7:89:9d:12:3d:
                    f2:08:3d:5b:5b:6f:fc:ab:c8:8e:32:23:af:3f:ac:
                    d0:bb:ae:1f:bc:dc:08:c0:82:ce:46:5e:27:b7:ec:
                    b9:c1:a7:1d:f3:15:69:2c:32:f9:52:16:88:64:ee:
                    d0:23:6e:96:cd:e4:e2:85:75:9e:92:2a:39:e3:8d:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:70:D0:10:28:0D:F9:00:CD:2D:38:94:6E:94:22:EC:7B:D1:FC:2D
            X509v3 Authority Key Identifier:
                keyid:11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235322e302f32342d3234203d3e20323633333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:66:4e:b9:f2:62:f4:66:65:52:c2:18:76:2a:64:9f:1a:
         82:b6:34:5b:14:5e:60:4e:cb:fa:52:ec:d7:03:19:ad:a2:16:
         53:bc:d7:ec:1a:15:61:39:82:33:5c:a6:f6:77:2c:a1:08:9f:
         91:02:55:73:a1:7a:2e:49:ab:07:7b:d0:d0:9e:c9:59:12:a8:
         cb:1c:1c:4c:40:82:7d:b5:97:b2:3c:1a:fe:09:a4:3a:1b:fa:
         58:a4:f7:d7:ca:60:11:16:b4:48:bd:ad:19:5f:66:e4:ff:8b:
         7a:5e:81:d9:c7:4a:09:1d:c3:01:92:c2:11:2d:80:68:79:f8:
         31:06:e0:10:d4:f3:8f:55:66:82:af:18:e3:50:5e:4e:55:ea:
         92:5d:f8:7e:7c:c1:41:01:2f:71:77:89:df:b8:ac:52:98:79:
         fc:f7:c5:c4:f4:af:39:0c:61:80:33:8b:ea:3d:f5:01:d3:63:
         c6:27:92:3c:5b:37:ef:3c:5f:9d:f0:5e:98:44:2e:c8:00:48:
         3c:84:ed:9e:af:e0:b0:18:cb:17:69:01:6e:9f:ef:80:89:c0:
         af:6a:96:26:b3:d3:06:42:a1:ba:39:94:5f:29:48:2f:5d:b4:
         5a:5d:e1:bb:62:3c:f2:ba:45:3c:29:c0:b7:8d:d5:c4:e7:89:
         09:c9:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:26 2025 by rpki-client