Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235332e302f32342d3234203d3e20323633333839.roa
File:                     3137372e38372e3235332e302f32342d3234203d3e20323633333839.roa (raw, json)
Hash identifier:          SCyczvQusz2PCprfxAk9H6fteXY7SOU8Qnw7HsNyhR8=
Subject key identifier:   55:33:BC:B5:63:02:E9:B3:1F:01:67:F6:48:E8:A1:BA:5D:C5:03:CF
Certificate issuer:       /CN=11A3253369B722D4E05779F8F48046A43B02EAD1
Certificate serial:       7273E286766894229240D4496E9D93FFAF96295C
Authority key identifier: 11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235332e302f32342d3234203d3e20323633333839.roa
Signing time:             Wed 07 May 2025 14:37:14 +0000
ROA not before:           Wed 07 May 2025 14:32:14 +0000
ROA not after:            Wed 06 May 2026 14:37:14 +0000
asID:                     263389
IP address blocks:        177.87.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl
                          rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 15:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:73:e2:86:76:68:94:22:92:40:d4:49:6e:9d:93:ff:af:96:29:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A3253369B722D4E05779F8F48046A43B02EAD1
        Validity
            Not Before: May  7 14:32:14 2025 GMT
            Not After : May  6 14:37:14 2026 GMT
        Subject: CN=5533BCB56302E9B31F0167F648E8A1BA5DC503CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:5b:12:8d:e9:40:52:24:d3:13:4b:65:75:
                    db:cb:64:4e:7a:7b:b3:1c:8c:b3:db:92:df:3f:77:
                    de:a8:0f:1e:94:be:7c:e4:49:d9:3e:4d:d7:de:81:
                    64:12:e6:c8:49:42:db:92:e2:3b:a8:7c:d5:07:f8:
                    44:dd:01:b1:3b:80:13:b0:1e:28:68:e8:66:36:ff:
                    2a:b2:f9:97:5c:d4:19:d6:91:64:23:4d:31:36:f4:
                    67:03:7b:7c:b5:03:ca:64:7a:b5:1a:93:38:b5:85:
                    ca:fe:38:ac:20:9d:e1:15:fe:a1:81:2e:a9:c2:e4:
                    ed:6b:9d:d3:a2:f9:5f:59:96:ce:06:0a:42:98:46:
                    30:ba:7c:9b:16:3a:37:0d:b8:38:47:99:12:07:ff:
                    17:89:87:54:97:fb:52:2e:e6:f3:38:52:c2:48:ce:
                    97:38:be:43:9a:c6:cc:ec:00:9d:88:14:86:8e:31:
                    7a:d9:82:e6:4f:5d:5f:bf:3a:b0:a6:82:f3:c7:6e:
                    6f:95:d0:77:7f:07:bc:8f:b9:49:55:17:42:57:2b:
                    0f:d0:38:cd:4b:39:35:2a:33:de:a2:84:ee:d3:9e:
                    6c:70:c8:fb:52:4b:59:b6:f6:1a:14:cd:f6:d2:68:
                    54:1e:8f:c0:11:6f:b7:b0:49:49:a4:a6:78:56:70:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:33:BC:B5:63:02:E9:B3:1F:01:67:F6:48:E8:A1:BA:5D:C5:03:CF
            X509v3 Authority Key Identifier:
                keyid:11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235332e302f32342d3234203d3e20323633333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:5e:42:47:e9:da:d6:70:92:43:b6:d2:9f:29:9b:96:1c:6a:
         d5:6f:a8:26:78:4e:eb:20:e1:71:81:9a:97:98:c4:00:bc:58:
         32:e9:ef:47:ab:9c:5c:af:40:57:9b:27:62:c8:d8:99:14:95:
         2f:34:27:8b:0b:74:29:4c:8d:f2:a5:98:28:c9:f7:c3:cc:ab:
         a1:71:58:1b:58:0c:d7:ad:a0:e7:a2:54:3b:b0:54:48:5d:4e:
         18:ef:94:7d:9d:95:f1:f8:8d:d1:59:96:5f:aa:c2:fd:5b:f4:
         fd:36:1a:9e:92:25:32:fc:f4:a1:e9:2b:a7:6d:6d:1d:b0:fb:
         ad:35:55:ad:91:a9:46:e8:91:63:72:0e:54:a4:12:50:50:37:
         92:15:89:e7:2d:41:47:fa:b2:09:c3:06:4d:c4:29:5d:b4:15:
         01:6e:b9:c5:33:eb:1c:6d:c0:e6:87:0a:7a:5c:90:cb:06:9c:
         d0:c7:15:52:fe:71:f5:53:1a:95:4e:00:de:7e:a7:d1:7b:b2:
         84:02:9f:1f:19:95:f7:25:61:21:6e:e1:ba:87:08:20:b7:c0:
         d7:20:de:c5:34:d8:78:d2:d1:a9:de:b4:cf:41:05:3e:2d:b8:
         b8:52:5e:78:84:63:c2:1a:f9:f5:4e:cc:d5:22:75:45:12:95:
         97:8d:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:18:36 2025 by rpki-client