Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235342e302f32332d3233203d3e20323633333839.roa
File:                     3137372e38372e3235342e302f32332d3233203d3e20323633333839.roa (raw, json)
Hash identifier:          bkS8A2KXEh7rDSdBqH7AM1IzQBNgzQt+U1CAAxcDrwk=
Subject key identifier:   0B:5C:27:D1:1B:F4:61:AE:C5:84:96:C4:BD:AD:F2:95:11:C3:43:EC
Certificate issuer:       /CN=11A3253369B722D4E05779F8F48046A43B02EAD1
Certificate serial:       151FE4EB95D5910C4CF74492E3D93C33EA320D6B
Authority key identifier: 11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235342e302f32332d3233203d3e20323633333839.roa
Signing time:             Wed 07 May 2025 14:37:16 +0000
ROA not before:           Wed 07 May 2025 14:32:16 +0000
ROA not after:            Wed 06 May 2026 14:37:16 +0000
asID:                     263389
IP address blocks:        177.87.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl
                          rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 15:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1f:e4:eb:95:d5:91:0c:4c:f7:44:92:e3:d9:3c:33:ea:32:0d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A3253369B722D4E05779F8F48046A43B02EAD1
        Validity
            Not Before: May  7 14:32:16 2025 GMT
            Not After : May  6 14:37:16 2026 GMT
        Subject: CN=0B5C27D11BF461AEC58496C4BDADF29511C343EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:24:f8:93:85:56:63:d7:2d:78:6b:6c:6e:bc:
                    95:5f:a9:dc:3d:e6:ce:68:39:c1:18:aa:0e:e8:f7:
                    46:62:89:99:83:3b:e4:e3:4c:3c:bb:3d:44:99:d8:
                    2f:a7:9f:bc:ed:f8:a2:45:e2:1b:bf:8e:44:1e:6c:
                    02:2d:f1:fa:32:92:b3:47:de:aa:39:64:88:b1:9d:
                    67:a2:09:50:36:b2:8f:16:54:93:5f:5a:37:0e:93:
                    c9:65:f0:56:e8:41:2c:b7:85:70:ca:55:e3:fa:50:
                    58:fb:e7:15:8e:5d:74:76:89:eb:a7:d3:5d:58:33:
                    51:c4:49:ad:2f:1f:d0:50:69:6b:99:22:e0:66:5d:
                    18:c9:3b:61:08:37:4d:29:87:38:4b:94:3d:53:b3:
                    19:f2:0d:32:8e:7f:13:79:17:60:5f:5d:c8:9f:71:
                    97:8e:42:30:7e:74:23:06:3f:01:06:7b:7a:47:49:
                    02:88:12:e3:48:1b:40:d1:80:35:2f:9e:03:bd:5e:
                    eb:36:cf:f0:12:9d:d6:d6:33:87:6a:ec:47:f7:20:
                    80:fa:24:48:67:3a:ee:4e:20:3c:0c:b6:ee:92:d2:
                    e2:5b:0c:05:c6:10:92:6d:6d:55:80:2a:86:62:09:
                    48:cf:8b:7c:c6:45:eb:64:cc:f7:8a:e7:d5:13:b5:
                    85:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5C:27:D1:1B:F4:61:AE:C5:84:96:C4:BD:AD:F2:95:11:C3:43:EC
            X509v3 Authority Key Identifier:
                keyid:11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/3137372e38372e3235342e302f32332d3233203d3e20323633333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:fa:fa:3a:81:73:36:4f:62:16:c9:17:8b:07:eb:c2:4f:f8:
         0a:c6:e5:57:43:5c:86:fd:66:99:94:f0:2a:97:0a:af:a2:cd:
         1c:80:40:f0:ce:d0:c4:7b:7b:8b:14:9b:24:8c:20:50:2e:7f:
         92:bc:bf:52:cb:54:03:94:4c:72:aa:ce:3a:49:57:6f:ad:1c:
         84:fa:3e:e4:22:2a:4d:1e:91:f2:07:77:f5:db:56:e7:2f:56:
         8e:9d:f6:2d:39:71:e5:30:33:06:b4:b9:86:9a:a8:0d:34:a0:
         11:a5:8d:56:0b:26:89:26:01:06:99:a0:d1:f0:e3:19:49:ff:
         92:51:92:a6:10:a7:6b:57:81:39:f3:a8:5d:e0:5c:5b:8a:6e:
         fd:72:df:df:a8:56:0d:e6:a3:95:e9:26:8d:af:d7:0b:6f:fd:
         0a:2f:c7:23:66:ba:ac:cd:08:db:11:81:01:90:bc:73:18:d9:
         44:a3:c8:70:5b:64:d9:16:75:96:be:9a:6c:b2:b0:0a:7c:39:
         94:b5:40:e7:d7:56:14:e5:05:dd:b1:ea:db:e3:a5:30:f4:48:
         85:77:e1:74:65:3d:21:fe:e1:46:13:44:76:f9:28:01:d4:ff:
         c3:0e:78:6f:2d:f7:1b:b2:7d:9f:6b:2e:ed:0b:1d:84:b8:91:
         bf:5e:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:02:29 2025 by rpki-client