Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/3137372e35322e3234302e302f32322d3332203d3e20323632343533.roa
File:                     3137372e35322e3234302e302f32322d3332203d3e20323632343533.roa (raw, json)
Hash identifier:          kT4yj8yFSiH6EDqd+WdC583lgIULpCZHsmLGa7cAUtY=
Subject key identifier:   17:41:06:B3:BE:8B:4E:0B:C9:39:75:F6:29:FC:3A:81:69:BE:03:91
Certificate issuer:       /CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB
Certificate serial:       52FFB8E0C807FAA3B9B42D03029F88E46A3D2A82
Authority key identifier: 25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/3137372e35322e3234302e302f32322d3332203d3e20323632343533.roa
Signing time:             Wed 27 Aug 2025 17:47:18 +0000
ROA not before:           Wed 27 Aug 2025 17:42:18 +0000
ROA not after:            Wed 26 Aug 2026 17:47:18 +0000
asID:                     262453
IP address blocks:        177.52.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl
                          rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ff:b8:e0:c8:07:fa:a3:b9:b4:2d:03:02:9f:88:e4:6a:3d:2a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB
        Validity
            Not Before: Aug 27 17:42:18 2025 GMT
            Not After : Aug 26 17:47:18 2026 GMT
        Subject: CN=174106B3BE8B4E0BC93975F629FC3A8169BE0391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:f7:f3:9f:2d:64:fc:cd:44:2a:7c:0b:e6:
                    f5:77:c0:89:d7:6d:16:85:31:ed:c9:fb:01:56:ff:
                    ae:3a:6b:a5:fb:a1:6b:b0:e1:05:7c:fb:13:6d:74:
                    1a:8c:40:b3:31:f7:5d:26:fa:09:83:6f:9d:11:f6:
                    e1:0a:a8:d1:ec:a9:e5:4e:44:99:a7:8b:21:37:c4:
                    07:27:0b:cb:d1:fb:c3:77:5b:a1:6a:bd:fe:1a:d0:
                    2a:5c:9f:16:91:c0:16:e6:23:9e:51:18:5b:83:cc:
                    fd:b4:25:18:ab:51:ce:71:8f:8a:b9:88:50:ef:8b:
                    02:a6:be:79:50:8d:df:d3:aa:fd:e3:99:44:35:bb:
                    87:4b:a1:27:20:37:99:e2:cc:8d:4c:27:ff:7a:6f:
                    5a:a0:e1:e1:d0:50:17:aa:9f:d0:2a:e0:0d:1f:0f:
                    e6:f1:a7:00:9d:d6:50:9d:8e:bf:0b:87:01:06:b7:
                    4c:bd:85:9e:d9:04:36:4d:26:48:8e:f6:10:24:ef:
                    ef:c1:7e:c9:fa:8c:70:20:c2:da:51:6a:77:ba:58:
                    0d:22:af:6b:91:2b:6a:4f:7b:a6:86:c4:3a:07:2a:
                    0b:10:4a:57:06:ad:48:4a:e7:70:b5:37:8e:ad:51:
                    87:8f:44:e4:3e:af:b4:09:3c:eb:f8:84:64:ce:65:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:41:06:B3:BE:8B:4E:0B:C9:39:75:F6:29:FC:3A:81:69:BE:03:91
            X509v3 Authority Key Identifier:
                keyid:25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/3137372e35322e3234302e302f32322d3332203d3e20323632343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:0b:d1:ff:9a:a1:ac:82:f2:54:f2:71:a8:93:b8:2c:e7:
         7e:4d:38:f7:fc:75:21:4a:86:66:4b:26:0a:72:20:57:6b:97:
         76:ca:a0:c9:30:5b:fb:d9:b6:05:21:53:98:dd:b2:02:31:41:
         0d:6b:d2:e3:be:e5:a9:83:54:b7:bc:54:35:84:77:56:55:18:
         f2:d0:60:42:9b:4e:6d:a8:54:f8:3a:01:01:48:3e:f9:17:bc:
         a4:dc:84:c5:48:c0:65:ee:20:4f:0f:57:6e:fb:6f:d9:ae:ba:
         61:3e:21:1e:2f:27:4e:50:62:ec:22:08:7a:b4:bb:4c:f1:f1:
         61:a8:6c:42:f3:6f:9e:6a:16:2d:7c:84:10:98:be:fa:a0:27:
         60:d1:7f:7c:3c:8f:9e:44:28:d5:bc:dc:70:03:08:e8:db:8b:
         d9:d4:97:f9:cb:b8:78:ae:48:84:93:60:22:6c:59:6d:cf:3c:
         01:00:79:3b:9b:2b:e3:63:98:ae:2f:22:c0:12:8d:ed:08:bd:
         da:7c:87:a2:06:02:ec:e5:54:87:86:70:18:d9:c5:c2:77:a2:
         1f:a9:18:a3:98:58:a8:95:1e:ec:22:67:3e:64:91:38:13:14:
         d9:e6:6e:ad:2e:0f:fc:2c:53:76:54:4c:d2:05:37:8a:e0:c1:
         9f:25:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:02:07 2025 by rpki-client