Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa
File:                     3137372e38342e35362e302f32322d3234203d3e203532373039.roa (raw, json)
Hash identifier:          bq3xVZkOvuPZeCn5gvI3Me1gEYFtoMS7BmGzgaOreUc=
Subject key identifier:   8E:9D:6C:2F:D4:D3:3D:34:88:0B:3A:4E:E7:DF:AE:9E:0D:0A:8A:7D
Certificate issuer:       /CN=3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380
Certificate serial:       310F450F5299AEB0D3A8001785091EBDD4AB23F4
Authority key identifier: 3D:6D:9C:C5:9A:D7:D4:E2:DF:69:7C:11:85:CA:EA:C0:32:6C:13:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa
Signing time:             Thu 22 May 2025 20:05:15 +0000
ROA not before:           Thu 22 May 2025 20:00:15 +0000
ROA not after:            Thu 21 May 2026 20:05:15 +0000
asID:                     52709
IP address blocks:        177.84.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.crl
                          rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0f:45:0f:52:99:ae:b0:d3:a8:00:17:85:09:1e:bd:d4:ab:23:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380
        Validity
            Not Before: May 22 20:00:15 2025 GMT
            Not After : May 21 20:05:15 2026 GMT
        Subject: CN=8E9D6C2FD4D33D34880B3A4EE7DFAE9E0D0A8A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:b8:24:80:8e:3b:a7:37:b4:7e:e2:29:05:
                    06:79:1e:4c:26:b8:a5:73:49:e4:16:dc:77:11:ed:
                    6d:b0:87:de:32:4a:d8:11:83:fa:92:36:81:37:85:
                    37:e8:50:2d:92:a6:40:8e:ef:91:10:e0:b2:d0:06:
                    95:3b:55:39:3d:70:57:4f:d4:77:dc:86:d0:88:38:
                    70:a3:d4:a5:c7:76:22:97:15:50:c2:dc:c7:dc:79:
                    bd:e9:47:66:f0:10:c1:e7:c4:df:7e:8b:12:ad:b8:
                    e9:97:b6:e1:1f:a4:03:17:52:71:36:49:82:d7:b8:
                    d7:80:8f:80:c0:8b:65:0f:eb:a7:69:e5:57:c6:1e:
                    21:46:e4:13:9f:3e:8b:f5:3d:a7:b6:32:97:61:b2:
                    5c:49:5a:39:db:5e:48:5f:9e:08:4d:1d:a4:8d:4c:
                    46:ca:2b:44:7b:80:ba:ad:8f:64:e3:73:d1:01:4d:
                    eb:1a:fb:9f:95:60:86:9c:ab:ce:ab:9e:67:d6:f8:
                    a5:3b:cd:c3:3b:45:19:3c:d8:97:eb:61:da:ef:fe:
                    a0:4b:11:c4:34:1e:4b:c6:c0:79:43:e4:da:57:d8:
                    76:f4:83:2a:06:2f:62:e9:e7:22:4e:2d:aa:61:e3:
                    fc:4d:ee:4b:c4:c8:a4:17:b6:59:68:a5:b5:2f:b5:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9D:6C:2F:D4:D3:3D:34:88:0B:3A:4E:E7:DF:AE:9E:0D:0A:8A:7D
            X509v3 Authority Key Identifier:
                keyid:3D:6D:9C:C5:9A:D7:D4:E2:DF:69:7C:11:85:CA:EA:C0:32:6C:13:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:57:94:8a:84:de:a9:e1:cb:98:6e:8a:79:fe:80:0b:b0:
         21:ab:22:b3:4b:6d:ae:60:06:12:dd:fa:48:81:6d:6b:0f:8a:
         a1:ea:12:65:04:db:2a:c4:01:22:5f:68:b3:ff:89:00:dc:52:
         10:25:53:2c:cd:79:53:fe:00:d9:11:9e:b4:7c:a8:0e:92:4a:
         a7:df:19:56:d0:d9:61:74:af:3f:be:bc:96:8b:54:bf:ff:87:
         d9:f6:03:10:d2:bf:91:75:f0:42:d0:a7:0f:4b:19:56:91:b1:
         8d:2a:bf:b6:af:fc:5b:41:4f:15:b3:b8:07:f4:7c:ec:e3:d9:
         71:d8:7b:15:2d:9d:8d:c9:f5:a5:f8:82:56:ff:75:67:e6:eb:
         86:6c:be:2c:f2:87:cf:2d:69:26:54:6b:48:64:7f:c9:df:ec:
         70:92:cc:4c:3b:5b:86:33:c3:35:08:18:1e:a2:de:2f:ad:cc:
         3a:a3:83:46:d4:9f:76:ed:10:0c:11:4b:b3:26:d5:77:7b:13:
         05:ef:6b:db:0c:7a:07:0f:9e:ad:ed:6c:c2:d4:5b:f8:a9:00:
         ef:b8:a1:d5:eb:96:c0:6b:bb:d3:2e:39:f4:b8:65:8c:ff:49:
         ae:2c:36:ee:22:01:4a:8b:80:25:a8:b4:62:0a:f0:ad:ef:f0:
         fe:1e:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:56:19 2025 by rpki-client