Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3234203d3e203532383938.roa
File:                     3137372e3138342e36342e302f32302d3234203d3e203532383938.roa (raw, json)
Hash identifier:          u5VZboufd9q3izfHx5cNQeI0r2bBo05yX5Km59lO+FA=
Subject key identifier:   95:E8:09:A7:CE:1F:8D:2D:C2:B9:5D:6A:23:CE:63:F7:D6:CE:43:20
Certificate issuer:       /CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
Certificate serial:       4E274221403F2A887DF22182374CBCFA0DC41BAD
Authority key identifier: C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3234203d3e203532383938.roa
Signing time:             Mon 07 Jul 2025 16:53:39 +0000
ROA not before:           Mon 07 Jul 2025 16:48:39 +0000
ROA not after:            Mon 06 Jul 2026 16:53:39 +0000
asID:                     52898
IP address blocks:        177.184.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl
                          rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:27:42:21:40:3f:2a:88:7d:f2:21:82:37:4c:bc:fa:0d:c4:1b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6
        Validity
            Not Before: Jul  7 16:48:39 2025 GMT
            Not After : Jul  6 16:53:39 2026 GMT
        Subject: CN=95E809A7CE1F8D2DC2B95D6A23CE63F7D6CE4320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:5c:de:8c:16:6c:bb:49:6d:84:a8:25:6a:
                    17:26:69:58:44:05:e4:a6:78:da:13:34:75:1f:b2:
                    fb:e7:48:d3:69:05:bd:f2:0b:1e:30:39:50:9c:63:
                    97:48:9b:a9:81:90:a1:2d:fa:06:22:ec:fd:c5:ec:
                    5a:ca:e7:89:ad:c3:08:d7:3b:3d:f3:12:e1:2d:02:
                    fa:df:a3:99:40:d9:09:db:da:a7:0b:35:17:fd:5c:
                    07:93:8e:2e:f6:29:35:e1:10:dc:eb:53:83:8f:bf:
                    78:c7:96:97:26:35:23:b6:73:71:9f:57:b1:8a:ab:
                    c8:93:71:76:fc:ec:f5:d2:70:5d:45:1f:1f:4b:66:
                    ce:d3:b3:cb:cc:cd:92:de:8e:e4:5d:03:c9:7d:49:
                    bb:8f:61:e7:ae:8d:53:63:ab:d9:34:d8:19:b5:59:
                    36:71:97:75:83:2f:d0:aa:f4:16:e0:e0:16:9d:0b:
                    63:b3:b4:6a:5f:a2:3a:e4:bd:d7:f7:91:22:bc:ff:
                    66:62:6f:e1:81:eb:ac:dd:de:61:4b:47:1a:3e:2b:
                    f2:ce:6f:b2:2a:53:f6:12:99:20:41:0b:59:49:0e:
                    86:cc:73:16:72:7f:ec:d3:2f:2f:c8:20:75:ad:3f:
                    22:10:75:f8:09:0a:5c:0d:e0:19:60:85:8e:86:ef:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E8:09:A7:CE:1F:8D:2D:C2:B9:5D:6A:23:CE:63:F7:D6:CE:43:20
            X509v3 Authority Key Identifier:
                keyid:C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3234203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:16:33:95:54:a7:2f:76:ed:bf:94:57:89:eb:3e:20:6c:
         34:59:6d:5b:ee:89:8a:ef:de:08:dd:9c:03:57:57:be:f9:b1:
         97:04:8e:27:5e:66:1d:a8:6d:1e:a0:04:09:2c:c5:31:5e:ac:
         15:7f:16:dc:0f:9e:b7:fa:c1:14:f8:5a:1f:09:07:b0:1c:27:
         10:7e:ed:e9:43:58:6d:b8:ad:9e:07:cb:48:d6:ca:f6:f2:d4:
         8f:ce:0f:c3:c9:36:f6:5b:37:1a:75:65:57:85:81:e6:62:9b:
         ff:75:a0:61:5e:6b:b6:42:aa:53:f5:ff:24:72:f2:4e:26:d9:
         3b:df:5a:cb:65:6e:e4:2c:17:33:6b:81:99:18:da:bf:10:80:
         ae:38:e9:36:56:be:ef:1b:13:58:ff:02:39:02:a9:97:e5:bf:
         ca:38:16:a7:01:e9:86:aa:3f:44:42:63:88:e0:b3:36:fa:4a:
         26:ab:a9:77:76:50:2d:33:e4:43:18:cb:f1:06:0f:02:01:44:
         81:84:ea:50:53:0d:62:21:1e:3d:97:2b:32:1d:5b:5c:ef:cd:
         d0:d8:6f:d9:0e:6d:44:d8:a9:de:b7:16:53:85:ab:d0:02:f0:
         04:82:1f:9b:ef:83:3a:93:34:59:56:6e:6d:ea:a4:0a:28:1c:
         7a:3f:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 11:28:31 2025 by rpki-client