Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32352e302f32342d3234203d3e203238333338.roa
File:                     3137372e38372e32352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          j53+zOthWIioWeHPQ0whdCuVwItwBwHDF5TJuku7OiI=
Subject key identifier:   AA:45:D6:3F:E9:C8:E7:71:29:96:11:2A:65:82:C1:22:89:CB:C0:AC
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       0EEC1B0F0B3BBBE62DF1080C4B2AC8DCF7BCEC56
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32352e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:05 +0000
ROA not before:           Wed 30 Apr 2025 18:55:05 +0000
ROA not after:            Wed 29 Apr 2026 19:00:05 +0000
asID:                     28338
IP address blocks:        177.87.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 11:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ec:1b:0f:0b:3b:bb:e6:2d:f1:08:0c:4b:2a:c8:dc:f7:bc:ec:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:05 2025 GMT
            Not After : Apr 29 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:16:2b:08:6f:0a:22:a6:97:92:9a:91:c9:
                    d0:d5:87:d8:3b:be:0d:53:b4:1e:10:fd:10:cb:d7:
                    46:cf:7f:b7:b0:d0:5e:15:13:a7:dc:7b:33:0d:82:
                    35:b7:d8:37:fb:00:cc:26:05:e1:91:aa:3a:3b:0a:
                    6d:4f:3d:b5:60:bc:23:a0:dc:37:33:3f:12:5d:6a:
                    5e:84:e2:9a:b0:10:15:5f:16:ba:08:02:62:90:4e:
                    03:33:fd:d6:83:00:1a:78:c8:e9:1a:c3:e5:20:b9:
                    07:a8:e2:31:d5:7a:cb:44:44:75:3d:17:1a:d1:dc:
                    6b:91:f2:e5:92:18:19:b5:42:d6:49:86:e2:58:f0:
                    57:de:8f:c8:fa:a5:65:89:01:8c:1c:79:ac:ac:fe:
                    cf:d2:3b:d6:60:84:1a:02:be:ea:61:a4:af:4b:87:
                    c8:56:7d:a6:66:44:27:01:22:60:4f:bd:b7:7c:e2:
                    08:38:ba:3e:59:17:55:91:e8:c5:7d:68:b9:43:a9:
                    8d:a8:8d:92:88:37:d5:f5:0b:38:9a:8f:47:fb:3c:
                    5d:88:76:86:6a:45:74:ce:0b:b5:ba:13:89:59:78:
                    56:2c:7c:cd:b8:54:8a:51:46:5d:ce:ce:6e:f0:41:
                    03:1a:00:cf:ee:69:ba:00:7f:9a:4b:10:5c:f9:f8:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:45:D6:3F:E9:C8:E7:71:29:96:11:2A:65:82:C1:22:89:CB:C0:AC
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d1:b2:a3:98:d6:66:0b:77:56:37:56:64:d0:1e:9f:ac:5b:
         c2:74:70:16:ad:64:5d:aa:b1:c0:4c:db:74:f1:64:be:25:3b:
         d6:0c:10:12:07:5e:0e:22:14:88:e2:d8:55:43:ce:7a:a8:ff:
         b4:28:ab:ce:aa:8c:c1:d2:b7:36:18:30:0d:60:7e:43:5f:32:
         b6:b1:80:d9:cb:cc:5b:38:99:76:f1:97:e2:6a:a7:70:50:4a:
         1c:e0:15:99:c7:30:5e:82:94:75:8c:b3:c8:41:8d:c7:53:f6:
         16:cd:27:7d:12:40:45:2b:6a:41:f7:10:8d:ad:f8:88:75:68:
         02:d2:66:6c:fc:93:31:de:dd:cc:97:2f:57:97:f4:40:c4:6e:
         57:f6:88:28:7a:cb:6e:48:db:9b:ad:da:10:98:04:b1:4a:32:
         00:95:ad:9e:a1:a8:37:02:bb:03:6b:02:6e:91:ae:19:37:1d:
         7c:38:11:7d:c4:8f:cf:45:30:12:b8:9a:ad:5f:78:fb:bb:49:
         8f:11:a4:79:b3:55:76:7d:92:66:5b:3d:79:9d:b5:61:70:a2:
         3f:63:a7:97:3c:9c:35:2a:99:d6:84:c7:eb:dd:f7:06:d6:52:
         0b:4f:72:43:a0:d9:57:86:5f:da:00:44:a5:39:b1:1d:c0:38:
         4a:b4:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:06:25 2025 by rpki-client