Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa
File:                     3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          X/dMtnCq7hHy5mLHCd4+hYvO9B6J1kT71A40w13OW64=
Subject key identifier:   A1:25:5A:27:68:43:8A:E3:29:3B:2D:A3:36:FC:E5:27:45:93:5D:DA
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       164269A8FCD0AABCDAF58C5C15079206E57C52F3
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa
Signing time:             Thu 26 Jun 2025 18:52:39 +0000
ROA not before:           Thu 26 Jun 2025 18:47:39 +0000
ROA not after:            Thu 25 Jun 2026 18:52:39 +0000
asID:                     262462
IP address blocks:        177.54.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 16:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:42:69:a8:fc:d0:aa:bc:da:f5:8c:5c:15:07:92:06:e5:7c:52:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Jun 26 18:47:39 2025 GMT
            Not After : Jun 25 18:52:39 2026 GMT
        Subject: CN=A1255A2768438AE3293B2DA336FCE52745935DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:40:7e:8b:17:ea:90:9b:55:9a:9e:fb:8e:
                    71:f4:b9:e0:b5:17:b9:44:f5:88:e2:1b:ec:70:7c:
                    85:54:75:0d:67:f4:29:17:aa:0a:af:c7:c0:1a:e8:
                    ab:37:a4:0e:da:82:75:23:1c:f5:a5:d2:59:6e:88:
                    62:c8:45:8f:a3:05:50:a6:fc:d2:52:bb:2d:ab:bb:
                    dd:2a:48:4d:eb:73:b8:c9:2f:8d:9f:fd:bb:d2:2d:
                    a0:fb:06:d2:e8:53:24:47:c2:16:b5:e0:9e:c8:fb:
                    57:da:cc:23:16:fd:a2:00:26:bf:98:49:78:e1:31:
                    48:5d:2b:73:63:51:2e:73:e8:d5:62:3f:52:c2:1d:
                    86:e9:cb:43:7b:80:76:a7:5c:6d:db:9d:d8:63:8b:
                    0c:cc:58:39:01:56:df:3f:60:6f:3e:a3:0d:3f:20:
                    35:92:81:35:57:6d:d2:06:78:fa:59:c9:97:4d:f2:
                    5c:0f:79:8b:1d:cd:29:42:56:05:49:2e:21:00:f7:
                    4d:00:5b:d2:df:d2:fb:05:0d:c5:1d:37:88:14:f3:
                    2e:05:9e:aa:70:4e:9e:b9:51:b5:7f:88:34:60:c8:
                    07:11:82:e6:1b:3d:ee:dc:e8:46:08:eb:ea:17:45:
                    03:27:15:f3:65:a0:a3:c8:68:f9:a8:bf:8e:8e:1a:
                    99:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:25:5A:27:68:43:8A:E3:29:3B:2D:A3:36:FC:E5:27:45:93:5D:DA
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:84:4a:55:53:d5:7a:c1:fa:28:a2:7e:45:ab:79:e3:37:48:
         cb:25:73:36:4d:a7:53:2e:f6:52:3c:7c:4e:db:7b:f1:89:da:
         91:f8:1a:a2:52:0e:3c:bf:20:a6:88:7b:47:db:a9:dc:79:f6:
         d2:33:f8:e5:c5:ec:ea:76:62:a2:70:31:57:07:74:2c:b8:b7:
         6b:3c:3d:5b:7e:f1:0e:a4:42:84:fb:10:f8:be:cc:4d:04:7a:
         e0:41:fd:dd:b1:0f:e5:c2:78:54:4a:ef:43:cd:f2:d7:ae:34:
         5c:70:bc:ff:7d:08:c1:8a:7c:51:f3:52:6f:85:7b:4e:bc:96:
         23:51:d9:72:e1:77:98:c6:03:24:a7:76:4a:63:a0:2e:75:d4:
         f7:41:ca:60:ee:62:6c:1f:41:be:86:f7:04:5d:6b:66:ba:b8:
         29:44:c8:45:66:ff:16:65:90:bd:8c:fa:57:37:e9:d4:d3:87:
         e0:2c:86:6e:bb:cb:fe:b4:38:fb:d8:6d:34:82:3e:0a:10:3d:
         c2:70:08:fb:68:4e:44:be:e0:3e:bd:3c:9e:47:c2:88:4e:1b:
         7d:44:f0:41:9c:90:37:93:91:9b:7e:69:79:31:eb:35:67:78:
         42:2d:57:a9:56:4b:d4:d4:82:88:a2:7a:11:90:6f:83:36:e1:
         ee:96:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:24:10 2025 by rpki-client