Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32312d3231203d3e203532353735.roa
File:                     3137372e38362e3138342e302f32312d3231203d3e203532353735.roa (raw, json)
Hash identifier:          GADz+hXvnGFNuNEJrbwQZVE9um22ZssLKriJQLO4Pa4=
Subject key identifier:   25:F7:0F:6C:2A:2F:0B:0A:86:78:DF:69:16:7B:F4:1B:BE:F8:2F:13
Certificate issuer:       /CN=6AB7559FF84C93160F8F166DADB53FA2CEDEB22D
Certificate serial:       52C192531E0749288555ECA51C7DF78CB73974DD
Authority key identifier: 6A:B7:55:9F:F8:4C:93:16:0F:8F:16:6D:AD:B5:3F:A2:CE:DE:B2:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AB7559FF84C93160F8F166DADB53FA2CEDEB22D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32312d3231203d3e203532353735.roa
Signing time:             Thu 26 Jun 2025 14:33:53 +0000
ROA not before:           Thu 26 Jun 2025 14:28:53 +0000
ROA not after:            Thu 25 Jun 2026 14:33:53 +0000
asID:                     52575
IP address blocks:        177.86.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/6AB7559FF84C93160F8F166DADB53FA2CEDEB22D.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/6AB7559FF84C93160F8F166DADB53FA2CEDEB22D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AB7559FF84C93160F8F166DADB53FA2CEDEB22D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 08:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c1:92:53:1e:07:49:28:85:55:ec:a5:1c:7d:f7:8c:b7:39:74:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AB7559FF84C93160F8F166DADB53FA2CEDEB22D
        Validity
            Not Before: Jun 26 14:28:53 2025 GMT
            Not After : Jun 25 14:33:53 2026 GMT
        Subject: CN=25F70F6C2A2F0B0A8678DF69167BF41BBEF82F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:2a:be:14:cb:b2:9a:4a:1c:a4:44:df:62:
                    27:b5:28:e4:cf:a0:1d:f4:19:bb:05:90:d5:08:70:
                    e5:12:83:e7:89:ce:1c:0a:ba:a4:9f:7c:33:e6:e2:
                    5d:3a:61:1c:d1:a8:29:4d:d0:be:44:33:92:b9:fa:
                    3a:6f:11:fc:ae:d7:66:c2:1d:11:18:03:1a:53:79:
                    5a:3d:e3:c4:a6:f7:42:d8:0c:d6:00:30:62:4f:78:
                    b8:f9:68:57:e7:59:ac:5b:59:53:80:50:d8:17:a2:
                    14:f7:0b:e1:6a:cc:72:aa:21:98:5f:6f:8b:70:0f:
                    b4:78:ec:88:f6:67:89:e6:69:27:7a:7f:02:5a:46:
                    b1:88:15:ab:89:3f:f2:43:bd:59:6a:62:03:05:03:
                    f9:9d:45:d0:30:8a:e4:30:89:1b:f8:9d:d8:65:a5:
                    a9:4f:48:06:8d:5e:25:e1:85:2d:d3:55:2e:96:f3:
                    c9:4d:b7:ef:8c:27:0d:70:c4:ce:27:4d:f8:a4:b3:
                    47:20:dc:72:ed:09:ca:7b:5f:95:62:38:9b:cd:db:
                    a9:60:60:9f:89:5a:d0:e2:de:79:4b:93:bc:64:83:
                    b2:81:f3:2e:c6:07:15:b4:56:cc:3f:2d:67:56:2d:
                    4d:3d:28:d7:1b:37:cc:4e:b1:d7:83:8b:3f:fe:9c:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F7:0F:6C:2A:2F:0B:0A:86:78:DF:69:16:7B:F4:1B:BE:F8:2F:13
            X509v3 Authority Key Identifier:
                keyid:6A:B7:55:9F:F8:4C:93:16:0F:8F:16:6D:AD:B5:3F:A2:CE:DE:B2:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/6AB7559FF84C93160F8F166DADB53FA2CEDEB22D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AB7559FF84C93160F8F166DADB53FA2CEDEB22D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138342e302f32312d3231203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:f1:19:d1:d9:85:5d:9e:58:72:aa:e8:6b:b6:32:35:f7:0f:
         ad:8c:7e:37:c3:87:06:bd:10:3b:7e:aa:98:0e:33:3d:88:27:
         cf:42:1d:03:0f:2e:d0:ae:0d:dd:a5:87:20:59:31:bc:bc:a2:
         b3:70:17:53:7c:42:3c:dd:ed:a5:b7:a1:c5:8e:89:72:95:64:
         ad:19:e4:79:5f:2e:5c:c6:35:25:40:f4:6b:e4:fa:32:d2:1f:
         50:ee:76:47:c9:1a:e6:9e:9b:f4:c1:58:ce:b7:78:b7:d3:99:
         f8:2e:13:61:ec:b2:ff:83:c6:01:3f:74:38:50:74:03:e0:94:
         ff:54:82:48:9b:de:f8:3f:53:22:1b:2c:8d:8e:df:ac:62:e3:
         8a:4e:f7:ea:35:93:0f:d0:25:8c:85:63:37:dd:b2:6b:ec:18:
         77:a5:69:63:5c:f0:a9:69:47:79:af:eb:2b:ef:a9:aa:d8:c1:
         60:1a:ca:1a:98:87:94:28:2e:5c:18:96:66:8a:af:40:9d:64:
         65:76:d4:be:12:d9:b2:78:79:ca:02:af:aa:8d:10:58:69:18:
         83:be:0a:e6:70:e5:aa:64:bc:a8:a5:71:6c:4b:b9:37:a2:ea:
         5c:da:bd:62:c5:a5:71:77:c7:f9:e1:e9:53:43:9a:49:29:d7:
         c5:8b:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:51:11 2025 by rpki-client