Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3332203d3e20313938393439.roa
File:                     3137372e35352e33322e302f32302d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          3HkYwpUrPJpQtN+iyG1KyjGtM9XzFVRsB/0MWnH7YWY=
Subject key identifier:   5C:66:3D:30:2D:9B:B5:59:A5:BE:6D:27:45:C7:24:BD:A9:26:93:0C
Certificate issuer:       /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
Certificate serial:       3EC6430338E45DF0539761E0631D0FA89F597169
Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3332203d3e20313938393439.roa
Signing time:             Mon 05 May 2025 19:16:44 +0000
ROA not before:           Mon 05 May 2025 19:11:44 +0000
ROA not after:            Mon 04 May 2026 19:16:44 +0000
asID:                     198949
IP address blocks:        177.55.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl
                          rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:43:03:38:e4:5d:f0:53:97:61:e0:63:1d:0f:a8:9f:59:71:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
        Validity
            Not Before: May  5 19:11:44 2025 GMT
            Not After : May  4 19:16:44 2026 GMT
        Subject: CN=5C663D302D9BB559A5BE6D2745C724BDA926930C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:a2:c5:7a:9c:a8:f8:8d:da:4c:4d:12:f9:
                    99:6c:95:bc:aa:41:e2:aa:4e:b6:f9:8a:79:1e:dc:
                    20:cf:19:f3:0d:ba:18:c7:12:22:04:d4:ea:3b:5b:
                    75:88:ae:6a:9e:52:70:e7:24:c9:c8:ab:78:3f:b6:
                    8d:d6:e4:14:74:48:a9:46:65:b2:d7:77:be:8d:e2:
                    9e:58:ea:e3:7f:95:0b:f1:31:de:96:b0:a5:c9:16:
                    94:ca:3b:42:ee:9f:51:b6:6d:3a:54:56:16:d5:ce:
                    b4:85:31:8e:38:6a:ca:f0:6a:bd:33:c3:64:9b:de:
                    6e:d5:30:2e:29:20:08:11:f6:73:5d:d8:ef:7a:e5:
                    50:70:b3:71:59:5d:dd:18:7a:37:45:bd:9a:32:96:
                    a7:84:34:40:9b:a7:39:88:83:d3:2f:d4:cd:7c:f3:
                    1c:28:02:1c:e4:44:57:cd:fb:9e:77:ef:b3:96:46:
                    82:6e:35:e9:22:eb:c3:28:57:7b:7c:af:16:f9:3e:
                    6f:ae:ad:f3:ea:7c:7d:70:2e:38:b7:27:6a:c4:1c:
                    31:c1:2b:5f:27:8e:84:8d:8a:ab:d9:e5:6c:41:f4:
                    d8:d2:cd:c7:0e:3c:a7:ce:90:8f:00:91:a8:4f:b1:
                    0a:0f:eb:ff:2e:2a:8b:98:10:e5:23:ca:85:3d:0a:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:66:3D:30:2D:9B:B5:59:A5:BE:6D:27:45:C7:24:BD:A9:26:93:0C
            X509v3 Authority Key Identifier:
                keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:fa:94:1f:22:0a:5e:05:f6:e1:9a:20:a3:78:09:b0:37:87:
         5e:a8:d9:c2:70:41:1f:ee:de:a9:a5:ec:70:b2:70:a6:a4:1d:
         6e:3e:3d:92:cd:98:ba:a1:99:7a:29:05:ff:27:f1:1e:f1:a0:
         f6:2c:30:71:a7:7b:d5:1b:50:07:1e:26:fd:c5:ea:32:ec:6e:
         e8:39:f3:c5:b2:ca:08:ca:41:bc:99:9b:c9:49:03:41:36:03:
         d4:31:50:8a:de:b9:1f:43:fc:d6:19:0a:fb:29:7e:07:60:88:
         ca:4b:88:cb:59:5e:cc:ba:8b:0c:73:16:35:33:f6:b4:ae:41:
         5e:3f:cf:af:66:af:a6:78:b3:26:14:16:5b:07:e2:df:f2:44:
         f0:ff:18:38:d7:aa:ff:f2:86:27:66:66:b3:96:d3:82:83:66:
         a1:18:12:ab:79:40:44:44:94:7f:2b:24:22:3f:c4:d0:d9:a7:
         85:f0:25:7e:39:e1:d6:fe:02:cc:18:6d:a4:15:62:b2:0e:18:
         e6:2a:63:d1:54:d1:4a:49:1a:c0:d5:80:c3:b4:87:c1:cb:22:
         0e:7e:22:3e:1a:65:97:a3:0e:55:ca:52:8f:54:e5:12:8f:73:
         63:1c:69:9c:cb:33:00:cc:6b:4f:63:73:73:25:78:54:c9:e9:
         f8:32:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:04:46 2025 by rpki-client