Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32312d3234203d3e20323733333039.roa
File:                     3137372e3135322e3131322e302f32312d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          XogUXVyRxBy6T9J1F1tZ1eepY19IWtkKGgPUm3K5g8M=
Subject key identifier:   56:B3:F5:08:46:EE:74:32:4E:05:A6:95:35:6F:73:D3:E9:78:AF:AC
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       1D3129C535BD3C876BEEC39CD70D35A4AC063485
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32312d3234203d3e20323733333039.roa
Signing time:             Mon 16 Jun 2025 22:44:10 +0000
ROA not before:           Mon 16 Jun 2025 22:39:10 +0000
ROA not after:            Mon 15 Jun 2026 22:44:10 +0000
asID:                     273309
IP address blocks:        177.152.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:31:29:c5:35:bd:3c:87:6b:ee:c3:9c:d7:0d:35:a4:ac:06:34:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Jun 16 22:39:10 2025 GMT
            Not After : Jun 15 22:44:10 2026 GMT
        Subject: CN=56B3F50846EE74324E05A695356F73D3E978AFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:b3:ae:de:8f:26:37:3d:c3:b8:8a:d9:c3:
                    80:a0:ca:4f:24:f3:03:dc:de:dd:e4:7d:5b:a6:25:
                    3c:8e:34:30:45:35:e0:9f:40:79:c2:ef:b7:5a:58:
                    e3:65:67:28:d5:69:c1:13:17:70:39:b6:ce:bc:7f:
                    eb:ae:f1:b7:74:64:f5:3c:7c:96:d0:aa:a7:d6:36:
                    5f:e1:5e:e7:0a:5d:1b:1e:cd:8d:df:9f:8c:3a:a3:
                    4a:44:b9:74:31:06:04:b9:66:2a:bf:dc:86:ec:af:
                    25:76:d3:78:85:f9:17:41:8b:9d:57:f5:6f:fa:d6:
                    e5:c0:94:d6:14:a3:5b:19:cb:1e:99:a3:05:65:75:
                    59:79:e9:53:8e:e9:85:15:ca:20:62:bb:e6:4b:86:
                    68:99:df:10:03:c5:10:38:06:0d:3c:d2:6d:05:96:
                    26:0d:37:fc:b5:4f:94:6a:e6:ab:53:1c:88:6e:b9:
                    00:b3:99:78:25:41:d8:77:84:d9:1d:05:41:56:cd:
                    97:7a:7a:a0:1a:9a:c5:b6:a8:f7:58:54:f9:b9:84:
                    c3:e6:26:1d:35:d8:cd:a9:04:2d:e3:3a:29:bf:e3:
                    8e:38:a7:4a:1e:e4:26:b8:ff:cf:88:83:02:e6:b8:
                    4d:5b:60:0e:68:fa:25:3b:4a:fb:2f:48:3f:5e:31:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B3:F5:08:46:EE:74:32:4E:05:A6:95:35:6F:73:D3:E9:78:AF:AC
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32312d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:6e:66:61:bc:16:e3:83:fe:2b:62:cd:77:ea:8a:56:51:
         b8:2e:56:28:b6:7c:26:04:1b:bb:35:ff:12:cf:73:48:88:18:
         90:98:b1:81:76:44:17:c0:07:0d:bc:bc:f7:76:99:41:88:f2:
         87:bc:b1:48:d2:f0:10:d9:2a:69:2a:70:fc:fe:28:16:d2:e2:
         0f:64:46:62:1b:d5:d9:aa:34:f5:cf:78:ff:55:7c:6d:ad:6e:
         4f:7e:7e:39:27:b3:d1:a7:bd:04:55:15:d7:99:76:e0:be:68:
         76:46:43:56:b8:30:91:e4:d4:9a:16:9e:0d:9e:e7:bc:75:29:
         4a:cf:05:10:e5:d6:b4:c7:84:c4:05:ac:65:21:db:1d:bb:3b:
         c8:bf:08:ad:f8:1a:6f:ab:94:3f:90:ec:17:f0:dd:6c:8a:b3:
         88:81:9e:ee:f8:3c:60:f1:b1:fe:9e:e3:3e:68:d3:5a:04:30:
         ab:74:f8:33:98:9d:a7:1d:e0:92:b8:4d:8d:e3:84:bc:7a:ad:
         3f:d4:db:ff:00:3f:e3:92:59:fc:4b:6a:a2:90:2f:90:fe:c0:
         57:e2:2a:97:a8:88:dc:55:19:e5:4f:52:e6:0f:e8:e6:45:a7:
         45:71:4a:2b:47:2a:cb:4f:33:7a:6b:3e:15:70:a8:3e:cc:55:
         a9:1f:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:39:11 2025 by rpki-client