Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32332e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e32332e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          VB85Hjt0hx67awVd+IJl91l6UpqxRqA97ifaR+LWM6w=
Subject key identifier:   BB:46:81:D2:D3:2A:0D:A1:9C:45:6D:5E:94:10:19:05:1E:3D:79:B7
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       7D6D62BEE8D2F4BBC743AC1B7377B94D83FE8DEE
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32332e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 07 May 2025 18:43:54 +0000
ROA not before:           Wed 07 May 2025 18:38:54 +0000
ROA not after:            Wed 06 May 2026 18:43:54 +0000
asID:                     53225
IP address blocks:        177.137.23.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6d:62:be:e8:d2:f4:bb:c7:43:ac:1b:73:77:b9:4d:83:fe:8d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  7 18:38:54 2025 GMT
            Not After : May  6 18:43:54 2026 GMT
        Subject: CN=BB4681D2D32A0DA19C456D5E941019051E3D79B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:92:cb:df:cd:e4:c3:5c:53:0e:de:0d:0c:
                    19:6b:af:6a:20:0b:e8:59:39:73:4c:e6:b4:6a:55:
                    24:81:cf:82:0c:31:91:ca:bd:9b:79:98:88:20:44:
                    c9:5f:8a:d7:2f:20:2e:0c:58:6b:cd:40:07:ef:ea:
                    9c:6e:90:c1:10:ca:0b:29:ca:8c:93:82:22:ee:80:
                    94:f9:bb:2a:e1:66:64:3f:ef:af:de:05:9d:be:c0:
                    4f:42:b1:ce:ed:4b:6b:4f:1f:e9:d7:e6:78:ea:f0:
                    92:33:05:1d:2f:f3:2d:ec:fe:8c:4e:bf:47:15:8b:
                    0c:9a:e9:80:fe:a9:7c:ac:7c:0b:be:3c:69:1d:0f:
                    2e:d0:1a:23:bb:87:54:86:d5:73:8a:2e:d7:f6:96:
                    3c:03:8a:50:26:53:d6:c8:34:1e:04:e8:7e:74:c3:
                    9b:06:87:54:4e:5d:fe:81:c3:a8:e0:f5:13:af:01:
                    97:56:63:75:91:d4:c5:93:eb:30:6e:e3:49:89:f0:
                    1b:24:16:34:22:48:2a:64:8a:e8:2e:97:f3:9e:7e:
                    8b:f5:bf:64:f3:8a:6c:88:02:26:43:fd:f8:e4:d5:
                    4a:ca:14:ce:f5:12:8f:6b:02:4c:12:7e:3b:fd:6e:
                    dc:6d:48:f8:8b:29:7f:09:2f:10:11:5e:08:98:40:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:46:81:D2:D3:2A:0D:A1:9C:45:6D:5E:94:10:19:05:1E:3D:79:B7
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32332e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:52:e2:bc:83:d0:c7:76:81:3d:1d:b8:0c:0c:9e:57:82:f5:
         55:1f:93:76:b4:2f:3e:7e:62:66:4f:f1:7d:8f:54:44:1b:26:
         d1:03:df:f8:d4:a3:fa:32:55:13:c4:7c:f3:bc:12:b1:8a:15:
         a1:ca:26:e2:12:19:2f:84:44:79:c5:16:fe:8e:79:89:62:16:
         a5:f5:ee:2b:80:c3:df:ec:1e:21:f2:b3:0e:c5:c0:92:b8:b9:
         47:53:84:99:b3:05:4f:c9:44:64:12:58:76:c9:a5:f6:85:b4:
         a6:37:0e:48:3f:60:e8:5d:0b:c2:e2:34:00:9a:47:2d:8a:7b:
         50:25:62:6c:89:1d:ff:a4:f2:c1:fa:da:fb:e4:3d:0a:96:76:
         1f:b1:c7:1d:d5:04:b0:84:55:81:cf:29:17:5b:7f:7d:04:ed:
         b4:fb:b1:89:c1:49:11:d8:35:06:fd:24:b6:74:47:b1:3e:7e:
         06:62:dc:b5:8e:cc:9e:43:3f:18:0d:cc:5a:76:13:17:26:00:
         68:f8:60:90:55:37:32:83:86:4e:6f:d4:14:67:59:76:c5:11:
         f1:e5:64:40:b0:43:4c:9a:00:0f:b1:9a:c2:12:05:9b:89:cf:
         5f:27:7f:bc:3f:fb:47:b1:47:c6:66:4e:a3:65:68:d0:b8:35:
         9c:bd:5f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:04:50 2025 by rpki-client