Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32352e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e32352e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          cx/voLCfPYAoavKU299Y/1k6YbebJKz2Ae+jHSv92jU=
Subject key identifier:   84:DD:2A:BC:54:5D:EE:68:15:1E:08:31:07:2D:EC:9F:83:19:E3:4F
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       6E8C5291FECC963ACA18C31F1E76D19717DB071A
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32352e302f32342d3332203d3e203533323235.roa
Signing time:             Mon 05 May 2025 11:42:18 +0000
ROA not before:           Mon 05 May 2025 11:37:18 +0000
ROA not after:            Mon 04 May 2026 11:42:18 +0000
asID:                     53225
IP address blocks:        177.137.25.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8c:52:91:fe:cc:96:3a:ca:18:c3:1f:1e:76:d1:97:17:db:07:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  5 11:37:18 2025 GMT
            Not After : May  4 11:42:18 2026 GMT
        Subject: CN=84DD2ABC545DEE68151E0831072DEC9F8319E34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:a6:b2:81:8b:26:19:de:ad:d6:d4:4b:1b:
                    02:bc:89:ab:2d:82:34:c5:d9:78:db:b0:c8:85:54:
                    42:31:75:82:e2:6a:c9:7f:8f:49:31:b5:59:a3:bf:
                    88:a6:60:8d:99:5f:7c:c4:63:4a:d5:18:bc:16:2c:
                    53:09:5a:44:b8:bb:77:47:74:2d:b0:04:9f:c9:ca:
                    0f:b3:fd:8f:aa:7c:3f:49:1c:d3:d2:df:ed:fd:ad:
                    56:f1:24:a1:d1:56:36:9c:2d:5e:02:45:ab:ea:8f:
                    e3:39:12:93:29:b6:89:63:24:fe:ad:77:33:e6:bc:
                    da:05:ff:22:1c:93:0d:08:4d:c0:41:b8:15:d3:5f:
                    5d:5d:71:4a:94:d6:ef:b5:ac:67:b4:96:4c:ca:4b:
                    88:99:19:bd:3d:80:0b:b1:27:a9:13:51:2a:9c:36:
                    f5:98:1f:7c:cc:64:d8:ac:3d:90:53:bd:a5:ad:00:
                    12:b9:42:4e:25:fe:cf:ef:be:bc:ec:c2:90:d3:79:
                    24:65:90:2d:ba:09:20:b1:d8:14:31:a9:75:2d:35:
                    22:1c:ee:05:63:3a:66:05:43:ef:86:c6:df:98:5c:
                    67:84:5b:e9:ae:76:b6:8c:69:19:a6:e3:fe:a5:ac:
                    91:b3:fd:95:45:d4:96:d2:ea:b5:50:3a:a2:d4:5e:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DD:2A:BC:54:5D:EE:68:15:1E:08:31:07:2D:EC:9F:83:19:E3:4F
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32352e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f6:50:24:3e:df:37:7c:fb:92:25:75:c9:02:fb:04:93:c8:
         4e:e3:fb:01:2d:37:f5:02:f4:d5:8f:a0:3a:50:05:2a:0e:9c:
         cd:b2:8c:3d:1e:bb:3b:8f:44:d4:63:88:fb:8b:7e:5b:7e:09:
         83:1d:07:3e:71:54:d6:26:bd:2d:df:da:a4:9f:ec:36:96:04:
         98:37:9e:46:da:bb:4f:25:a1:cc:c3:8b:ad:6a:63:cf:77:e0:
         63:87:22:64:92:9c:5e:07:4b:7f:e3:48:f8:86:31:c3:32:c0:
         24:66:04:87:ca:f1:59:f4:7a:e3:cf:dd:00:46:29:9b:1e:5b:
         60:13:58:65:91:a5:8f:ad:ee:89:cf:a8:63:a7:89:be:6a:f6:
         06:e5:2e:e1:31:dd:f5:e4:42:b4:17:9f:60:aa:6f:e1:da:97:
         49:0a:53:86:1c:63:02:77:c7:77:6b:97:26:29:e9:c3:0a:49:
         58:0d:83:db:a7:be:cd:a3:8d:ef:c2:2d:31:a5:fc:f3:26:a7:
         f7:b4:0d:26:46:21:ae:86:16:b2:66:e6:cd:42:b5:98:d2:07:
         6d:95:eb:be:ef:61:db:65:63:04:c0:b7:9c:45:8f:b6:b8:10:
         22:5d:5a:94:58:7e:e1:34:ea:2f:e9:47:35:5d:74:3f:49:9c:
         6d:e5:35:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:03:56 2025 by rpki-client