Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32322e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e32322e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          Mm5uTaeF0IT3kup+ce41CTu6h8Tv0dEizM8AvLQvN7w=
Subject key identifier:   C9:0C:DE:9C:10:F0:9A:E8:B3:0C:B6:8D:02:56:10:38:0B:49:8F:CB
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       66E3C37AD0D215751591FCA97B8985DF7EC8047A
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32322e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:22 +0000
ROA not before:           Wed 02 Jul 2025 12:01:22 +0000
ROA not after:            Wed 01 Jul 2026 12:06:22 +0000
asID:                     53225
IP address blocks:        177.137.22.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e3:c3:7a:d0:d2:15:75:15:91:fc:a9:7b:89:85:df:7e:c8:04:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:22 2025 GMT
            Not After : Jul  1 12:06:22 2026 GMT
        Subject: CN=C90CDE9C10F09AE8B30CB68D025610380B498FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:0c:6b:24:c2:4d:31:1a:bf:16:25:c8:41:
                    ed:09:09:4b:89:69:41:a0:08:42:b9:93:62:4c:8e:
                    95:1a:36:b2:4f:af:68:a6:89:0e:70:a1:0b:4c:04:
                    13:38:90:35:f6:d0:e2:c2:3b:75:c9:51:ea:21:6d:
                    86:33:f4:15:d8:59:64:32:64:4a:91:91:6c:d5:d5:
                    00:ad:3b:cd:b2:22:29:ad:21:ff:c0:0c:1f:7d:28:
                    fd:ff:7c:9c:1f:db:ea:a0:04:a9:dc:5f:a7:d2:87:
                    8b:f6:65:6b:b2:31:21:2c:da:2b:f4:38:b1:20:5c:
                    05:cf:3d:2e:7e:f0:af:c2:7c:d0:5b:f3:f6:18:38:
                    52:c4:59:97:63:2c:7a:df:6e:d1:18:3e:58:8c:4f:
                    64:8b:ee:a7:e1:b6:d3:9e:7c:d3:db:c2:6f:2a:3a:
                    eb:d4:ba:f4:4d:74:27:de:30:06:84:91:54:48:4a:
                    15:33:81:1f:53:f6:ce:16:b0:09:12:6a:9d:a1:a8:
                    f8:eb:ea:cc:68:13:ad:3e:79:6b:78:6c:08:58:30:
                    63:64:89:8c:ba:98:85:77:33:e6:6c:fb:f4:94:f3:
                    a6:58:01:ac:a3:83:54:03:ab:11:b2:53:3f:09:60:
                    7f:4e:ca:f4:ff:0a:67:d3:92:2d:64:1e:c9:c8:d9:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:DE:9C:10:F0:9A:E8:B3:0C:B6:8D:02:56:10:38:0B:49:8F:CB
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32322e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:b2:9b:6a:90:52:30:aa:ca:65:d2:b1:df:b1:ca:71:99:5c:
         ea:25:c9:1e:8f:d6:43:3a:69:61:e4:20:59:00:52:2b:2a:36:
         3c:e7:5a:a9:4d:99:0c:3e:fc:ed:ef:a5:99:b1:e3:d3:96:7d:
         e6:cb:c4:e4:8a:9d:e6:7e:61:3f:44:79:03:88:65:7d:8a:b7:
         a9:e3:18:1e:43:f1:85:a6:54:16:b5:c4:51:e3:97:94:8c:19:
         94:5d:22:1d:5b:3c:18:0b:ec:aa:0b:ef:91:b4:e8:95:d9:8f:
         fe:de:9b:e2:bf:dd:7b:c3:d4:45:c9:65:65:29:e2:a4:e8:41:
         10:1f:99:f4:ca:d7:b3:0d:61:a3:97:0f:b6:ba:d4:42:92:dc:
         32:03:6f:7a:5a:ae:0c:b6:64:00:74:3b:ad:af:c5:8e:cb:15:
         98:c5:39:45:6b:95:70:91:14:aa:5e:f7:7d:89:34:c3:1c:1a:
         9b:05:f5:bc:80:a5:de:71:50:9b:10:2c:67:c7:23:f1:38:73:
         9e:b1:96:ee:79:06:52:fe:27:1f:d4:03:89:3e:53:d1:12:7a:
         5b:5b:69:89:3f:bc:d0:80:8d:8f:17:73:0f:47:d1:5b:cf:d3:
         93:25:bb:64:56:e0:63:11:62:29:24:e5:f6:98:11:3a:c5:d0:
         0b:ca:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:11:55 2025 by rpki-client