Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32332e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e32332e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          mCh3sinT7S6iq6gpUgW4bBqA0XdROcaRcmuJKKRhUkY=
Subject key identifier:   94:31:25:81:73:6D:CC:12:C5:1F:58:EF:23:9A:E6:BD:EC:46:6A:4E
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       7DB9D6608EA5BB5BDEF377F879DDEBB6854592D9
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32332e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:24 +0000
ROA not before:           Wed 02 Jul 2025 12:01:24 +0000
ROA not after:            Wed 01 Jul 2026 12:06:24 +0000
asID:                     53225
IP address blocks:        177.137.23.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b9:d6:60:8e:a5:bb:5b:de:f3:77:f8:79:dd:eb:b6:85:45:92:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:24 2025 GMT
            Not After : Jul  1 12:06:24 2026 GMT
        Subject: CN=94312581736DCC12C51F58EF239AE6BDEC466A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:6e:b0:18:a1:ab:29:f5:be:6b:8c:f9:e6:
                    f9:d1:5f:64:39:66:77:f1:12:30:07:0b:60:b7:c0:
                    c0:94:82:f4:64:84:09:45:9c:20:1f:cd:19:de:10:
                    18:91:ba:f5:99:a7:a2:3f:3e:39:57:2b:d4:39:9e:
                    44:86:9e:82:50:3c:31:23:5b:ff:d6:99:c0:e9:ab:
                    49:09:df:8f:4d:02:fc:c0:6f:bc:f2:a5:2a:4f:1f:
                    34:b2:c5:87:1c:fb:ef:04:29:fc:dc:06:95:cc:24:
                    65:24:e3:52:eb:87:b9:70:2f:1b:de:98:a2:da:99:
                    bb:fc:c3:60:e4:a3:b6:f8:e9:fc:48:fb:8a:d1:ac:
                    8b:85:a5:a4:cb:b4:ed:2e:8c:85:60:a4:60:38:1e:
                    a6:f4:01:d0:7f:a9:0b:11:17:52:70:39:6d:7f:b1:
                    12:86:41:66:74:cb:ff:f9:e0:46:2b:a3:32:d2:c9:
                    02:0e:42:66:d4:a4:f1:4d:51:af:8d:8c:07:c4:2a:
                    bd:0b:0b:39:12:da:9f:c5:4c:5c:27:2b:b1:31:7b:
                    f0:fc:15:8e:e7:a1:cf:51:4e:4a:f6:ef:60:c5:8e:
                    87:2b:7e:b8:12:3d:63:97:09:2a:3d:2b:d7:b8:16:
                    55:1d:13:7f:72:e6:1a:fd:06:3b:74:3b:f5:07:1c:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:31:25:81:73:6D:CC:12:C5:1F:58:EF:23:9A:E6:BD:EC:46:6A:4E
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32332e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:5d:c9:a1:cc:28:ef:2b:1f:d2:22:e9:67:b4:75:f0:6b:1c:
         11:4c:03:53:7c:35:b6:62:19:0c:44:d4:31:05:99:2b:0e:24:
         38:86:5b:2e:a4:a8:e3:ed:4d:26:a6:8a:17:ae:b5:58:6b:e5:
         15:4a:53:8b:43:1d:85:cf:1b:65:1b:56:ad:4f:85:45:9d:7a:
         38:78:fd:dd:57:53:88:18:02:17:92:d4:4b:77:85:42:1c:84:
         85:eb:2b:b6:8c:0e:0f:00:25:ea:53:e5:8d:23:23:0e:d9:a7:
         a8:4d:61:fd:80:f7:7c:66:ed:ac:0d:5a:ee:11:65:d9:82:25:
         2e:d0:b8:85:37:37:5c:25:bf:e2:16:61:59:b6:19:40:46:e7:
         f0:af:ca:77:f6:b1:e7:22:7a:fd:04:e0:16:f6:01:1a:17:ca:
         bc:86:55:b3:57:1a:6c:2d:39:7d:ad:5a:f0:05:5b:1c:79:65:
         6c:9f:65:b5:97:b1:d7:85:a7:db:2f:b6:a8:b5:2f:f7:34:bb:
         46:5e:3b:f8:4d:fa:03:f0:ea:6c:a2:c6:06:85:74:65:db:7e:
         33:28:c8:9e:ce:45:11:d9:e6:34:86:cc:fe:ea:33:18:df:b9:
         a8:c7:de:ba:e7:14:cd:4c:53:6d:b6:a4:2f:83:f9:38:d1:f7:
         4a:0b:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:08:01 2025 by rpki-client