Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32342e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e32342e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          H2sEQVfKQ65EpuYRnlFRAoM1Sy5uskMk/vHtweASugU=
Subject key identifier:   FB:28:D3:9F:C2:04:40:B3:91:F0:21:87:68:A4:D6:DC:82:71:43:A2
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       4E06B8E0BAEE0239ABCC12A85D6FEFB79660E226
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32342e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:27 +0000
ROA not before:           Wed 02 Jul 2025 12:01:27 +0000
ROA not after:            Wed 01 Jul 2026 12:06:27 +0000
asID:                     53225
IP address blocks:        177.137.24.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:06:b8:e0:ba:ee:02:39:ab:cc:12:a8:5d:6f:ef:b7:96:60:e2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:27 2025 GMT
            Not After : Jul  1 12:06:27 2026 GMT
        Subject: CN=FB28D39FC20440B391F0218768A4D6DC827143A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:1a:1e:e7:d8:32:5c:57:68:e0:d9:ba:fd:
                    4f:d3:76:6d:57:43:66:08:d4:bc:34:8d:11:40:cf:
                    70:ff:a2:27:06:1c:5e:bf:aa:ac:eb:0b:16:f5:6b:
                    1c:44:3d:cb:3b:ab:89:97:fe:7b:4f:0f:66:68:a7:
                    1d:72:32:08:88:9a:32:e8:7d:da:ab:7c:a4:6a:34:
                    03:ad:6d:08:47:96:7b:07:62:4a:b7:0c:39:60:0f:
                    56:bc:d4:72:11:80:c1:18:4a:61:99:45:a7:6d:ea:
                    b9:2f:16:56:83:fb:13:72:fe:c7:1a:f1:92:10:ee:
                    a0:b0:64:88:33:f1:29:c6:ae:ea:38:a0:f9:f0:48:
                    38:26:04:80:ae:2d:c1:03:89:e9:19:b0:64:d3:c9:
                    aa:f3:94:7d:27:81:00:a2:e4:8c:e2:1a:46:92:09:
                    03:f8:1d:11:86:4a:3a:23:97:38:a0:18:3a:d1:fe:
                    05:ba:f6:6b:f2:bf:a3:1f:07:b3:b8:ab:6f:12:2c:
                    24:e8:dc:42:fa:82:02:35:3d:af:30:e7:02:08:df:
                    35:f0:41:63:bd:e1:ae:32:3c:1e:c6:9b:a7:e9:8f:
                    1f:55:0d:42:44:58:0c:4d:cb:79:d8:a7:d6:62:5c:
                    d6:82:12:44:51:8b:15:7b:56:db:d4:29:d8:f2:fc:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:28:D3:9F:C2:04:40:B3:91:F0:21:87:68:A4:D6:DC:82:71:43:A2
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32342e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:0d:dc:85:70:54:98:f5:8c:59:8f:f7:43:d6:27:d4:0d:e3:
         0d:82:06:ad:64:b7:70:0f:53:d0:a0:86:26:55:af:b7:c7:88:
         0f:75:a9:5e:eb:8f:04:bf:b5:13:91:5b:ff:31:f4:79:cd:14:
         73:f6:2d:a3:d4:59:f7:28:41:5e:58:da:7c:90:fe:b4:fa:fe:
         6a:24:07:89:1a:69:67:ff:8c:6d:47:ee:8a:43:84:22:38:b7:
         dd:af:00:6a:df:3d:8b:47:7e:1e:0b:69:2c:4b:58:5e:a0:71:
         85:84:21:8f:41:b8:87:db:b9:94:33:7f:57:7e:4c:a0:45:d9:
         6b:22:f3:55:ba:cd:7c:7c:f1:65:80:c4:17:e1:a4:b7:a0:5f:
         9d:01:94:d0:dc:f1:89:92:72:5d:98:af:52:b8:5c:9f:95:3d:
         19:a0:70:56:3f:7d:08:fe:c9:56:18:94:a2:8d:a3:7b:45:4e:
         d1:0e:ba:8d:61:6d:c3:19:6c:08:c1:ca:0c:4c:d5:d0:51:ca:
         f4:86:69:14:b9:cd:66:5c:c3:7f:3b:1d:a1:f5:9a:42:38:b5:
         45:24:9a:11:b8:96:1b:3c:90:40:98:17:3d:cd:40:3c:f6:79:
         b1:ea:2b:47:37:bc:b0:14:1c:2f:d4:d3:df:3c:f5:a8:08:77:
         35:19:c7:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTga44LruAjmrzBKoXW/vt5Zg4iYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBQ0RBREU0Q0U2Q0EyMUEwQ0RCOTg3NTBGMzVENjBG
QUREOTg5QjAeFw0yNTA3MDIxMjAxMjdaFw0yNjA3MDExMjA2MjdaMDMxMTAvBgNV
BAMTKEZCMjhEMzlGQzIwNDQwQjM5MUYwMjE4NzY4QTRENkRDODI3MTQzQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtBoe59gyXFdo4Nm6/U/Tdm1X
Q2YI1Lw0jRFAz3D/oicGHF6/qqzrCxb1axxEPcs7q4mX/ntPD2Zopx1yMgiImjLo
fdqrfKRqNAOtbQhHlnsHYkq3DDlgD1a81HIRgMEYSmGZRadt6rkvFlaD+xNy/sca
8ZIQ7qCwZIgz8SnGruo4oPnwSDgmBICuLcEDiekZsGTTyarzlH0ngQCi5IziGkaS
CQP4HRGGSjojlzigGDrR/gW69mvyv6MfB7O4q28SLCTo3EL6ggI1Pa8w5wII3zXw
QWO94a4yPB7Gm6fpjx9VDUJEWAxNy3nYp9ZiXNaCEkRRixV7VtvUKdjy/MBFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+yjTn8IEQLOR8CGHaKTW3IJxQ6IwHwYDVR0j
BBgwFoAUQ6za3kzmyiGgzbmHUPNdYPrdmJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNmb2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZT
UFEvMi80M0FDREFERTRDRTZDQTIxQTBDREI5ODc1MEYzNUQ2MEZBREQ5ODlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQUNEQURFNENFNkNBMjFB
MENEQjk4NzUwRjM1RDYwRkFERDk4OUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTZm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzIv
MzEzNzM3MmUzMTMzMzcyZTMyMzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMz
MzIzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsYkYMA0GCSqGSIb3DQEBCwUAA4IBAQCtDdyFcFSY
9YxZj/dD1ifUDeMNggatZLdwD1PQoIYmVa+3x4gPdale648Ev7UTkVv/MfR5zRRz
9i2j1Fn3KEFeWNp8kP60+v5qJAeJGmln/4xtR+6KQ4QiOLfdrwBq3z2LR34eC2ks
S1heoHGFhCGPQbiH27mUM39XfkygRdlrIvNVus18fPFlgMQX4aS3oF+dAZTQ3PGJ
knJdmK9SuFyflT0ZoHBWP30I/slWGJSijaN7RU7RDrqNYW3DGWwIwcoMTNXQUcr0
hmkUuc1mXMN/Ox2h9ZpCOLVFJJoRuJYbPJBAmBc9zUA89nmx6itHN7ywFBwv1NPf
PPWoCHc1GceS
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:14:51 2025 by rpki-client