Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32352e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e32352e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          T8/WayPLE5pURp38TkcpqWSjDb83GMLGC7qkmatX8cU=
Subject key identifier:   6C:F2:0E:5B:7D:80:F4:D7:77:03:57:25:B0:F5:D1:83:B1:E2:CD:1D
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       19F96A3C1966A445518F9E490D60C2DF7F9E10A3
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32352e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:21 +0000
ROA not before:           Wed 02 Jul 2025 12:01:21 +0000
ROA not after:            Wed 01 Jul 2026 12:06:21 +0000
asID:                     53225
IP address blocks:        177.137.25.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f9:6a:3c:19:66:a4:45:51:8f:9e:49:0d:60:c2:df:7f:9e:10:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:21 2025 GMT
            Not After : Jul  1 12:06:21 2026 GMT
        Subject: CN=6CF20E5B7D80F4D777035725B0F5D183B1E2CD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:e5:33:b2:93:e7:0b:6a:f3:08:3b:3f:4f:
                    af:99:df:1b:cd:16:98:43:58:84:ce:f1:ab:01:51:
                    77:05:fc:2e:5b:f6:0d:d7:1a:76:16:88:4c:a5:64:
                    d3:31:f8:3e:a4:53:7f:db:3f:96:56:a6:d3:ab:f3:
                    ed:05:63:d7:5a:a8:94:a2:59:55:9b:58:1b:0e:0a:
                    b3:77:22:f2:d0:93:bd:c8:d0:0a:5a:4b:0f:bb:42:
                    7c:34:2e:ce:06:73:ad:09:a1:b3:83:74:25:a0:61:
                    c4:ae:f2:1a:c9:95:c6:a8:7c:d5:e8:6e:bb:ea:4b:
                    d6:df:81:6a:a3:e9:36:eb:7e:99:ea:79:57:0c:19:
                    2e:86:e8:3d:8e:0e:ba:66:67:0e:57:8a:05:d3:30:
                    bb:36:a3:10:29:54:f9:66:84:6e:12:b1:49:41:2b:
                    e5:76:c2:ad:6b:40:dd:c3:5b:fb:dd:f5:15:a3:56:
                    b4:05:b5:2f:27:11:21:0d:eb:44:f6:6a:fd:e6:a4:
                    fa:4b:b8:96:2a:68:81:a5:b7:80:01:42:1d:6b:b5:
                    26:52:af:d3:0a:e0:18:d4:8f:ce:a3:71:b0:a1:32:
                    b2:39:67:42:60:9e:bf:3e:d6:71:b9:a9:25:a4:81:
                    26:6c:db:f3:a0:9c:71:e7:89:c8:e9:2e:8b:64:c1:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:0E:5B:7D:80:F4:D7:77:03:57:25:B0:F5:D1:83:B1:E2:CD:1D
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32352e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:ec:03:3d:48:7d:5a:34:e2:ca:57:b5:7f:f4:1f:b2:49:
         6a:51:7f:4c:70:b8:ce:eb:e5:07:b2:41:16:f3:b1:67:eb:69:
         9d:35:1b:b3:ad:d2:f7:31:e1:28:88:d7:69:79:4f:04:c6:8c:
         94:08:31:21:59:10:fb:1b:91:c3:86:84:9a:f5:90:18:fa:8a:
         09:bc:6a:0b:48:6c:f5:7a:30:3e:59:67:6e:ca:12:77:45:90:
         90:c8:04:f0:35:e7:ac:b1:7b:b2:ae:cb:03:3c:be:97:f5:20:
         1a:cf:51:2d:6c:92:c2:b7:d4:b1:9c:53:ce:81:db:9e:09:6b:
         22:70:f9:7e:f5:03:e2:0c:ca:8d:ef:71:d3:7a:07:aa:65:48:
         df:86:ed:ec:2e:df:ac:c1:d1:c9:e5:58:10:de:d5:5a:54:44:
         bd:35:2f:51:52:bd:ae:13:77:46:6e:4a:06:64:85:27:54:23:
         1f:e7:95:3d:c5:09:c2:70:3f:5a:93:a5:c1:a6:01:36:5c:23:
         47:9b:73:d5:76:83:d5:1a:59:9f:eb:a1:58:ff:0c:eb:01:f1:
         21:30:09:c2:b0:1c:f3:9c:a9:96:5e:59:86:b1:b2:00:fe:8d:
         09:5f:d0:d0:de:52:eb:cd:e2:89:22:30:89:b2:63:82:15:09:
         48:f2:b6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:17:43 2025 by rpki-client