Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32382e302f32332d3332203d3e203533323235.roa
File:                     3137372e3133372e32382e302f32332d3332203d3e203533323235.roa (raw, json)
Hash identifier:          w8u/PJZvdD8mUWFz3TFjdp6+UXLsOqxHESSRC+kfMCk=
Subject key identifier:   8C:82:B2:B6:9E:3B:37:5E:0C:DE:CD:FB:F0:BD:90:64:D7:83:C9:AB
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       01BE482746409C93F1FD2F38AC6FE92F2163A9F0
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32382e302f32332d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:18 +0000
ROA not before:           Wed 02 Jul 2025 12:01:18 +0000
ROA not after:            Wed 01 Jul 2026 12:06:18 +0000
asID:                     53225
IP address blocks:        177.137.28.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:be:48:27:46:40:9c:93:f1:fd:2f:38:ac:6f:e9:2f:21:63:a9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:18 2025 GMT
            Not After : Jul  1 12:06:18 2026 GMT
        Subject: CN=8C82B2B69E3B375E0CDECDFBF0BD9064D783C9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:76:9e:6b:f1:ab:4f:37:32:34:6a:de:72:
                    03:a8:09:18:35:83:b9:44:7b:cc:7d:6c:ff:d9:57:
                    7f:58:50:1d:b2:2c:fe:91:22:15:cc:b9:46:09:4b:
                    18:e5:3c:83:ba:63:28:21:21:c8:78:ea:75:57:88:
                    09:50:43:06:b8:b5:df:d6:ed:9b:6c:10:fc:08:ed:
                    e0:54:28:1b:7d:93:72:17:74:47:3d:04:fd:47:08:
                    19:79:a6:ef:24:c3:2e:1c:14:bd:3a:64:a9:d0:f4:
                    e7:e1:57:68:75:8e:15:89:eb:30:c2:c2:6e:0a:a7:
                    de:fa:80:b6:67:4c:9c:90:6e:9a:dd:5a:e6:91:21:
                    e1:53:66:86:b2:1f:77:e8:7e:0e:17:b7:0f:1e:db:
                    65:77:43:42:56:11:12:29:b1:e4:56:05:c0:f3:8c:
                    33:89:7a:eb:f9:87:a8:0b:90:3d:30:21:c9:38:12:
                    69:8d:96:65:a8:23:d7:76:50:5c:dd:78:54:87:c0:
                    88:ec:a4:c6:46:28:26:d4:7a:40:0f:bb:ea:8b:07:
                    c9:de:a8:b8:b6:7d:70:de:9d:4e:b5:d6:80:4c:74:
                    8f:da:6a:fc:f9:0c:95:a8:90:91:a0:39:51:07:91:
                    0d:17:31:2a:09:4b:9e:6c:70:c5:ec:c2:86:8a:06:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:82:B2:B6:9E:3B:37:5E:0C:DE:CD:FB:F0:BD:90:64:D7:83:C9:AB
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e32382e302f32332d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:83:85:65:62:94:9d:b5:3d:1b:54:e1:e5:45:1b:d0:4f:e7:
         e3:10:6e:63:c0:65:d1:f5:3e:28:53:5a:c5:31:70:f9:5d:90:
         6d:70:76:07:55:46:ce:e1:51:66:c3:25:ad:60:e2:25:10:e8:
         43:c5:e8:41:71:04:ab:96:20:84:92:db:60:c2:d6:8e:48:a8:
         11:3c:fb:68:0b:97:c7:50:53:29:6f:9e:69:7d:ec:2a:f7:56:
         18:6c:74:b6:61:f2:4a:4e:94:8c:c0:a3:dc:53:5e:9a:84:49:
         21:0e:36:df:7d:0b:33:61:8c:4c:76:16:02:fc:b0:fd:91:fb:
         5b:79:e3:c4:d4:3c:bf:96:12:92:c7:07:ec:c4:7b:b0:2a:0a:
         b1:d8:44:dc:88:32:f9:ce:3f:bd:e2:38:6a:fa:fd:e9:da:30:
         0c:76:c1:b5:7b:d7:5f:09:2e:5c:9b:52:47:6a:b5:26:7c:0d:
         ca:b7:94:7b:56:d0:65:f0:f9:96:4f:d6:75:eb:38:0d:45:93:
         19:c9:0d:d1:7f:e1:f4:19:9e:60:30:52:2b:18:4c:4d:67:20:
         83:1f:01:3b:2a:67:09:a6:10:67:9a:67:9c:60:8e:d4:61:8c:
         7b:38:f0:16:37:dd:61:9b:57:fe:57:b4:85:97:b6:bf:f5:37:
         19:9b:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:21:10 2025 by rpki-client