Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e33312e302f32342d3332203d3e203533313037.roa
File:                     3137372e3133372e33312e302f32342d3332203d3e203533313037.roa (raw, json)
Hash identifier:          mjGoTH2qran2HMwltw3naWw5FeT+chPw+qNNT2KseQM=
Subject key identifier:   90:9A:B1:6B:0C:C7:38:E8:85:45:4C:95:1B:24:D3:EA:70:EF:EA:60
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       18809D735DD0D5B6B3874FFBC0F315CD339DF821
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e33312e302f32342d3332203d3e203533313037.roa
Signing time:             Wed 02 Jul 2025 12:06:21 +0000
ROA not before:           Wed 02 Jul 2025 12:01:21 +0000
ROA not after:            Wed 01 Jul 2026 12:06:21 +0000
asID:                     53107
IP address blocks:        177.137.31.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:80:9d:73:5d:d0:d5:b6:b3:87:4f:fb:c0:f3:15:cd:33:9d:f8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:21 2025 GMT
            Not After : Jul  1 12:06:21 2026 GMT
        Subject: CN=909AB16B0CC738E885454C951B24D3EA70EFEA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:07:40:1a:4c:27:7d:a9:e4:18:e2:b2:bf:
                    6a:8f:75:d3:05:2d:2e:2b:11:f9:15:a5:79:40:18:
                    18:76:1a:55:e4:4a:67:df:35:d7:d7:83:4b:83:fc:
                    4e:3b:78:4c:7e:b6:c7:ef:23:b5:40:89:d4:d0:11:
                    c9:86:f8:98:01:ad:d6:b5:f4:fe:20:f4:42:ad:6a:
                    f7:cd:dc:59:ac:e0:aa:72:9e:56:46:15:80:e5:b1:
                    29:3a:29:e1:5b:1e:4e:0b:b9:f0:e4:7a:e6:90:f1:
                    f8:58:02:5d:47:f7:fd:0d:1a:8f:9b:d8:f5:b1:67:
                    41:1b:ff:6d:0b:cd:eb:da:38:b6:f4:53:60:d2:b4:
                    ea:9f:4d:3b:14:58:e7:e5:0b:f8:87:52:81:d9:c0:
                    91:8c:88:6b:88:fd:cc:0e:a8:56:14:c3:5f:52:9f:
                    da:81:44:d3:90:30:9f:dc:97:5a:c6:25:5a:16:e6:
                    21:93:58:98:ba:42:33:ca:d2:3c:46:b4:2c:94:c0:
                    82:33:8d:bc:b3:ac:71:d6:d3:e3:8f:16:5d:5b:23:
                    1d:6b:eb:c5:37:6d:e5:22:f4:de:e4:2e:5e:6b:14:
                    93:5f:68:63:60:40:0a:a3:0e:d0:7b:5a:d5:78:f5:
                    fa:e2:4c:a8:41:00:26:34:84:d4:dd:aa:24:fd:90:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:B1:6B:0C:C7:38:E8:85:45:4C:95:1B:24:D3:EA:70:EF:EA:60
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3137372e3133372e33312e302f32342d3332203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d4:57:e1:53:28:fe:57:7e:f2:11:07:5f:5a:df:f8:c6:37:
         c5:c9:15:4c:4e:ff:c5:f5:15:6d:70:c4:27:46:e3:c7:7a:f5:
         ff:65:30:f4:f0:ad:5c:77:c6:9a:17:8d:07:b6:b5:96:05:f8:
         3c:a0:5c:28:2b:67:27:d5:ca:87:27:9b:63:73:29:71:e2:31:
         c9:d9:4d:ce:cf:42:43:ec:8e:91:91:2d:78:bf:86:2b:e8:ec:
         19:1a:72:4e:ee:62:4f:e2:d3:a4:b4:d7:5e:dd:ff:a3:25:6d:
         7d:97:45:17:55:15:2f:c3:a8:96:c1:ad:2a:a7:dc:e3:01:48:
         7a:ac:1d:43:9f:8f:2f:31:c7:9b:32:b8:bf:25:3a:03:e9:61:
         0e:0f:c5:0f:da:73:1d:8f:44:5a:73:15:9f:36:5f:50:02:cb:
         ae:3a:93:80:8c:45:14:30:fa:d0:0a:bc:fb:68:58:51:0f:d4:
         4c:34:b0:86:be:8d:db:80:5d:05:40:b6:78:07:ec:fb:bc:d1:
         73:ab:6d:5c:df:4e:16:75:7b:0a:34:b8:29:a6:37:95:c4:c2:
         71:61:c9:e2:bf:aa:33:4e:f5:a1:7e:a1:4a:00:0b:66:58:a4:
         c2:5a:fa:45:89:46:f1:63:4b:b8:35:fa:94:d8:62:25:c7:44:
         75:cf:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:33:06 2025 by rpki-client