Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa
File:                     3137372e35332e37322e302f32322d3232203d3e20323632343630.roa (raw, json)
Hash identifier:          VuLvhdpTVMFLtQJitVh7RFoV5knHC3FlRHdXFRGBop0=
Subject key identifier:   42:FF:93:70:B6:41:DF:2F:7E:1B:E2:AD:38:08:C9:43:F1:91:C7:CC
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       5F768EF019C386CA4B218AA81411597EA6FA178F
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa
Signing time:             Thu 26 Jun 2025 14:37:48 +0000
ROA not before:           Thu 26 Jun 2025 14:32:48 +0000
ROA not after:            Thu 25 Jun 2026 14:37:48 +0000
asID:                     262460
IP address blocks:        177.53.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:76:8e:f0:19:c3:86:ca:4b:21:8a:a8:14:11:59:7e:a6:fa:17:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Jun 26 14:32:48 2025 GMT
            Not After : Jun 25 14:37:48 2026 GMT
        Subject: CN=42FF9370B641DF2F7E1BE2AD3808C943F191C7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:f0:35:72:82:d8:47:2f:81:b4:75:91:85:
                    9e:93:d1:89:ed:12:f0:22:f4:87:ef:be:91:5a:aa:
                    c7:a2:8e:f5:bd:37:ef:0e:85:a3:95:31:61:26:42:
                    81:01:61:46:f0:cf:c8:52:a1:b1:a8:73:96:7c:0c:
                    e9:f0:a6:fc:56:73:74:ed:f8:26:96:90:43:e5:99:
                    e2:29:15:c1:7b:83:10:c0:82:ac:7d:f0:a2:8d:35:
                    ac:69:d1:98:a2:ca:12:66:ec:d5:a0:38:67:a7:9c:
                    d3:ce:df:35:66:b2:a7:7c:c9:c6:91:c4:99:da:71:
                    19:b0:8f:66:48:45:b1:aa:e7:4a:b0:0a:d4:6b:a8:
                    68:91:ae:90:30:a3:e0:87:fe:2b:fa:c8:d2:93:86:
                    2b:36:8b:88:30:e5:0a:10:83:a6:a7:76:35:ea:c3:
                    67:e8:4b:e0:d7:21:81:ed:dc:bb:47:18:ec:f0:97:
                    63:10:97:dc:7b:67:fd:0b:d6:5f:ea:6f:40:fa:2b:
                    ef:bc:8a:bd:d3:49:d6:6a:fc:62:b9:47:ef:74:79:
                    5d:df:5c:9e:bb:77:74:fa:d4:e3:ab:81:c1:cb:75:
                    f5:aa:dd:99:78:49:99:1c:a1:7c:1f:02:b2:e9:64:
                    6d:e7:fe:11:0c:c5:17:19:45:a9:5f:84:cb:67:f0:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FF:93:70:B6:41:DF:2F:7E:1B:E2:AD:38:08:C9:43:F1:91:C7:CC
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:8a:3b:9f:08:42:3b:b0:7f:47:80:be:14:22:4d:89:af:7b:
         4c:a0:35:88:64:17:ea:32:3c:0f:94:3f:e8:2f:7e:bc:cd:28:
         01:53:e5:3e:33:27:1e:1f:81:f4:13:38:53:51:f0:34:8a:54:
         e6:c1:e5:f5:36:dd:39:5c:34:f7:34:ca:49:fb:76:09:99:49:
         66:f1:f2:4c:8d:d8:44:3a:03:71:b3:92:9b:6a:14:31:6c:76:
         b3:35:04:7e:93:d7:15:c7:2e:fd:54:4b:40:28:2f:d6:56:98:
         5d:6e:04:e8:d8:fc:84:d0:54:9c:a1:0b:3d:93:3b:04:b0:04:
         33:ba:81:fc:3c:27:21:97:ed:d7:97:34:56:09:c1:70:b0:fa:
         c3:50:2d:1f:7e:2c:c2:60:cc:a0:b1:d1:63:c1:57:83:c3:c0:
         d8:1a:44:9c:1f:77:a9:0c:ec:db:fb:12:7e:c1:3e:99:4b:27:
         43:64:d3:fd:bb:6b:e4:72:6b:f5:c4:6a:98:0e:1c:b3:6f:95:
         ea:63:cb:0f:e9:33:0d:bd:a0:c4:26:2a:66:82:88:96:5d:a0:
         5b:3f:54:2e:c8:2f:be:be:5e:01:bf:3c:f6:af:81:9e:b5:41:
         62:12:67:af:20:64:d0:d1:c0:dd:f3:91:fa:61:6d:fc:55:01:
         e1:4b:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:04:48 2025 by rpki-client