Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa
File:                     3137372e38372e32372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          PmpZiG+KDoBqPETyGHNvK80nipCajb+jk9CzVr2oCT4=
Subject key identifier:   D6:7E:CD:D3:C4:D3:2A:12:73:78:5E:BC:E0:65:D7:36:CB:5E:6C:2A
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       5A3CC884F2BE4A357CD153379CF7FCB09CCFB42B
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 30 Apr 2025 19:00:05 +0000
ROA not before:           Wed 30 Apr 2025 18:55:05 +0000
ROA not after:            Wed 29 Apr 2026 19:00:05 +0000
asID:                     52468
IP address blocks:        177.87.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3c:c8:84:f2:be:4a:35:7c:d1:53:37:9c:f7:fc:b0:9c:cf:b4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:05 2025 GMT
            Not After : Apr 29 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:48:85:f3:ec:07:7c:08:92:99:7d:2f:a9:
                    98:f1:00:55:01:0c:d4:b8:55:a2:dd:6e:18:6f:49:
                    8d:ec:ba:35:be:3d:90:18:b0:fe:0f:7b:05:0c:49:
                    06:57:b2:44:47:ad:77:3d:b2:eb:73:09:2b:87:d8:
                    4c:0e:8b:4d:63:8f:f2:3f:80:d7:68:d7:49:88:45:
                    87:c0:cb:da:db:5d:02:2b:28:60:db:73:ea:d6:32:
                    76:c0:70:31:4c:aa:8d:aa:bf:da:bc:28:e9:4b:8c:
                    cc:7c:0e:49:a8:99:c8:dd:65:6c:1c:6d:10:3b:01:
                    13:a1:0a:1c:b7:58:de:20:09:ff:73:3d:5d:c5:71:
                    3d:c4:78:42:31:1e:ef:c0:c6:43:01:82:5e:78:57:
                    4d:53:38:14:d4:71:06:36:4e:8c:16:48:f3:a5:0a:
                    f2:58:07:b2:a2:67:15:d5:1b:7c:b1:36:c1:ca:04:
                    1f:41:7c:ca:db:8e:35:10:61:4b:10:36:3d:7f:9d:
                    ad:6f:cf:ed:cb:5e:9f:de:08:7e:cc:3a:fd:c4:44:
                    8b:09:5d:d0:d5:1a:a1:9e:74:6b:a6:8d:76:45:f6:
                    12:ef:b9:75:ef:34:f0:b4:f3:77:90:01:ce:38:32:
                    e1:8a:82:4c:eb:42:9a:ec:99:74:b4:e4:2c:63:59:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:CD:D3:C4:D3:2A:12:73:78:5E:BC:E0:65:D7:36:CB:5E:6C:2A
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:34:f7:61:15:b5:57:40:89:60:aa:9c:f8:7e:6b:b8:1a:dc:
         3c:82:57:99:b9:7d:37:6f:a0:c1:9b:9d:e3:af:26:72:d7:b1:
         cf:72:8b:11:e1:0e:29:3f:d1:c8:ae:e2:6a:91:03:a7:dd:3b:
         96:cf:3e:ee:11:18:7a:08:77:d5:66:b6:98:66:70:94:3d:c9:
         bc:ef:1b:b1:a9:26:89:a4:d9:18:2e:49:03:2c:0e:ec:66:b3:
         6c:55:8c:a8:13:04:d8:60:3b:22:68:5d:68:d3:53:ec:26:68:
         64:df:62:e6:8f:a3:80:c3:4f:85:e7:61:b6:8c:46:fb:74:f8:
         9a:5c:00:f1:13:f6:8f:b4:4b:32:a2:18:bf:95:1a:8b:ce:35:
         7c:13:65:ab:5c:af:18:bd:b6:68:50:5f:ed:4f:20:75:ba:eb:
         14:af:6c:ce:1d:a2:a8:fe:5c:60:87:02:60:07:94:4c:b4:e8:
         06:8b:81:20:7a:85:df:b2:c1:56:2d:9a:89:16:30:15:35:21:
         42:14:ef:30:87:45:ee:e3:14:1d:d6:31:08:90:bc:0d:8b:53:
         77:24:71:54:c3:6f:c6:78:92:a3:42:c7:70:9e:59:6c:44:e8:
         f6:e7:00:49:c4:7b:ca:be:e2:1f:40:30:62:29:62:7f:aa:53:
         2e:99:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:29:33 2025 by rpki-client