Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa
File:                     3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          zyW2TFmF5thqVBvcAva2N6vaXgeB8yXA/jrkcr1aRgk=
Subject key identifier:   40:4B:7A:1C:AC:98:03:69:CE:02:02:DE:33:E5:50:72:4C:EE:4D:B6
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       5BC0930F1E962934218AC02DAAFD8F7206811D8A
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa
Signing time:             Sat 14 Jun 2025 14:32:08 +0000
ROA not before:           Sat 14 Jun 2025 14:27:08 +0000
ROA not after:            Sat 13 Jun 2026 14:32:08 +0000
asID:                     262507
IP address blocks:        177.55.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 03:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c0:93:0f:1e:96:29:34:21:8a:c0:2d:aa:fd:8f:72:06:81:1d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jun 14 14:27:08 2025 GMT
            Not After : Jun 13 14:32:08 2026 GMT
        Subject: CN=404B7A1CAC980369CE0202DE33E550724CEE4DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:58:ee:99:72:5a:3a:fb:e6:fe:52:98:30:
                    fc:7d:0c:76:10:60:fc:2e:1b:2e:68:b8:85:ee:04:
                    ed:19:9b:da:ba:3e:c6:d0:32:e8:4b:9d:43:9b:0d:
                    fa:74:57:8e:48:27:16:66:cc:0a:21:ac:4a:1e:4e:
                    2f:ed:8d:99:90:40:7d:3b:ee:d2:3a:38:1d:5b:6d:
                    13:81:f5:3d:20:05:56:85:96:06:fe:21:93:87:ab:
                    e6:13:a4:a7:7b:28:08:e2:74:23:ca:11:2d:5a:24:
                    31:ab:39:85:38:81:81:a7:6f:52:40:4c:13:2a:89:
                    2b:4c:96:52:14:05:d3:cc:8d:dd:57:41:10:65:ff:
                    69:78:5e:da:2f:38:e4:6b:e8:4c:fa:ab:39:9c:2f:
                    47:4d:d0:cf:a1:c3:a3:00:dc:76:ba:b0:ca:e6:e8:
                    f4:0e:a8:78:85:f9:fe:89:ee:dc:55:5b:43:22:d7:
                    60:7c:eb:ef:f9:03:0a:27:75:62:dc:ce:d6:4a:13:
                    50:ce:8f:dd:0d:cf:cb:33:74:56:e3:59:a7:02:61:
                    6b:b1:8d:55:94:2c:25:e5:79:67:7d:16:e3:92:4b:
                    1d:b3:30:7e:cd:5c:ed:5b:b9:db:f5:eb:ce:64:e2:
                    dc:aa:12:3b:2c:b8:00:4c:5e:bf:89:89:44:68:06:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4B:7A:1C:AC:98:03:69:CE:02:02:DE:33:E5:50:72:4C:EE:4D:B6
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:28:af:38:7e:55:47:be:8f:a0:12:4e:ad:12:3f:32:74:07:
         93:d4:5d:2a:8a:5b:c3:0c:79:d0:ec:af:3f:22:7d:f7:53:44:
         21:d0:a3:33:84:fa:0d:63:c9:52:29:86:58:e7:17:1f:a6:17:
         c3:37:ff:3e:3f:ac:56:66:dd:e2:a2:60:d2:73:ba:fa:2b:d2:
         86:0a:25:24:32:eb:87:c4:2e:aa:36:1a:4c:bd:58:4f:02:be:
         06:4b:4c:d5:ee:93:c4:5e:3a:d6:21:ec:f6:46:de:c4:51:cd:
         0f:43:34:bd:cd:e9:99:c3:b2:bf:14:17:f7:6c:24:10:99:4e:
         4d:09:88:16:f6:a0:14:9e:70:5e:dd:97:a6:7b:74:9d:e2:82:
         c5:ec:57:46:a7:22:c2:e7:ba:62:01:3f:ce:12:53:8d:1a:66:
         ab:8e:09:63:7c:d9:fc:97:73:de:44:10:91:49:2b:f5:72:12:
         6f:b9:81:a2:cb:24:59:1a:6d:f8:da:d7:13:bd:8e:9c:35:10:
         84:44:5d:7b:a0:06:e8:4d:5f:c7:7f:5a:60:c7:51:64:be:34:
         44:d6:1a:f6:16:a3:ad:22:d9:7d:de:80:2a:3d:3f:1e:51:56:
         9b:8f:ff:c8:0d:b8:b9:7c:0a:1d:45:02:dd:6d:b0:3e:49:50:
         02:d1:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:39:15 2025 by rpki-client