Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa
File:                     3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          Gaptw9+1WyRV5JiqqO7mX0o50cl3ZsKCXJfZ0KZ4DpQ=
Subject key identifier:   7B:03:2D:80:97:B3:3A:76:7E:8E:A4:B9:0F:45:EB:7D:CB:86:0D:B1
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       41C502BA20EF4A3DB3EDCE07847DF90FF4D14410
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa
Signing time:             Sat 14 Jun 2025 01:32:07 +0000
ROA not before:           Sat 14 Jun 2025 01:27:07 +0000
ROA not after:            Sat 13 Jun 2026 01:32:07 +0000
asID:                     262507
IP address blocks:        177.55.165.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 09:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c5:02:ba:20:ef:4a:3d:b3:ed:ce:07:84:7d:f9:0f:f4:d1:44:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jun 14 01:27:07 2025 GMT
            Not After : Jun 13 01:32:07 2026 GMT
        Subject: CN=7B032D8097B33A767E8EA4B90F45EB7DCB860DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:0e:4c:d3:03:6f:c0:7d:55:30:fe:15:27:
                    2a:9b:71:4b:6a:4c:6c:b8:05:0f:23:d6:05:a6:ed:
                    f3:21:ba:1f:16:b9:fa:9d:d2:35:ff:05:0b:4c:8a:
                    eb:f2:ed:ad:07:c2:d4:e3:9d:71:3d:4a:2d:82:f5:
                    78:3c:63:1c:bb:f3:75:ae:40:22:35:85:9e:05:3e:
                    07:8e:c1:67:88:c6:82:d3:c7:19:84:99:d2:e7:0c:
                    20:61:fc:0a:68:5e:34:ac:f7:60:fb:48:c0:34:ca:
                    0b:d9:d5:ab:c4:8f:86:f8:04:61:ff:f4:6b:10:f6:
                    15:c4:16:cd:37:27:d1:5e:bd:2a:eb:05:24:e6:80:
                    96:2a:8e:18:aa:58:40:c3:db:4f:ae:8b:fc:0a:50:
                    54:8c:a7:4c:aa:b4:d0:31:d0:46:f6:ac:8f:0e:57:
                    fd:f1:23:42:2f:7c:9f:d8:64:c9:89:6b:e8:45:9d:
                    62:32:ab:a9:43:3e:eb:83:f9:ae:34:94:e2:50:53:
                    c6:bc:05:33:8b:f9:4b:98:ae:72:4c:a7:c2:77:ae:
                    d5:5e:51:d7:85:eb:4e:0b:6c:5c:1d:82:94:3e:7b:
                    44:89:86:bf:35:fd:8f:29:c7:9f:14:6a:17:0a:11:
                    c2:10:95:47:ed:ab:c1:96:3b:bf:8b:58:75:c0:d8:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:2D:80:97:B3:3A:76:7E:8E:A4:B9:0F:45:EB:7D:CB:86:0D:B1
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:14:e4:9d:62:e0:f5:4a:26:9a:ac:52:b0:4f:00:75:82:
         37:75:77:e1:90:52:0b:48:1d:a7:fd:c1:a7:48:58:76:ce:c8:
         aa:59:cb:ad:90:76:50:78:5f:1d:f9:e9:14:20:e7:76:10:ad:
         06:19:c3:0f:7a:f5:a2:ab:9c:17:b3:64:46:20:5e:72:c7:96:
         c7:ae:e3:0d:e8:8d:9e:65:12:25:d0:db:86:56:8a:1d:97:57:
         f9:db:17:05:f3:14:40:09:62:a1:ba:f3:78:37:97:72:5d:90:
         f3:31:03:ff:a9:c9:cb:5e:02:cc:1d:e6:fd:d1:24:a1:65:9e:
         e6:a9:92:81:49:83:74:70:c0:e9:f5:53:18:49:d3:7c:64:d3:
         52:dc:43:d5:a1:89:eb:ca:4a:30:41:d5:10:5b:34:31:36:89:
         70:f8:da:52:8e:ff:3f:a4:07:83:99:75:ee:44:a5:f1:fe:ba:
         dd:42:02:ef:a7:af:ff:90:a4:ae:ad:fe:a2:00:d3:0f:af:25:
         73:4f:46:7b:17:58:3e:c7:5f:6c:bb:4e:62:01:34:12:3d:b8:
         3e:9f:74:52:e7:33:61:05:3b:63:93:76:7c:80:e0:b9:52:ef:
         8d:91:8e:9c:54:96:ad:0a:9e:db:6e:d4:2d:58:5b:57:f3:18:
         b9:5b:80:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:13:18 2025 by rpki-client