Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa
File:                     3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          M2VoFkfceDb9lF1mvZYsirkUDEfhjwUb7YHyhYLm15Y=
Subject key identifier:   9F:95:86:F3:FA:0A:20:4B:69:67:B7:8C:61:51:77:D5:69:2B:D6:13
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       5CF340B4CBDBE221C63F24C4EF86D215FAE8EFCD
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa
Signing time:             Sat 14 Jun 2025 01:32:07 +0000
ROA not before:           Sat 14 Jun 2025 01:27:07 +0000
ROA not after:            Sat 13 Jun 2026 01:32:07 +0000
asID:                     262507
IP address blocks:        177.55.166.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 15:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f3:40:b4:cb:db:e2:21:c6:3f:24:c4:ef:86:d2:15:fa:e8:ef:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jun 14 01:27:07 2025 GMT
            Not After : Jun 13 01:32:07 2026 GMT
        Subject: CN=9F9586F3FA0A204B6967B78C615177D5692BD613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:40:8f:50:1a:01:32:bd:7d:ad:0f:cc:c3:
                    0a:cc:52:ab:d3:4a:d7:7e:fb:0b:e7:40:a1:97:4f:
                    c1:f4:7e:39:1d:8a:a2:77:0f:1c:d8:79:04:8b:f0:
                    b1:30:2c:d2:bf:8a:4c:29:d0:92:a3:49:7e:b6:85:
                    20:63:f7:28:bb:4c:07:35:ec:0e:e8:0a:fc:93:f9:
                    04:e9:c4:db:cb:04:ac:d5:67:a0:51:f2:08:bb:e8:
                    36:16:1d:e9:48:ef:ea:c0:48:04:5f:f4:95:7d:ae:
                    72:c1:8f:c8:45:a1:56:6d:f4:10:4f:73:97:21:16:
                    b6:f4:4b:b7:ff:08:cd:fc:8f:99:26:bf:e5:96:c5:
                    2b:4d:a5:d1:49:d2:3d:31:a3:d0:8a:fb:97:d0:02:
                    c5:bb:20:a5:3f:cd:6d:05:ec:f5:25:7d:70:c3:5d:
                    36:b2:a9:e4:04:13:ec:e2:32:ae:54:41:5d:47:81:
                    1e:b3:63:97:ff:fb:23:15:82:65:79:78:64:3f:04:
                    30:b0:95:24:76:1c:81:95:bb:5c:7e:dd:87:74:1c:
                    80:d1:b4:bb:46:41:52:44:59:00:2b:19:99:45:53:
                    f2:dd:9a:cd:05:f8:62:09:8c:4b:e2:66:5c:f1:3b:
                    c8:91:03:2e:a1:b5:50:ae:bb:05:32:6c:43:9f:3b:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:95:86:F3:FA:0A:20:4B:69:67:B7:8C:61:51:77:D5:69:2B:D6:13
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:b3:ad:7f:af:b4:ca:31:12:5f:cf:82:2f:4b:b3:99:cb:
         da:36:2a:39:f2:86:88:f4:d4:dd:69:59:49:45:57:93:06:19:
         bd:e2:57:1e:3a:f5:f6:7c:1a:37:be:90:cd:78:41:c6:44:7d:
         92:97:17:e3:52:c6:8e:c0:88:a4:fa:6b:d2:30:d2:42:69:60:
         45:9b:85:76:7f:d1:dd:cf:c7:7f:70:5d:67:46:75:5c:21:c2:
         72:bc:52:f7:fc:47:50:ee:76:38:b2:bb:58:65:41:2c:e8:c5:
         9f:22:a6:90:93:21:10:b2:1b:b8:77:77:54:71:be:43:ae:41:
         f0:9e:bc:55:24:dc:04:25:c7:ed:70:1b:ea:d5:82:9c:2f:1d:
         2f:a7:b8:ba:e7:84:ac:1f:d3:cd:10:5c:8d:7c:29:fe:3c:7e:
         f4:ad:a9:7a:fa:ed:db:9a:c9:0a:63:6e:50:04:9b:dc:ea:e8:
         f3:90:80:0c:ba:32:69:bb:60:57:83:4a:53:78:b5:34:91:bc:
         c4:36:1e:31:c9:1e:1d:74:f3:17:ec:15:88:cc:d3:91:42:41:
         12:de:dd:22:ce:5b:7f:0a:a2:bb:3e:6e:a6:3c:8e:ee:af:42:
         22:85:f7:1d:b8:73:5a:87:80:ec:d7:18:a6:6b:69:1c:3a:00:
         6a:a4:09:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:44:27 2025 by rpki-client