Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3137322e302f32322d3332203d3e20323632353037.roa
File:                     3137372e35352e3137322e302f32322d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          KeXqx/opZUPDldxietryrcfPX6N4fK1ltpNye8NEnno=
Subject key identifier:   98:3D:3C:C8:38:78:B2:94:B4:07:EE:AC:CE:E9:0E:03:D3:EC:EA:91
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       1196D03C0851EFE0688EA13392E6E069B2E7BC43
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3137322e302f32322d3332203d3e20323632353037.roa
Signing time:             Sat 14 Jun 2025 01:32:07 +0000
ROA not before:           Sat 14 Jun 2025 01:27:07 +0000
ROA not after:            Sat 13 Jun 2026 01:32:07 +0000
asID:                     262507
IP address blocks:        177.55.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 03:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:96:d0:3c:08:51:ef:e0:68:8e:a1:33:92:e6:e0:69:b2:e7:bc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jun 14 01:27:07 2025 GMT
            Not After : Jun 13 01:32:07 2026 GMT
        Subject: CN=983D3CC83878B294B407EEACCEE90E03D3ECEA91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:ff:70:16:87:45:91:10:ed:07:c7:d9:84:
                    e5:4a:85:8e:c4:ac:2d:8d:91:02:0e:58:63:7a:3e:
                    43:74:9b:56:56:b9:1a:66:b0:41:86:d6:c4:86:e0:
                    e8:8d:74:0c:a6:60:be:5a:fa:b4:1d:b8:78:b4:c4:
                    4e:d1:90:c9:79:23:68:ea:66:46:17:13:88:14:15:
                    ae:aa:b5:23:5a:53:9c:f0:13:3a:8a:4d:d4:7f:76:
                    eb:5e:ce:6e:cd:52:fc:8d:2c:f0:32:95:a3:0c:e6:
                    40:f9:43:52:f9:25:e3:9c:ed:96:8b:f2:cf:2c:cb:
                    90:37:5d:d3:1e:8d:aa:77:db:a0:60:1d:04:be:06:
                    4f:5e:b9:a1:d3:88:dd:1d:4c:ec:7d:b0:23:84:62:
                    9e:ab:57:df:20:83:69:81:e3:84:5a:11:6f:02:5d:
                    b5:d3:07:8e:c0:5a:ff:34:b1:5f:18:2a:29:55:e8:
                    e5:4e:20:d5:01:ff:c9:74:ce:4f:3b:94:d0:b9:f4:
                    10:0b:ff:3c:0d:35:a3:89:25:1c:e8:13:ef:44:94:
                    ee:39:9c:dd:dc:5e:5e:0d:13:5f:2b:9c:35:d7:03:
                    e5:78:5b:1c:92:a3:70:09:39:0d:21:92:0d:be:f4:
                    d4:65:ca:5e:f1:8f:41:a0:32:e6:4c:68:2e:41:74:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3D:3C:C8:38:78:B2:94:B4:07:EE:AC:CE:E9:0E:03:D3:EC:EA:91
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3137322e302f32322d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:9c:20:ea:94:97:2d:7b:74:5e:2c:dc:f6:92:7a:7a:4f:
         f4:73:2a:da:2d:3f:4a:19:4f:62:8e:b9:20:38:08:94:73:3f:
         ae:af:4c:2f:6c:3d:15:db:29:13:f0:d0:a0:32:45:28:a5:ad:
         c7:80:21:e8:a6:13:e4:d8:84:dd:da:c7:df:46:aa:26:29:31:
         5b:6a:57:8e:52:3b:0b:32:fb:55:d5:28:51:7e:af:59:29:2a:
         d4:8d:13:e4:04:da:83:42:3a:cf:f6:04:d6:21:a1:10:62:63:
         96:7e:32:26:02:b6:ef:3b:84:43:9f:c0:5b:14:21:59:c6:98:
         b5:a5:d6:01:27:ff:44:99:25:35:65:c6:6d:48:2a:b3:36:cb:
         d8:51:35:2e:8a:eb:50:c6:46:da:09:35:8f:51:ea:39:c6:bc:
         48:2c:60:72:d8:fc:05:2f:6c:45:49:20:44:2a:e6:11:21:10:
         8f:08:e1:3e:65:39:e6:c1:0f:72:3a:72:98:96:74:c8:78:89:
         1b:7e:59:f5:3f:e7:6c:97:30:17:8f:86:c1:d6:87:b1:bf:73:
         af:99:11:18:7d:90:ca:5f:ae:7d:aa:a0:99:e1:73:35:d9:68:
         c3:76:b4:a5:22:08:1e:39:6f:3b:cc:48:43:d5:0a:2d:bf:2d:
         cb:6b:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:38:41 2025 by rpki-client