Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235322e302f32322d3332203d3e20323632323836.roa
File:                     3137372e35322e3235322e302f32322d3332203d3e20323632323836.roa (raw, json)
Hash identifier:          fRKdaK6CSCMuCWkyOMX75SAvD1p/Q54T81ZI/4oIs8Q=
Subject key identifier:   93:97:07:35:49:1D:45:E3:06:D7:62:27:23:67:31:56:3D:96:69:9E
Certificate issuer:       /CN=3865E3537268319DD70D1072B951BD12CEB4D7D2
Certificate serial:       0C072625925976FC73C73E34B1D893D4AC5F12F3
Authority key identifier: 38:65:E3:53:72:68:31:9D:D7:0D:10:72:B9:51:BD:12:CE:B4:D7:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235322e302f32322d3332203d3e20323632323836.roa
Signing time:             Tue 15 Jul 2025 19:47:50 +0000
ROA not before:           Tue 15 Jul 2025 19:42:50 +0000
ROA not after:            Tue 14 Jul 2026 19:47:50 +0000
asID:                     262286
IP address blocks:        177.52.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.crl
                          rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:07:26:25:92:59:76:fc:73:c7:3e:34:b1:d8:93:d4:ac:5f:12:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3865E3537268319DD70D1072B951BD12CEB4D7D2
        Validity
            Not Before: Jul 15 19:42:50 2025 GMT
            Not After : Jul 14 19:47:50 2026 GMT
        Subject: CN=93970735491D45E306D76227236731563D96699E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:83:20:f6:99:d1:64:a3:e8:aa:a9:42:19:
                    90:8b:b3:af:fe:e3:a6:32:4a:db:1b:5e:d8:b4:41:
                    ee:c6:43:61:28:0b:f2:86:76:18:e3:3e:1d:4e:5d:
                    ea:7b:e6:db:a9:e4:aa:ea:45:dc:17:78:58:c6:64:
                    0b:f9:3c:83:bb:0c:79:d0:84:fb:2f:f3:e7:82:7f:
                    b4:c2:f4:f1:21:27:4a:55:90:a6:20:c7:57:97:73:
                    7d:f7:e5:5c:64:3e:72:5d:6c:fe:11:ab:7b:65:f2:
                    73:8b:4a:0b:8a:3b:06:9b:60:d2:6a:90:75:84:77:
                    88:0e:c2:40:c6:e0:a2:d6:9a:e1:ac:6e:fc:51:2a:
                    98:39:d3:f0:a1:5b:ca:27:3c:41:d5:28:9d:92:34:
                    7b:cb:20:b8:0a:a5:59:6c:b7:a5:ac:d9:b8:33:82:
                    37:00:d2:3d:50:b7:45:1d:7a:d4:c8:3c:1c:23:97:
                    4f:c2:1e:e5:97:a3:df:3e:ba:63:72:77:fe:08:01:
                    e7:71:68:65:02:80:c9:cf:4e:6b:37:d9:23:c0:39:
                    05:ae:85:4f:b7:96:72:8a:33:d9:d8:83:a9:78:97:
                    51:e5:8b:b0:a4:04:28:1f:01:31:5a:56:90:fa:72:
                    b7:87:aa:17:2e:aa:d8:f1:c3:1e:c8:66:2a:6e:8c:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:97:07:35:49:1D:45:E3:06:D7:62:27:23:67:31:56:3D:96:69:9E
            X509v3 Authority Key Identifier:
                keyid:38:65:E3:53:72:68:31:9D:D7:0D:10:72:B9:51:BD:12:CE:B4:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235322e302f32322d3332203d3e20323632323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:81:46:3e:a1:8b:48:54:3b:3e:52:1a:23:f5:7f:4a:03:47:
         42:34:fa:1c:ab:28:e4:1e:33:cd:c0:37:65:2b:4b:01:af:a2:
         bf:c3:bf:ce:46:e4:3e:df:99:12:a9:35:bc:d1:9a:c1:76:84:
         45:b2:ee:50:29:09:22:78:a3:59:cd:60:24:26:8e:ae:29:95:
         16:f8:68:94:e6:87:85:bc:5c:a3:80:70:1d:3e:1b:0b:e5:13:
         1d:76:da:ca:03:73:43:94:d2:0c:74:46:47:c4:f6:33:88:2c:
         6f:7b:ee:52:6a:f3:eb:85:67:38:dc:a8:8b:0e:91:b1:02:7a:
         5a:dc:aa:4b:c3:b8:16:98:c4:4f:59:2a:f3:94:bc:39:4d:2a:
         94:32:01:1d:e2:48:ad:95:04:31:ee:70:3c:64:69:e7:c4:71:
         79:42:02:3d:f0:60:17:c7:4f:9a:df:ad:ae:f1:7b:e4:6b:da:
         a7:50:1f:93:54:e0:b3:97:7b:a8:1b:6d:c1:ce:69:17:6e:d1:
         1c:1d:20:16:7d:d0:77:b4:87:d6:ed:38:dd:36:35:25:7b:c4:
         e2:7f:78:c6:5e:6e:00:0f:76:0b:31:d4:7f:ea:69:dc:b0:3b:
         c7:ef:b2:7a:31:17:cd:d7:25:e4:3b:46:75:ab:74:22:d5:a4:
         22:b4:01:67
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDAcmJZJZdvxzxz40sdiT1KxfEvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg2NUUzNTM3MjY4MzE5REQ3MEQxMDcyQjk1MUJEMTJD
RUI0RDdEMjAeFw0yNTA3MTUxOTQyNTBaFw0yNjA3MTQxOTQ3NTBaMDMxMTAvBgNV
BAMTKDkzOTcwNzM1NDkxRDQ1RTMwNkQ3NjIyNzIzNjczMTU2M0Q5NjY5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCokYMg9pnRZKPoqqlCGZCLs6/+
46YyStsbXti0Qe7GQ2EoC/KGdhjjPh1OXep75tup5KrqRdwXeFjGZAv5PIO7DHnQ
hPsv8+eCf7TC9PEhJ0pVkKYgx1eXc3335VxkPnJdbP4Rq3tl8nOLSguKOwabYNJq
kHWEd4gOwkDG4KLWmuGsbvxRKpg50/ChW8onPEHVKJ2SNHvLILgKpVlst6Ws2bgz
gjcA0j1Qt0UdetTIPBwjl0/CHuWXo98+umNyd/4IAedxaGUCgMnPTms32SPAOQWu
hU+3lnKKM9nYg6l4l1Hli7CkBCgfATFaVpD6creHqhcuqtjxwx7IZipujLpHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk5cHNUkdReMG12InI2cxVj2WaZ4wHwYDVR0j
BBgwFoAUOGXjU3JoMZ3XDRByuVG9Es6019IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1VIZExLOXA4VHRLM2pyaXZUaXRSN3NkNnQ2Rng5VVNWU3hIcWNacTlE
dFQvMC8zODY1RTM1MzcyNjgzMTlERDcwRDEwNzJCOTUxQkQxMkNFQjREN0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4NjVFMzUzNzI2ODMxOURE
NzBEMTA3MkI5NTFCRDEyQ0VCNEQ3RDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NVSGRMSzlwOFR0SzNqcml2VGl0UjdzZDZ0NkZ4OVVTVlN4SHFjWnE5RHRULzAv
MzEzNzM3MmUzNTMyMmUzMjM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzMjM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxNPwwDQYJKoZIhvcNAQELBQADggEBAFCBRj6h
i0hUOz5SGiP1f0oDR0I0+hyrKOQeM83AN2UrSwGvor/Dv85G5D7fmRKpNbzRmsF2
hEWy7lApCSJ4o1nNYCQmjq4plRb4aJTmh4W8XKOAcB0+GwvlEx122soDc0OU0gx0
RkfE9jOILG977lJq8+uFZzjcqIsOkbECelrcqkvDuBaYxE9ZKvOUvDlNKpQyAR3i
SK2VBDHucDxkaefEcXlCAj3wYBfHT5rfra7xe+Rr2qdQH5NU4LOXe6gbbcHOaRdu
0RwdIBZ90He0h9btON02NSV7xOJ/eMZebgAPdgsx1H/qadywO8fvsnoxF83XJeQ7
RnWrdCLVpCK0AWc=
-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:37 2025 by rpki-client