Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32342d3234203d3e203532373936.roa
File:                     3137372e35322e34342e302f32342d3234203d3e203532373936.roa (raw, json)
Hash identifier:          6vdFQfA5lnE387AQBaz7OJcadPg4QswmmQbDioW4CWM=
Subject key identifier:   80:5F:2E:85:BB:F4:FC:95:19:5E:53:17:21:F8:5D:81:90:99:E1:51
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       6DB60FC1C62FAEB591B13E8DCFCA018D8B9D68A2
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32342d3234203d3e203532373936.roa
Signing time:             Mon 04 Aug 2025 20:00:00 +0000
ROA not before:           Mon 04 Aug 2025 19:55:00 +0000
ROA not after:            Mon 03 Aug 2026 20:00:00 +0000
asID:                     52796
IP address blocks:        177.52.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
                          rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b6:0f:c1:c6:2f:ae:b5:91:b1:3e:8d:cf:ca:01:8d:8b:9d:68:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Aug  4 19:55:00 2025 GMT
            Not After : Aug  3 20:00:00 2026 GMT
        Subject: CN=805F2E85BBF4FC95195E531721F85D819099E151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:af:0b:86:03:dc:26:ba:63:2e:99:10:8f:86:
                    62:fa:7b:9c:83:bd:98:6b:2e:1c:ea:91:76:2f:9f:
                    53:5e:19:0b:25:a2:0f:3a:3d:30:f0:0e:18:47:05:
                    d7:7c:08:2e:7d:92:59:61:17:f8:fa:4c:41:c0:73:
                    d2:b1:86:0c:b7:16:9a:c0:9b:d2:03:69:86:68:ac:
                    14:1f:1b:40:99:87:9a:cf:3e:c0:c1:27:72:af:e1:
                    8d:64:a8:dc:d7:c5:0a:0e:ec:0f:0f:22:b2:18:1e:
                    a0:0f:30:9d:24:dd:78:51:ed:40:ec:e0:4a:e3:3c:
                    d1:b5:79:c2:cb:6c:e6:14:d0:a6:55:0e:c8:1c:23:
                    7c:3e:b0:ff:44:7f:58:33:17:a5:5e:cc:93:a5:5b:
                    f7:a2:8d:39:75:35:b4:54:00:80:f7:d8:6a:5e:e1:
                    2c:c7:9e:a2:f1:06:0c:5f:e3:85:11:f6:93:77:7d:
                    65:f3:84:d9:5a:1a:90:f3:e8:42:58:87:4c:e5:a3:
                    5a:a3:97:0c:a5:33:45:1e:42:7c:96:8a:91:f9:ab:
                    0d:ac:99:bb:b5:42:7d:f3:6d:d9:3f:2c:17:d8:35:
                    74:6e:08:d8:9f:2a:85:77:73:5f:95:48:4d:f2:7b:
                    69:df:38:cd:e7:1e:bf:23:8f:04:35:5a:2c:36:d7:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5F:2E:85:BB:F4:FC:95:19:5E:53:17:21:F8:5D:81:90:99:E1:51
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34342e302f32342d3234203d3e203532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:70:bd:85:66:70:e6:83:d9:01:03:7d:2b:6a:16:63:01:1c:
         95:1b:d1:30:f5:7a:d3:0f:a7:1f:3b:0d:71:9d:a0:1c:63:e5:
         60:7b:2f:ec:b2:04:15:f3:f6:f7:28:8a:a2:90:68:8f:60:c8:
         f1:19:9d:13:50:68:0c:87:5f:fe:35:7d:2e:07:d5:c6:3f:62:
         b4:aa:7f:8f:38:fa:26:e1:79:7c:3b:9e:d4:ab:43:c2:9a:c1:
         12:cc:15:ae:72:f9:b7:c9:7b:13:69:a0:21:33:2f:72:cb:f5:
         a3:bb:ab:97:84:f6:a4:c1:26:5a:3c:a1:c5:14:ca:7e:ba:e1:
         b9:cf:89:74:7d:39:31:be:e5:6c:31:ba:49:8d:ad:37:8b:89:
         d1:fa:89:95:41:d1:7f:19:af:b4:e4:36:26:b7:6b:e1:b1:2e:
         9c:1d:1c:d8:88:e3:d0:27:67:d8:22:5f:07:5e:f5:ed:e9:61:
         64:62:c4:1b:65:57:88:72:48:b2:5e:a8:61:7a:7b:b5:57:ea:
         c1:18:98:d7:aa:15:fd:2b:05:17:de:a2:94:cb:bb:06:31:b7:
         e5:ea:3b:ad:6b:69:fc:bd:67:a5:7c:c8:4c:13:9c:86:d9:17:
         65:06:3f:e8:1f:c2:c0:7f:b8:4d:44:e6:c9:5b:ab:52:0d:72:
         2a:a6:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:10 2025 by rpki-client