Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34352e302f32342d3234203d3e203532373936.roa
File:                     3137372e35322e34352e302f32342d3234203d3e203532373936.roa (raw, json)
Hash identifier:          ZGDiMWxSAnPCfpSuSRrivc6SnVVYs0c2VksGanOWt2Y=
Subject key identifier:   C1:A3:8B:4F:04:8F:1A:15:4A:08:6F:8D:84:E1:6B:BB:AF:37:A4:29
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       37A3625CDD1574DFD3AF57D89E2DC0E169C39C84
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34352e302f32342d3234203d3e203532373936.roa
Signing time:             Mon 04 Aug 2025 20:00:00 +0000
ROA not before:           Mon 04 Aug 2025 19:55:00 +0000
ROA not after:            Mon 03 Aug 2026 20:00:00 +0000
asID:                     52796
IP address blocks:        177.52.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
                          rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a3:62:5c:dd:15:74:df:d3:af:57:d8:9e:2d:c0:e1:69:c3:9c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Aug  4 19:55:00 2025 GMT
            Not After : Aug  3 20:00:00 2026 GMT
        Subject: CN=C1A38B4F048F1A154A086F8D84E16BBBAF37A429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:83:9a:cf:38:22:8c:15:37:e6:30:90:f3:
                    44:52:98:4c:a6:75:c2:a6:05:2a:b0:5f:55:34:d2:
                    e9:5c:87:19:43:4e:c9:a0:96:40:37:b3:bd:3e:79:
                    00:fe:84:8b:7f:6d:cf:c8:3d:0a:97:4d:83:e1:a2:
                    89:6d:ed:06:51:cd:53:3d:14:2c:6c:5a:a6:1c:0e:
                    3b:05:66:d3:17:1b:80:c1:7c:d2:07:cd:4b:a0:60:
                    94:ad:0f:28:98:d5:0c:54:85:ae:5d:41:38:fb:30:
                    8a:c2:12:e1:dd:b7:4b:14:cf:4f:63:f9:d8:ca:e7:
                    b1:c4:57:9e:1e:63:67:1a:a4:67:99:e7:b3:26:4a:
                    05:84:22:71:89:53:e4:46:b1:93:9f:8a:59:ba:c4:
                    01:01:a1:05:6c:9b:09:2a:2c:c2:61:1d:25:29:03:
                    45:ef:fa:0e:c7:77:31:69:7a:15:30:27:db:32:77:
                    e9:b1:f0:39:01:3a:dc:46:2d:86:aa:86:a8:0a:85:
                    4b:67:59:2b:fa:83:fa:ad:3e:06:f7:0c:58:94:e0:
                    90:e0:e7:c1:5a:00:4d:e2:69:e5:b0:73:7e:b7:ce:
                    10:e7:45:83:d2:cc:d6:c8:c1:c8:1c:8f:9b:1c:27:
                    d9:24:5c:b0:ad:8a:a9:6d:16:70:2a:90:46:5c:0b:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A3:8B:4F:04:8F:1A:15:4A:08:6F:8D:84:E1:6B:BB:AF:37:A4:29
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34352e302f32342d3234203d3e203532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:9b:60:2d:5d:da:fa:7b:08:8e:7c:b6:29:44:ca:e3:36:69:
         25:06:56:b4:ea:02:a9:eb:ad:71:d9:49:90:f7:ca:20:b0:4a:
         81:c1:aa:d9:49:5d:ee:3e:47:c4:a3:19:d0:85:2e:1f:21:91:
         cf:22:1d:a7:4b:66:6c:de:37:92:30:45:cb:9b:59:86:74:1a:
         a2:0d:18:09:b0:85:2b:fc:9a:bc:38:31:af:11:44:e5:07:4a:
         4a:67:34:14:ea:fb:84:08:2c:32:3b:2c:9e:5a:ef:b4:32:d6:
         13:65:89:dd:01:76:69:40:af:dc:0e:16:5e:a1:a3:19:c0:9c:
         bf:ca:89:ec:29:ff:4a:72:02:d5:b0:26:fc:83:f0:6b:3d:d4:
         b0:5b:8c:2a:55:ae:c1:73:38:1b:58:20:15:d9:28:2f:14:4d:
         b5:4e:0a:60:b0:15:95:5a:ec:98:7d:e1:a9:ac:90:60:01:05:
         32:f3:49:cc:e8:03:28:af:3c:3a:c5:13:b5:d2:7d:52:f2:9d:
         61:8b:bc:a7:27:b5:82:e0:d2:95:84:e1:7a:10:2f:e0:c9:37:
         c9:2a:bb:98:cb:6c:11:7d:72:42:4d:f8:9f:0b:ec:31:52:b1:
         d3:3e:6e:b6:be:c9:22:36:fd:3a:ad:68:c5:a9:30:ae:b3:db:
         9d:c0:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:51 2025 by rpki-client