Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34362e302f32342d3234203d3e203532373936.roa
File:                     3137372e35322e34362e302f32342d3234203d3e203532373936.roa (raw, json)
Hash identifier:          pI9tTYU30K+di3HL9t6xuL+sKaArxMKOT4n971nvxAo=
Subject key identifier:   A5:6E:DC:D8:90:4E:C8:07:49:70:75:6D:CA:9C:62:93:F7:56:BA:1B
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       1A631C7EE984E784A36FB75229A3EA1521167F4A
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34362e302f32342d3234203d3e203532373936.roa
Signing time:             Mon 04 Aug 2025 20:00:00 +0000
ROA not before:           Mon 04 Aug 2025 19:55:00 +0000
ROA not after:            Mon 03 Aug 2026 20:00:00 +0000
asID:                     52796
IP address blocks:        177.52.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
                          rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:63:1c:7e:e9:84:e7:84:a3:6f:b7:52:29:a3:ea:15:21:16:7f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Aug  4 19:55:00 2025 GMT
            Not After : Aug  3 20:00:00 2026 GMT
        Subject: CN=A56EDCD8904EC8074970756DCA9C6293F756BA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:79:9c:bc:67:30:9a:79:8c:8b:64:06:7c:
                    a0:a7:ef:4d:0e:12:27:4c:b7:16:3b:af:52:b2:37:
                    34:7d:c5:2b:03:77:67:cc:8b:57:c7:69:25:40:40:
                    c3:8b:4c:12:0a:76:09:f4:a4:d2:db:b1:10:32:ea:
                    cd:38:86:b2:4a:d5:89:91:de:37:e1:de:85:b0:89:
                    f5:b8:79:9c:a7:c2:a6:c4:b6:b0:54:67:27:41:d5:
                    d4:58:7d:29:7d:7f:9c:f3:a4:89:4d:15:60:b8:00:
                    b8:81:57:1f:93:d2:a1:0a:c9:d3:01:87:9f:4c:2c:
                    df:59:51:20:b1:2c:d2:48:80:ac:13:a2:87:f6:5d:
                    cb:c8:70:8e:49:d4:ec:72:0c:72:e5:67:f3:a4:b7:
                    0c:da:f1:5f:12:72:f0:c3:51:f8:63:98:a7:c4:3a:
                    a1:9c:fc:e7:c0:5e:78:4f:2a:99:2e:04:7c:31:20:
                    bc:92:42:c2:21:3a:70:38:0e:97:3d:55:93:e8:42:
                    c2:4d:b7:5a:71:b2:9a:06:03:9a:5c:9b:73:92:45:
                    fd:64:3c:11:c0:75:cd:98:19:af:c3:19:59:61:67:
                    59:f0:2d:65:34:2b:ac:61:81:7e:1b:69:5a:c5:36:
                    03:6f:43:00:1b:19:35:50:f9:15:8b:e1:5d:84:5e:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6E:DC:D8:90:4E:C8:07:49:70:75:6D:CA:9C:62:93:F7:56:BA:1B
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34362e302f32342d3234203d3e203532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:07:20:ce:01:b5:65:03:da:26:94:9e:32:95:5e:16:dd:ff:
         cd:ee:90:26:5c:2e:c3:10:ec:da:6e:65:f8:3c:e6:bf:aa:58:
         c4:75:01:92:37:1b:55:65:8f:3b:7b:fd:68:be:b5:f4:e8:0d:
         ce:10:3c:b6:14:6c:fa:cf:c6:12:d4:dc:c9:60:57:d3:75:5c:
         c6:9b:c6:6e:a6:78:f2:8e:00:01:2e:30:6b:94:5d:f1:e6:82:
         30:3e:b8:42:cc:22:09:d2:ea:53:08:dc:2b:a3:80:5f:b9:6b:
         75:73:49:09:bc:59:d1:72:86:dc:24:21:16:9e:64:27:d2:d5:
         ef:f1:46:1b:0a:cc:7b:47:03:11:a8:52:01:55:74:1e:04:09:
         e3:67:49:e0:58:90:ff:37:e7:54:02:a3:39:b9:19:58:4b:15:
         82:22:b1:4e:bb:39:ae:8b:e7:58:bb:26:5e:f6:34:b9:bd:f6:
         58:33:f3:c1:ae:05:0a:11:9d:3c:d4:c7:7e:4f:2e:c9:50:e6:
         46:eb:1d:86:68:54:01:fb:26:19:bc:75:5d:2e:0d:92:e0:04:
         e3:f8:f5:f7:88:89:f5:39:6e:a3:d3:50:40:b1:dc:52:4b:b6:
         29:f4:f4:a6:51:0b:fb:7a:df:09:6a:a9:1b:27:b1:e4:30:3c:
         80:4f:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:40:12 2025 by rpki-client