Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34372e302f32342d3234203d3e203532373936.roa
File:                     3137372e35322e34372e302f32342d3234203d3e203532373936.roa (raw, json)
Hash identifier:          Xp2u2qJYCff1ip3P87quhanzUqnA0SBeflwFfEp8iH4=
Subject key identifier:   AD:27:CD:4B:D7:B9:8B:2D:DD:E7:E0:63:85:15:EC:CC:2C:B2:EC:82
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       040C7C1AE6F47775E208575E93F54E710C4DEAA0
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34372e302f32342d3234203d3e203532373936.roa
Signing time:             Mon 04 Aug 2025 20:00:00 +0000
ROA not before:           Mon 04 Aug 2025 19:55:00 +0000
ROA not after:            Mon 03 Aug 2026 20:00:00 +0000
asID:                     52796
IP address blocks:        177.52.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
                          rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0c:7c:1a:e6:f4:77:75:e2:08:57:5e:93:f5:4e:71:0c:4d:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Aug  4 19:55:00 2025 GMT
            Not After : Aug  3 20:00:00 2026 GMT
        Subject: CN=AD27CD4BD7B98B2DDDE7E0638515ECCC2CB2EC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:a8:14:a0:54:6a:4f:f8:78:15:8a:c0:58:
                    10:fc:8e:b5:09:97:1b:b1:2b:50:33:8a:ee:d2:cb:
                    b4:99:60:8c:8e:6a:58:54:83:63:cf:f4:d0:00:38:
                    54:4d:3a:d9:4b:bc:79:50:4d:4b:04:71:f1:24:99:
                    98:6d:f1:e6:c7:66:19:5b:01:65:46:13:92:10:57:
                    d9:21:f5:e6:1b:7c:4e:3a:6f:61:4e:a2:26:05:c4:
                    47:22:35:93:81:5e:97:fa:9e:e3:75:b0:8d:ea:24:
                    25:68:f9:d9:79:1f:1b:35:31:1d:32:90:fa:f6:a6:
                    73:5b:b4:13:a2:75:8d:55:43:1f:33:ba:47:31:fe:
                    09:a4:5c:eb:12:d1:aa:98:e1:8e:32:e3:66:7d:f9:
                    9a:60:26:e2:46:ac:75:f9:fd:7f:51:d0:7c:46:d3:
                    f8:db:6d:6e:39:a0:a8:1b:ff:53:05:49:36:39:cf:
                    08:2f:45:52:c8:f4:ec:2d:26:3c:21:01:2f:a1:62:
                    02:fa:2c:fc:e5:bd:d2:b3:4a:a9:ab:1f:05:ea:16:
                    04:88:2e:0a:a9:77:47:b1:99:a8:c3:89:4d:a5:20:
                    72:8b:d2:c9:84:48:10:34:c5:14:ad:c4:33:08:bc:
                    37:bb:d6:aa:e2:49:43:a3:5b:f3:19:15:77:7f:db:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:CD:4B:D7:B9:8B:2D:DD:E7:E0:63:85:15:EC:CC:2C:B2:EC:82
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/3137372e35322e34372e302f32342d3234203d3e203532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:72:36:eb:33:a4:e7:0d:5b:ac:ce:77:dd:a6:bf:a5:d6:be:
         4e:92:66:9e:b0:be:43:f2:69:fe:5f:dc:96:63:4c:3b:67:60:
         e0:37:40:2d:a0:19:f8:f2:95:1e:b9:e4:8f:66:ee:8b:d4:69:
         96:39:64:35:1b:12:fb:52:93:02:af:e6:2d:21:a2:07:61:cd:
         5b:55:a7:00:a0:9c:7a:00:15:e7:ef:ff:2a:60:3a:8d:3c:72:
         88:f2:01:e5:a8:26:b7:0c:10:06:c4:e1:24:39:9d:55:67:60:
         04:eb:89:47:f0:3a:58:84:a3:85:a9:b7:ee:c9:b0:3d:cc:ab:
         41:65:58:9a:68:9a:32:8f:98:bd:e4:2c:17:fc:fe:73:6a:43:
         8c:73:9d:c4:2a:99:6f:83:7a:26:12:8d:f2:7f:b8:ae:4d:e9:
         e1:69:50:da:9f:81:54:f3:7b:5e:7b:08:54:42:05:e5:3c:26:
         5f:9a:9b:2b:24:25:e9:df:a9:90:b7:a3:c5:74:49:72:11:04:
         16:09:fa:69:e0:a5:bc:69:47:5c:62:bc:dd:17:bd:75:6f:aa:
         fa:76:76:e5:af:02:e9:c2:f1:ca:b1:64:f0:cd:92:63:2a:98:
         ee:93:63:0c:b5:52:c9:99:15:99:b7:11:6d:52:f0:9c:e8:bb:
         3d:57:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:52:38 2025 by rpki-client