Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e32312e302f32342d3234203d3e203533323339.roa
File:                     3137372e32302e32312e302f32342d3234203d3e203533323339.roa (raw, json)
Hash identifier:          nLqPzVZENGix+oMlTiwUSURDBaV4YfR1CFujq+yqCzw=
Subject key identifier:   5C:F2:5D:2E:25:32:52:D5:B7:75:E7:02:B6:3D:E0:50:70:4C:61:18
Certificate issuer:       /CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
Certificate serial:       2CBC2662EDD127D36CD361085395DD41A426E8B4
Authority key identifier: 0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e32312e302f32342d3234203d3e203533323339.roa
Signing time:             Fri 08 Aug 2025 19:04:49 +0000
ROA not before:           Fri 08 Aug 2025 18:59:49 +0000
ROA not after:            Fri 07 Aug 2026 19:04:49 +0000
asID:                     53239
IP address blocks:        177.20.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl
                          rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 08:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bc:26:62:ed:d1:27:d3:6c:d3:61:08:53:95:dd:41:a4:26:e8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
        Validity
            Not Before: Aug  8 18:59:49 2025 GMT
            Not After : Aug  7 19:04:49 2026 GMT
        Subject: CN=5CF25D2E253252D5B775E702B63DE050704C6118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:47:7b:4c:5e:16:c4:71:44:5a:07:3d:73:
                    f8:ee:d4:30:4f:30:c0:ed:92:38:ad:c6:bf:ff:cf:
                    fc:7c:2c:c6:e6:f4:8c:f9:f1:ea:2e:f7:01:38:9f:
                    46:c8:28:77:63:3c:11:f4:55:ee:26:cb:66:af:2a:
                    3e:68:0a:58:c5:84:86:13:9f:44:29:ff:44:18:5d:
                    01:bb:2d:81:37:ac:ce:1d:48:1d:11:b5:d0:f0:6f:
                    45:f1:4b:2a:93:a5:bd:01:24:15:7b:75:34:c1:a7:
                    4d:1c:ad:a6:b5:20:f0:af:fc:9e:f3:03:78:a6:7b:
                    d7:f5:0b:82:51:d1:b7:02:8e:7f:5c:7f:66:4e:6f:
                    25:cd:19:81:19:2f:b0:83:a1:71:20:9a:dd:62:4b:
                    dc:ef:3a:38:31:b8:27:6d:18:5e:73:a6:e7:26:84:
                    20:78:19:f3:ef:37:e5:72:fb:c5:aa:17:d2:71:1b:
                    08:ec:ab:7b:c7:0e:61:41:38:5b:c4:d9:c5:73:8e:
                    43:ce:8e:71:46:94:d4:85:6a:4c:55:c7:1a:c1:0a:
                    2c:cb:4c:3c:27:24:1d:e1:eb:ed:0f:a8:fc:b9:2a:
                    65:2f:59:cb:c1:b6:ca:e7:fa:7d:57:f2:31:67:e4:
                    8b:dc:c9:12:fc:a2:28:25:43:3c:7e:fc:be:f3:fb:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F2:5D:2E:25:32:52:D5:B7:75:E7:02:B6:3D:E0:50:70:4C:61:18
            X509v3 Authority Key Identifier:
                keyid:0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e32312e302f32342d3234203d3e203533323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:3c:3d:f9:37:c2:9c:b5:38:0e:68:87:8d:40:f4:c6:8e:
         b3:90:82:44:c7:32:36:ce:7a:48:33:85:f9:03:bb:31:15:73:
         43:a4:ad:43:64:c7:bc:e7:e3:44:7a:31:e0:c5:63:0f:24:6a:
         13:46:cb:79:2e:9b:3a:f9:b4:ce:63:b4:9b:e1:ef:fc:58:31:
         0e:6e:fe:d3:58:7d:65:1a:5e:3a:54:5b:6a:16:4d:ce:d6:90:
         7f:62:d1:5a:61:b3:71:53:6d:41:0f:50:3c:7b:c3:e9:01:98:
         3b:d9:18:ae:35:01:46:77:dd:dc:14:9c:ec:c7:94:9f:f5:3e:
         82:6e:bf:52:80:c6:f3:2e:4c:a2:f0:db:17:71:db:de:ac:f3:
         c1:ac:d9:45:be:07:6b:59:27:99:6d:6b:f6:32:31:00:2b:79:
         39:79:c2:8a:e9:75:04:62:4c:dc:2f:21:80:89:63:3d:eb:3d:
         a7:f2:bd:40:64:92:5f:c6:c4:a2:52:e3:9e:4e:1a:3d:ae:ca:
         fa:6f:15:3c:31:70:c9:2e:b4:70:11:d2:f6:03:4d:8e:62:49:
         c5:a9:33:34:33:88:31:4b:bc:70:4c:c5:8b:25:94:d2:b1:52:
         d3:d9:70:5a:17:bb:f9:58:02:4e:a0:26:e9:3d:4e:96:8e:37:
         56:ec:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:36:05 2025 by rpki-client