Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa
File:                     3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (raw, json)
Hash identifier:          e3lF6O0/izSqcl2PK/nGJ0F7KicvIwfhh8Bq3/aSRyE=
Subject key identifier:   B7:F4:D1:E9:FB:8C:B7:B1:45:89:16:4A:DD:78:27:CD:A7:D9:9D:6D
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       5409D89CB348D9573DF54B18E4AA004FA57909D4
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa
Signing time:             Mon 16 Jun 2025 17:57:46 +0000
ROA not before:           Mon 16 Jun 2025 17:52:46 +0000
ROA not after:            Mon 15 Jun 2026 17:57:46 +0000
asID:                     53223
IP address blocks:        177.67.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 05:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:09:d8:9c:b3:48:d9:57:3d:f5:4b:18:e4:aa:00:4f:a5:79:09:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Jun 16 17:52:46 2025 GMT
            Not After : Jun 15 17:57:46 2026 GMT
        Subject: CN=B7F4D1E9FB8CB7B14589164ADD7827CDA7D99D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:05:d0:59:6d:61:ce:4b:17:1f:17:ab:2a:
                    79:8a:d9:e2:28:55:b1:3f:f9:89:7f:71:7f:26:a0:
                    24:e2:5c:72:d0:a9:5f:32:48:97:69:19:ec:7d:0f:
                    e1:b1:05:97:8a:b4:ad:5e:2b:41:34:72:b4:c9:b6:
                    2d:3d:69:57:7f:9f:b4:1d:4d:f0:00:00:0c:45:2b:
                    36:d7:82:df:15:d5:db:3b:b2:45:e5:0d:f1:14:3b:
                    54:dd:1f:45:b4:70:b1:70:a3:2c:79:d2:97:74:dc:
                    e6:b2:cc:67:3c:1c:62:f9:df:e6:5e:05:fe:18:b7:
                    1e:97:92:f1:57:53:d0:c1:25:06:70:5b:ff:08:ab:
                    29:05:45:df:59:64:07:61:6c:92:91:b2:fa:70:cd:
                    9a:ca:4d:c6:7e:f7:ca:b2:9b:06:62:8a:9d:50:7e:
                    a4:d0:3e:52:21:29:5b:b0:2b:c7:6c:fa:e0:35:49:
                    4a:59:16:b3:79:99:97:0a:ad:a1:4f:15:1e:fe:2f:
                    77:b7:76:71:38:57:10:cb:cf:79:bf:78:a1:a3:f6:
                    0a:da:67:76:ee:0f:ba:1c:95:3c:bb:75:a9:6d:4a:
                    9a:31:9f:fa:a8:af:d6:3f:02:9f:2a:c2:56:2f:44:
                    4d:73:71:c2:b0:af:cc:16:32:7d:a7:4a:1e:01:45:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F4:D1:E9:FB:8C:B7:B1:45:89:16:4A:DD:78:27:CD:A7:D9:9D:6D
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:69:e8:7a:a4:5e:86:e4:f9:44:ef:5a:55:63:0e:68:01:
         08:80:8b:a3:1d:af:c6:6d:5b:d7:93:00:d8:7c:5c:b7:b1:ff:
         57:03:b5:ff:78:52:ea:95:e2:93:46:1f:f2:55:e7:87:22:e3:
         6c:09:c0:4a:08:a2:73:60:74:5b:a8:07:25:b4:43:ab:58:85:
         e6:65:67:fc:c0:5a:bf:97:61:49:75:f4:bf:da:b8:b6:8d:d6:
         bb:a3:1d:2b:b3:04:57:0d:77:ee:52:03:4d:df:66:10:6f:d1:
         22:2b:b3:09:0c:f6:f6:9f:26:d5:27:36:06:dc:2a:68:97:80:
         50:54:d1:ca:d8:26:8f:b4:6a:f1:a1:13:8a:e7:25:ec:ce:b2:
         22:06:51:88:7b:7f:b1:0d:f5:8d:37:f6:4b:7c:b0:2c:16:2b:
         4c:e9:38:56:cb:e4:70:05:73:98:75:93:d8:4a:fa:93:8d:df:
         f4:59:eb:da:2a:9a:aa:97:bc:1f:f4:d0:12:6b:0b:f5:5a:70:
         98:29:54:ab:c2:13:2e:36:35:2e:9f:89:b2:03:64:85:c8:0a:
         c5:c1:83:27:bc:e1:84:d7:ed:55:ba:8e:b1:51:9b:2e:06:69:
         9a:9f:53:20:42:a9:42:32:95:fe:2b:c9:4a:07:6b:d3:be:0d:
         ae:b6:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:45:22 2025 by rpki-client