Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3137372e38352e3130342e302f32322d3332203d3e203532373431.roa
File:                     3137372e38352e3130342e302f32322d3332203d3e203532373431.roa (raw, json)
Hash identifier:          8TtzlX89UWqV5EddOBtGyJ9RSbS92sWKEvPz9w5ZfhI=
Subject key identifier:   3F:31:B1:A3:56:53:C2:D7:4C:85:B9:23:41:D4:DA:0D:36:46:44:11
Certificate issuer:       /CN=9525905700962482C0F4F6E9E0D71074880AC7C5
Certificate serial:       2AFFD94800E2291AD98EC6593E5372321DE11EA2
Authority key identifier: 95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3137372e38352e3130342e302f32322d3332203d3e203532373431.roa
Signing time:             Fri 13 Jun 2025 16:35:43 +0000
ROA not before:           Fri 13 Jun 2025 16:30:43 +0000
ROA not after:            Fri 12 Jun 2026 16:35:43 +0000
asID:                     52741
IP address blocks:        177.85.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl
                          rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 20:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ff:d9:48:00:e2:29:1a:d9:8e:c6:59:3e:53:72:32:1d:e1:1e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9525905700962482C0F4F6E9E0D71074880AC7C5
        Validity
            Not Before: Jun 13 16:30:43 2025 GMT
            Not After : Jun 12 16:35:43 2026 GMT
        Subject: CN=3F31B1A35653C2D74C85B92341D4DA0D36464411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:6e:91:1a:4f:52:a5:ee:d4:4b:74:66:c5:
                    04:10:ac:93:05:36:f1:27:35:bc:13:51:f2:1f:b3:
                    6c:2e:a1:83:68:3b:64:e3:b9:ec:27:b9:46:15:e9:
                    69:89:88:ea:ef:8c:9f:a8:c1:2b:07:ac:c0:0b:e5:
                    3e:98:84:53:3d:b3:49:19:9c:53:2a:48:1c:ce:b0:
                    0f:23:ad:cd:cf:06:4a:30:44:5c:39:42:99:eb:80:
                    d5:be:02:5e:56:7b:66:1e:5d:3b:21:97:bd:68:93:
                    64:82:19:92:06:03:a8:75:6e:70:1d:e2:8a:85:55:
                    eb:c1:2d:aa:32:e2:a4:e5:22:42:02:06:c5:a7:c6:
                    da:d0:b1:5b:1d:00:7a:e2:75:14:70:a8:98:8c:06:
                    8d:e3:00:b3:8a:b4:33:cc:c1:7d:65:02:d4:27:e8:
                    57:19:80:61:e0:18:4a:72:68:d7:c3:b4:b5:96:b7:
                    01:1b:9a:b5:e3:22:14:f7:32:2d:d7:1b:5c:49:a3:
                    d8:2c:a5:ed:fd:4b:a8:e9:55:2c:33:c6:ef:f2:f5:
                    b1:90:2c:66:dc:22:f6:92:d7:f1:b3:1a:4f:37:77:
                    8c:5c:ae:7c:0d:ce:ed:e3:76:cc:9e:b0:b9:55:fc:
                    2d:84:cd:b3:f4:09:da:a7:1c:b8:c8:6a:9f:19:e1:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:31:B1:A3:56:53:C2:D7:4C:85:B9:23:41:D4:DA:0D:36:46:44:11
            X509v3 Authority Key Identifier:
                keyid:95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3137372e38352e3130342e302f32322d3332203d3e203532373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:12:39:be:6b:f0:ad:28:f5:82:3e:6c:3a:d5:19:a6:32:58:
         d8:27:71:7b:25:a2:cb:d7:71:34:09:65:7a:fa:f2:31:fc:0e:
         b7:a9:12:1e:1d:13:ca:9b:67:59:81:ea:7f:18:32:15:f1:fd:
         16:71:70:dd:3c:bf:d1:36:63:47:21:82:28:cc:9e:26:4b:a7:
         6e:d3:dc:43:c4:ac:b4:df:6c:d5:d4:06:06:6e:50:83:9e:fb:
         54:5d:30:85:23:b4:7b:91:24:7f:b2:d0:31:c1:7f:4a:0a:49:
         80:45:09:ca:7f:df:ea:c9:db:d0:df:80:a5:ee:ad:95:13:c1:
         4e:dd:03:a3:41:84:7e:17:de:61:09:cc:81:08:5d:34:d6:e0:
         68:5a:bc:45:b9:73:8d:91:8b:bb:9b:f6:a3:3f:33:4a:a4:ad:
         8a:38:35:d3:f5:bc:95:07:8d:e9:cb:6f:6c:e0:28:f5:0f:43:
         a9:1e:4c:4d:d5:15:29:96:7f:f4:c7:48:09:f1:38:73:d3:e0:
         65:f4:76:23:92:2a:cf:11:b3:3d:ac:9f:50:19:30:49:ef:57:
         ae:a3:ed:c2:f8:c3:0c:a9:4a:5d:cd:d5:36:fe:51:42:11:2f:
         a2:2c:1b:3b:42:a4:68:8f:b5:31:f3:fb:31:54:38:1e:e1:ee:
         67:51:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:33:17 2025 by rpki-client