Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa
File:                     3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          q/AvzbSaNaOyUM2kP8iTR4vF99TrI5L54LVhzTBdHSE=
Subject key identifier:   82:2B:BF:6D:43:C7:02:75:8E:EC:31:7B:1F:E6:DA:58:5F:D5:BC:68
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       12E931872B7BF45734093E39451051E83B8DBD4B
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa
Signing time:             Wed 04 Jun 2025 17:08:48 +0000
ROA not before:           Wed 04 Jun 2025 17:03:48 +0000
ROA not after:            Wed 03 Jun 2026 17:08:48 +0000
asID:                     263656
IP address blocks:        177.52.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 17:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e9:31:87:2b:7b:f4:57:34:09:3e:39:45:10:51:e8:3b:8d:bd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Jun  4 17:03:48 2025 GMT
            Not After : Jun  3 17:08:48 2026 GMT
        Subject: CN=822BBF6D43C702758EEC317B1FE6DA585FD5BC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:2d:df:cf:e9:bc:95:36:90:8d:68:36:10:
                    00:25:19:b4:cb:37:4e:c6:c5:64:43:a9:f6:e9:0e:
                    f5:85:9e:7a:3a:ed:ee:8f:5a:47:fb:d1:45:c9:f7:
                    c9:1a:92:4a:65:88:18:c9:be:b7:57:70:4c:80:57:
                    67:e0:c4:1a:df:08:cf:36:d7:ab:b9:e7:b4:88:4a:
                    86:ed:88:fb:ab:6c:64:fa:90:66:da:61:7a:ef:24:
                    41:f8:a1:68:58:01:d3:03:14:01:c4:38:05:9e:fd:
                    50:88:b9:32:65:75:a4:83:c2:20:5d:f1:ce:83:55:
                    dd:7b:0b:59:31:4b:12:06:25:36:4e:7d:3e:57:0a:
                    50:c9:88:cd:1f:ce:5a:4f:b2:3a:6a:79:ff:4b:0c:
                    6b:13:54:eb:d8:a1:e8:91:e8:40:9d:65:3f:cc:8f:
                    49:6e:15:35:aa:47:f8:43:b0:03:7d:61:54:d7:c3:
                    a7:f9:00:53:86:8e:12:49:47:dd:d1:8f:36:09:62:
                    fa:3d:3e:9a:1f:a2:20:4d:b1:eb:87:94:5f:df:21:
                    f3:11:81:f1:28:eb:cc:3a:52:a8:66:cc:51:c6:19:
                    ae:84:38:e1:05:5d:f4:4c:af:8d:68:a0:76:cf:38:
                    63:31:5c:64:3e:23:79:77:4b:5e:40:59:b8:b5:cf:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2B:BF:6D:43:C7:02:75:8E:EC:31:7B:1F:E6:DA:58:5F:D5:BC:68
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:bd:7b:76:a3:4d:77:bd:f2:6d:4f:fe:13:88:56:ee:c7:91:
         d0:02:2d:61:e5:01:ce:42:05:89:61:14:f6:60:29:f2:b3:66:
         c1:ab:d1:99:91:f8:05:1b:58:ad:34:a7:ab:62:ba:25:91:5c:
         99:1a:71:11:98:6f:92:ee:c6:52:27:55:76:70:3c:51:0e:3b:
         a2:64:2a:80:9a:7d:17:4f:62:53:3b:01:cb:0f:ce:b8:1b:e9:
         27:eb:15:ba:2a:18:8f:0f:aa:ae:8a:d3:0d:6c:7d:4e:9c:9c:
         3c:46:cf:ff:27:2b:42:1c:43:3a:83:99:02:02:45:67:25:85:
         fd:17:14:b7:59:9c:ce:39:73:98:1d:c8:00:2b:3a:87:63:44:
         0b:37:56:89:79:a7:4a:56:3d:b6:eb:91:4e:ce:ae:f7:ff:99:
         38:13:a0:c8:28:a8:4d:93:79:8d:e3:8f:f5:b9:47:b2:e6:30:
         29:78:43:82:b3:09:f4:51:be:87:e5:4f:19:23:f9:6e:31:4d:
         1a:07:f6:d1:43:c3:0e:90:4e:b2:f9:a1:91:d0:3a:c3:f3:95:
         9a:0c:4d:64:95:6b:54:a9:ec:4d:99:2d:fe:b4:ab:82:2c:bb:
         62:ec:a5:44:32:6a:18:f4:f0:cd:19:a4:21:48:50:c8:9d:0e:
         dc:26:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:35:24 2025 by rpki-client