Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e38352e34342e302f32322d3232203d3e20323633323932.roa
File:                     3137372e38352e34342e302f32322d3232203d3e20323633323932.roa (raw, json)
Hash identifier:          DTPgFkQY9+g2R+KOoknQC93hrhwtRtGmE0BkTsswUmo=
Subject key identifier:   ED:F4:08:DF:62:98:B1:3F:AA:D5:5E:74:E8:1F:3A:89:A8:31:31:76
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       5BF755602954681AB7D9F71AE333E505C76DF46F
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e38352e34342e302f32322d3232203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:12 +0000
ROA not before:           Mon 16 Jun 2025 19:54:12 +0000
ROA not after:            Mon 15 Jun 2026 19:59:12 +0000
asID:                     263292
IP address blocks:        177.85.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f7:55:60:29:54:68:1a:b7:d9:f7:1a:e3:33:e5:05:c7:6d:f4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:12 2025 GMT
            Not After : Jun 15 19:59:12 2026 GMT
        Subject: CN=EDF408DF6298B13FAAD55E74E81F3A89A8313176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:df:63:c4:22:92:82:78:a3:0f:87:0d:a1:
                    e2:7a:92:92:13:98:cb:d6:40:c0:f9:29:42:95:01:
                    e2:db:31:01:9d:5b:24:a7:4a:84:a2:1c:de:10:9b:
                    7d:d5:64:7c:51:b5:2a:25:cd:ed:46:45:16:22:d8:
                    1e:f7:35:ce:2b:42:86:16:6c:eb:44:5f:3c:29:12:
                    66:ad:ef:73:2f:ad:f7:e7:e5:87:8e:22:94:61:b8:
                    28:86:5e:c9:67:5b:51:d5:6b:33:80:c0:8a:ef:39:
                    4c:58:a9:32:eb:f9:8e:02:c6:c9:9d:a3:3a:f9:ca:
                    50:4b:8b:c3:3d:46:b0:f7:67:54:2d:e9:69:ae:bb:
                    d8:2d:27:d1:d6:21:10:35:e3:ad:11:ff:c2:13:0d:
                    4f:db:79:46:50:a6:b4:25:e5:c6:fc:90:ca:6c:0d:
                    1c:86:e2:89:fe:fc:53:c7:7b:f5:cc:07:9d:ef:74:
                    08:52:92:44:dc:95:e0:6b:5e:33:bf:3e:70:02:08:
                    01:2c:ce:5f:0a:5f:6f:38:4b:16:f5:ab:3a:13:38:
                    c3:c1:72:83:a1:94:1a:f8:25:f3:1d:b6:4f:e1:1d:
                    f4:e7:02:48:e7:f6:3c:bc:88:ec:f5:04:ab:64:d6:
                    22:48:e8:7f:4e:33:62:fd:8b:22:39:95:83:91:57:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F4:08:DF:62:98:B1:3F:AA:D5:5E:74:E8:1F:3A:89:A8:31:31:76
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e38352e34342e302f32322d3232203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:44:24:db:ed:c4:20:46:3d:1e:81:ba:22:60:89:42:11:24:
         8a:47:db:d8:50:e7:c5:0f:27:ec:63:19:cc:62:e4:94:61:27:
         73:14:db:66:b0:68:f8:c1:c2:04:02:e3:b7:d1:7e:2b:a0:e0:
         66:8d:00:4e:65:2f:b1:ad:0a:00:8e:2f:94:cb:a2:53:73:99:
         d6:bb:2b:43:d5:a9:21:c8:7d:11:e2:57:69:30:c3:d0:bb:6c:
         78:81:92:9e:bd:7c:ae:44:f9:c1:68:5b:2c:f9:b2:39:28:d8:
         b9:2a:a6:6d:69:fe:f0:f6:98:88:ac:b7:f1:8d:65:12:e7:5e:
         70:21:0b:df:9e:a4:4d:df:78:66:e8:cd:69:ed:4e:47:aa:6d:
         56:d3:4d:33:bf:3f:90:5d:09:61:b1:37:a0:31:24:37:82:9e:
         84:c1:db:a7:5d:92:63:25:68:13:b9:13:79:41:cd:42:79:64:
         c6:93:cd:00:b9:af:4e:15:56:1d:10:a4:49:51:71:3c:4c:b1:
         8f:ac:f1:ab:81:63:35:de:e2:99:65:83:1b:ea:d9:69:19:c8:
         74:a5:c8:73:3f:89:43:7c:6b:20:d3:9c:7e:bb:f3:8e:13:e2:
         bb:34:5c:7c:19:24:96:c8:c1:f6:c2:c4:e8:ef:11:cb:95:90:
         6e:e9:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:53:16 2025 by rpki-client