Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132312e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132312e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          ENheSw9Ho0nQtUKp/6Z+qo57ow1Antlz8oZi7EYFsCw=
Subject key identifier:   B8:6C:6D:C1:D8:71:74:E8:5B:0D:24:A0:2C:84:2C:24:33:6C:4E:BA
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       5765517D82E344FF38B5EF56F1DD45771A29411F
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132312e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:31 +0000
ROA not before:           Mon 31 Mar 2025 17:52:31 +0000
ROA not after:            Mon 30 Mar 2026 17:57:31 +0000
asID:                     262296
IP address blocks:        177.11.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:65:51:7d:82:e3:44:ff:38:b5:ef:56:f1:dd:45:77:1a:29:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:31 2025 GMT
            Not After : Mar 30 17:57:31 2026 GMT
        Subject: CN=B86C6DC1D87174E85B0D24A02C842C24336C4EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:4d:c0:3f:e1:9d:0f:e1:54:87:b5:9e:05:
                    32:e1:d8:35:08:4a:80:93:9f:60:48:69:d2:2b:5e:
                    ac:c9:74:b7:a1:01:15:55:f9:39:7e:b4:e6:e4:7b:
                    fb:7e:22:ae:f0:e8:31:72:65:e1:10:53:64:4a:9f:
                    41:df:91:6f:94:9a:48:ca:7e:e9:ab:0a:2d:5e:47:
                    f6:0e:84:d3:2a:8a:1f:e0:ac:ee:58:50:73:90:df:
                    19:f7:38:93:2d:fb:33:05:2c:01:43:0d:79:3d:f4:
                    7c:65:99:e7:1c:34:30:a3:f5:86:cb:1c:aa:03:1c:
                    86:c8:fe:12:40:17:13:31:64:28:7e:50:74:c6:6d:
                    e4:9d:44:76:89:1b:66:41:da:29:7c:ee:9f:f2:c1:
                    57:20:a1:61:ff:b8:db:7d:a2:7f:bf:03:23:c5:ed:
                    9e:32:bf:db:cf:34:1c:aa:30:03:c4:a2:16:19:b0:
                    2c:41:c2:a6:54:49:90:56:54:d0:ab:e7:0b:b1:ee:
                    09:4e:35:aa:4f:47:41:c6:b6:92:86:db:00:13:b9:
                    9c:64:b9:72:92:f4:21:a8:b4:bd:20:7b:a6:66:78:
                    80:ce:e4:dd:75:cb:97:da:bc:74:11:b9:f1:03:8a:
                    e0:b4:db:ab:6c:0e:e2:f3:b3:f4:ac:a0:06:b4:56:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6C:6D:C1:D8:71:74:E8:5B:0D:24:A0:2C:84:2C:24:33:6C:4E:BA
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132312e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:a8:5b:d5:84:72:26:01:4d:ff:50:5f:4b:b8:4b:ed:ff:
         cc:6c:d5:5a:50:a7:45:d3:24:52:53:62:2c:16:dc:1a:05:ed:
         b2:55:08:ea:c7:32:30:82:2d:df:16:ad:46:71:7e:2e:36:1c:
         f8:76:a4:ab:e6:d7:7f:12:07:42:b0:d2:79:e4:96:91:78:1f:
         0c:2d:b8:ea:32:31:30:e3:37:73:12:9e:10:c9:09:f6:ae:d2:
         4d:51:af:40:eb:3d:30:91:f7:fe:2f:72:6d:ac:47:1b:ff:40:
         eb:d1:ab:57:60:b4:3b:aa:ff:e3:25:4c:ae:93:3c:40:07:e5:
         f2:8f:e4:df:01:a0:12:76:95:02:3d:ea:85:d0:be:4d:f8:ca:
         92:c4:a4:92:e4:02:3e:5e:1e:99:04:2e:de:65:53:db:52:8b:
         3c:4e:77:bf:32:ce:ca:b0:af:a3:bf:6f:45:1d:13:44:7d:1e:
         bf:62:31:21:9a:72:e2:5a:53:78:82:28:ac:7b:69:0b:e2:43:
         98:92:02:d1:4e:03:57:8a:05:0b:3b:62:e2:d0:ed:56:eb:38:
         d3:1e:4c:34:0f:58:2a:d9:14:d4:41:f3:26:e0:5c:08:30:1b:
         af:9e:b4:75:f0:72:ac:e8:da:aa:e7:db:7d:10:5c:61:50:44:
         37:d9:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:06:14 2025 by rpki-client