Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132322e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          uIM6nXrx4o0f0VvKdCJ8xNflZo+n2DfVPjN9zZ3NbzE=
Subject key identifier:   5A:50:C1:31:53:4B:70:A6:A5:6C:17:16:22:40:FD:B8:35:06:CC:51
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       5C1FD007628470A5EA7850D404D0C135AB15E403
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:33 +0000
ROA not before:           Mon 31 Mar 2025 17:52:33 +0000
ROA not after:            Mon 30 Mar 2026 17:57:33 +0000
asID:                     262296
IP address blocks:        177.11.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1f:d0:07:62:84:70:a5:ea:78:50:d4:04:d0:c1:35:ab:15:e4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:33 2025 GMT
            Not After : Mar 30 17:57:33 2026 GMT
        Subject: CN=5A50C131534B70A6A56C17162240FDB83506CC51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6d:6b:e8:61:b5:6c:ee:39:0c:b5:bb:05:76:
                    04:13:8f:a4:7b:08:54:e8:75:9d:1d:6a:36:c0:e4:
                    0b:ad:6e:0e:db:7c:47:01:96:e7:d1:6f:98:a7:03:
                    c9:0f:59:16:5b:16:0b:ab:c1:4a:b9:89:7b:23:3b:
                    c6:bf:99:e2:67:5c:fa:28:cb:f3:fb:a0:b4:b6:62:
                    b5:35:8f:87:4c:b8:04:77:96:66:a1:fb:a4:56:a7:
                    a3:f0:83:73:54:a0:8f:0f:a9:02:8a:b9:63:54:d4:
                    93:5b:9e:26:2e:f5:eb:a4:72:d5:db:15:61:10:d4:
                    38:35:30:1a:cc:72:4f:62:14:ef:23:02:2c:21:e3:
                    b7:b6:26:2f:1c:cb:a8:71:c8:d7:48:1a:52:cc:56:
                    b1:10:4a:b6:db:10:a8:84:45:0b:34:4d:0d:ef:4f:
                    da:1c:d5:29:8d:8d:34:28:09:9b:b4:aa:b5:3a:d4:
                    47:30:e5:95:10:ab:ca:7d:74:d9:14:02:f8:d6:2a:
                    09:54:3d:19:41:f5:22:e9:9b:c9:a7:bf:1a:39:b2:
                    d3:8c:9f:5e:72:e4:cf:0a:ff:1b:e5:0f:d7:04:55:
                    ed:d6:c9:36:90:b4:62:9e:fd:2e:56:9c:4f:34:4a:
                    af:d2:21:3d:c5:65:f0:8b:cc:c9:25:2d:c7:0f:cb:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:C1:31:53:4B:70:A6:A5:6C:17:16:22:40:FD:B8:35:06:CC:51
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:d9:63:33:b2:74:f2:d1:ff:94:d3:d3:ed:86:82:1b:3a:
         ad:3b:69:d3:34:4d:8b:61:71:30:30:91:a5:ef:ce:9d:3c:e7:
         16:5c:dc:dd:c6:4c:b9:a0:e7:d7:b0:fd:1e:0a:2f:12:ce:d9:
         ac:2a:35:58:bd:a9:5d:36:7f:7a:7b:ec:93:38:ef:05:38:5c:
         3b:c0:e7:c4:84:5b:78:62:9f:13:10:90:90:03:8a:09:79:98:
         f9:dd:bb:06:34:94:bc:3f:f7:a7:30:57:f1:7a:ac:08:ff:08:
         4d:f9:d3:4b:1c:75:52:3f:40:88:ce:95:7b:b1:2a:ab:5b:60:
         bb:b6:79:29:34:13:be:7b:7c:9f:f1:a1:10:38:af:1c:ad:dd:
         9e:d0:91:41:3d:f2:44:40:e2:f2:93:7b:7f:f8:0c:35:58:1a:
         23:86:60:d4:cb:82:0d:52:70:c8:ad:aa:e9:74:49:00:78:81:
         c0:37:ab:4f:11:09:ac:a4:a2:50:8e:81:36:17:44:76:cb:3f:
         15:7f:9f:0d:0a:e8:ba:3d:bf:43:6e:a6:f9:d3:64:33:7d:67:
         cb:4c:03:7c:a1:4f:0d:0b:0b:15:0d:e7:01:7f:f3:a9:e2:f8:
         47:39:02:cd:b7:fa:91:57:e1:72:d5:b7:c3:96:fc:1f:6d:e2:
         bd:f5:85:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:27:58 2025 by rpki-client