Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          NTbQS+WIFMi0lW6P2Maj26qrqo/UvqVvJRjPT+vs3ZM=
Subject key identifier:   EF:5A:25:17:2A:33:EB:F4:CF:FC:64:54:3C:82:29:14:93:3C:53:E0
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       7AB5D861CFA4B9CE99225E731E1F4C01716ADAAB
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:30 +0000
ROA not before:           Mon 31 Mar 2025 17:52:30 +0000
ROA not after:            Mon 30 Mar 2026 17:57:30 +0000
asID:                     262296
IP address blocks:        177.11.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b5:d8:61:cf:a4:b9:ce:99:22:5e:73:1e:1f:4c:01:71:6a:da:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:30 2025 GMT
            Not After : Mar 30 17:57:30 2026 GMT
        Subject: CN=EF5A25172A33EBF4CFFC64543C822914933C53E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:c8:db:e1:12:18:e8:f9:20:25:41:95:2a:
                    85:73:64:f2:13:c8:62:cb:69:f9:90:5c:09:e3:27:
                    10:ec:60:aa:3c:12:7b:34:de:f7:13:05:8e:7c:af:
                    a7:04:7f:2a:9d:85:43:be:a4:6f:cb:7d:93:4f:6b:
                    45:9b:8f:ad:1e:33:05:a1:25:19:3c:61:16:62:41:
                    00:b2:5c:b4:a2:88:23:6d:24:0b:c4:33:28:e5:6a:
                    c7:ba:1b:5d:49:ce:ff:3b:9e:c9:af:ae:e8:14:e9:
                    12:08:83:df:df:65:85:e1:e3:f7:73:7d:0a:da:4d:
                    55:55:95:11:33:c0:5b:cc:cb:d3:78:34:96:20:a2:
                    68:83:13:26:ee:14:d7:d5:16:b9:31:f1:32:f0:2c:
                    92:6b:2c:8b:24:10:a3:a3:53:85:85:d3:56:fa:e8:
                    b0:aa:66:49:c4:35:62:f4:48:2e:36:fa:63:86:8b:
                    c0:c8:cb:06:f3:a1:5c:39:25:dc:af:d5:3a:b1:e4:
                    b1:d6:a1:7e:74:9f:46:c2:cf:e7:d5:34:b2:3c:0f:
                    09:36:25:55:16:3e:17:7b:b5:43:18:e2:d8:db:85:
                    4c:8a:59:f3:b3:82:b3:1e:62:81:ed:19:5d:e3:05:
                    29:93:1c:3d:2a:83:87:fa:04:34:c6:2e:80:66:de:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5A:25:17:2A:33:EB:F4:CF:FC:64:54:3C:82:29:14:93:3C:53:E0
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:ae:63:3e:6b:00:a3:cf:fb:48:f3:28:91:e6:e3:4a:2d:ea:
         db:3b:83:7e:4d:b5:b1:87:52:b8:75:7b:c0:1b:f3:7b:c2:15:
         59:29:7d:17:97:4a:84:1b:f4:c1:fc:d3:79:e8:3b:58:1e:c6:
         ad:73:90:fc:85:fd:8d:b5:98:89:d8:4a:3a:a0:d6:ef:c2:ad:
         7c:78:02:d0:08:b0:3b:10:db:c9:98:fd:05:3b:2f:ad:a4:17:
         c8:a5:97:3c:8f:c0:57:a6:47:45:e7:bc:98:0f:8e:16:69:81:
         08:3e:14:d6:6f:b0:30:5f:1f:ef:10:ac:84:7c:de:b7:26:e8:
         5b:f7:5e:08:a4:4f:e7:a0:95:06:32:18:81:14:c0:c1:23:6d:
         cd:8e:c7:b2:a3:7c:c7:3c:ce:ac:26:e2:cb:04:05:12:8d:2b:
         51:f8:21:fe:2c:82:1b:72:64:aa:6a:6b:3a:d9:96:e1:36:45:
         35:e8:b0:88:ba:cb:40:f7:24:69:07:a1:df:21:b5:c2:35:10:
         d2:0b:fc:02:02:a5:db:8e:bd:3f:b4:e9:08:2e:bc:47:e8:ad:
         da:1d:81:1a:f2:f5:0a:7e:79:b5:23:21:09:a3:42:e9:59:11:
         c4:0a:da:09:29:a3:d0:ab:7c:0b:79:bb:cd:d4:82:ac:a6:d6:
         60:db:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:11:50 2025 by rpki-client