Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37372e302f32342d3234203d3e20323632323936.roa
File:                     3137372e38352e37372e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          hBG80XcJrwm29SXapry/d4uRw6dDDhWtv29xXFYBzjE=
Subject key identifier:   AC:AD:AF:A1:89:5C:C8:93:F3:A2:0F:EA:16:C1:8E:94:8C:E8:C5:19
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       5E12BE36F63B0585F198C8DE2FD4EE97808AE4FC
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37372e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:29 +0000
ROA not before:           Mon 31 Mar 2025 17:52:29 +0000
ROA not after:            Mon 30 Mar 2026 17:57:29 +0000
asID:                     262296
IP address blocks:        177.85.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:12:be:36:f6:3b:05:85:f1:98:c8:de:2f:d4:ee:97:80:8a:e4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:29 2025 GMT
            Not After : Mar 30 17:57:29 2026 GMT
        Subject: CN=ACADAFA1895CC893F3A20FEA16C18E948CE8C519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:00:4c:f7:e5:7f:32:1f:10:54:3a:1c:48:
                    2e:21:a3:32:25:28:cf:7a:1e:39:08:c0:02:ce:5d:
                    0d:96:6b:c8:b3:6a:e3:81:dd:8c:03:eb:fc:14:e7:
                    1a:da:a0:02:d4:c6:92:c8:ad:55:c4:81:12:ca:fc:
                    bd:1c:9e:e6:1f:d6:ac:6b:92:d9:95:52:61:0e:9b:
                    8e:a8:4a:c5:4d:aa:bb:ca:1c:e7:cf:82:b0:99:e0:
                    b8:d7:35:cd:b8:a9:cf:bf:39:61:8a:45:5f:c1:8c:
                    6b:0d:6d:44:41:df:c4:b2:74:af:11:64:48:b0:5f:
                    08:ce:96:c7:2f:b5:6f:4b:1b:78:6b:7d:47:fd:db:
                    c0:4e:c0:a7:af:cd:fa:c7:0b:ad:0a:05:07:0e:40:
                    9a:58:88:aa:1a:61:0d:85:98:00:64:4e:04:43:65:
                    d9:9b:05:88:fc:75:0f:18:59:61:d3:49:22:de:04:
                    da:f8:83:62:09:0f:9a:0e:38:6f:28:47:fe:fa:28:
                    6d:8e:9e:60:9d:0f:49:62:ea:0f:8e:da:a4:df:2f:
                    de:eb:a1:82:d5:14:4b:f1:07:b2:90:cd:5f:6e:08:
                    22:7f:38:1b:f9:da:62:e4:47:cd:b6:34:f9:99:f5:
                    c8:67:81:72:fe:14:84:bd:38:c1:fb:fa:7c:63:b8:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AD:AF:A1:89:5C:C8:93:F3:A2:0F:EA:16:C1:8E:94:8C:E8:C5:19
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37372e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:cc:5f:4c:ce:dd:16:e9:26:50:e6:c5:66:82:27:02:a8:8f:
         fb:12:02:cb:65:c2:db:41:12:7f:52:bd:da:e9:24:0c:4d:c5:
         80:be:c5:e0:63:8b:50:ce:3a:0a:cd:79:9d:0f:2c:eb:1c:b4:
         e6:cf:40:8c:a6:4a:0c:d6:6a:37:21:44:a0:32:ab:06:28:e3:
         87:b9:43:c2:37:e1:6b:e7:90:a4:15:02:82:a2:f7:23:04:be:
         dd:59:c6:7f:80:95:2b:ba:35:b0:91:69:18:b3:fe:75:29:cc:
         4c:ca:2a:cf:67:08:72:8c:0c:0e:12:07:c2:9f:b4:eb:b4:03:
         78:6f:33:9b:18:e0:7c:b2:cf:30:dc:71:c2:b7:50:d2:08:b7:
         8c:4b:23:71:87:7f:b7:e6:b5:30:89:09:8c:e2:b6:cb:51:06:
         a9:2e:32:ce:d4:1c:74:2f:7d:b1:dd:3b:4c:61:14:16:a8:c8:
         27:93:e1:a7:ff:0e:e1:75:be:a2:6c:55:45:8a:c1:04:1a:8c:
         67:a3:ca:39:90:23:e3:b3:ab:b4:a5:f3:06:20:09:23:c8:ab:
         51:b1:e5:9f:54:9c:0e:51:ac:92:72:2e:d7:8e:1e:45:a9:d7:
         01:a8:1b:c0:00:51:a9:d0:e8:be:5b:f4:25:d9:cd:17:40:99:
         cc:e8:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:51:17 2025 by rpki-client