Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3233203d3e203532383230.roa
File:                     3137372e35322e3137342e302f32332d3233203d3e203532383230.roa (raw, json)
Hash identifier:          72o33H4x/45IzU2sMrI5ONp2QbHmQYx1SZH6GNknh0Y=
Subject key identifier:   81:DE:60:43:D8:FA:C5:36:F9:61:62:65:1E:06:FB:0C:93:14:ED:E4
Certificate issuer:       /CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
Certificate serial:       3A8E0F506746BEEC8B3A28042DEF186A5C6FAC36
Authority key identifier: 7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3233203d3e203532383230.roa
Signing time:             Wed 06 Aug 2025 13:59:41 +0000
ROA not before:           Wed 06 Aug 2025 13:54:41 +0000
ROA not after:            Wed 05 Aug 2026 13:59:41 +0000
asID:                     52820
IP address blocks:        177.52.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl
                          rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:0f:50:67:46:be:ec:8b:3a:28:04:2d:ef:18:6a:5c:6f:ac:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
        Validity
            Not Before: Aug  6 13:54:41 2025 GMT
            Not After : Aug  5 13:59:41 2026 GMT
        Subject: CN=81DE6043D8FAC536F96162651E06FB0C9314EDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:18:70:64:2e:ce:db:e3:9a:5b:09:20:71:
                    83:3d:99:86:69:5e:e5:3b:c0:f2:6f:98:cb:5e:6d:
                    9c:44:1a:17:b0:88:00:12:e7:3a:bc:34:dd:12:b7:
                    a0:52:28:cc:11:2d:4a:a8:4b:a7:83:78:2e:25:a2:
                    20:d1:3e:6b:ba:43:97:bb:f2:75:88:e2:aa:36:e0:
                    ee:68:92:df:0c:0f:29:79:57:b0:35:5d:81:01:ad:
                    cc:21:ae:cf:75:e9:33:97:33:e8:0a:29:ee:13:8e:
                    50:b0:6b:48:57:e1:21:7c:c2:4f:1b:23:b1:e2:51:
                    4e:93:2c:45:ea:7a:bc:d6:81:b2:3f:c4:0b:f8:5d:
                    43:7f:66:1e:99:67:9c:35:31:20:40:22:0d:6f:df:
                    e0:f9:9e:50:06:01:34:c8:98:e4:3d:9c:74:5e:2f:
                    2c:af:35:80:2b:e6:ff:23:2e:9b:0b:c1:cc:1d:c3:
                    69:b1:e2:4e:6e:4d:aa:c0:6b:65:81:6b:79:6e:3e:
                    86:c0:33:46:31:0c:c6:de:fb:fb:4f:4d:19:af:c8:
                    38:af:95:de:1b:03:00:48:48:36:51:f4:37:cd:41:
                    90:a4:26:fe:ae:d6:be:88:eb:8e:bb:1c:2e:3f:d2:
                    54:86:4f:1a:dc:c4:11:ac:d4:41:fb:14:2e:48:15:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:60:43:D8:FA:C5:36:F9:61:62:65:1E:06:FB:0C:93:14:ED:E4
            X509v3 Authority Key Identifier:
                keyid:7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3233203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:75:0c:5d:7f:df:86:4f:0d:f6:f5:61:cc:3b:32:9d:1a:
         51:4e:ad:34:fe:5a:fd:ac:bc:32:78:77:91:f0:5a:b1:b8:43:
         d8:16:3c:50:9b:3c:0c:3c:56:06:91:af:ee:ec:c6:cb:a5:e4:
         4e:90:89:6c:c7:61:0d:7b:d2:e9:42:d1:41:06:66:1d:e9:5e:
         04:50:6d:86:89:30:6b:1b:86:ef:89:fb:a3:cc:8a:28:4e:23:
         f1:dd:20:ad:74:f4:2d:8b:ad:8c:ff:2a:e4:78:68:e5:44:89:
         d6:cd:3a:d9:9d:52:d2:ca:e8:75:eb:60:bc:4a:3b:37:e0:41:
         01:fc:6a:3e:46:24:13:05:6d:ef:2d:60:1b:2b:a3:47:21:30:
         d2:46:63:eb:19:fc:3c:9f:d3:7c:71:ea:bb:f4:62:8e:e9:38:
         e4:4d:3d:7a:92:28:09:51:5a:c2:3b:f0:02:0e:1b:bd:2e:ff:
         27:d2:f7:39:96:ca:8e:24:b2:b1:47:4f:89:92:ec:68:37:da:
         66:75:73:a8:d2:ba:4b:31:58:0e:b5:93:78:8b:79:3d:0c:7b:
         72:9f:47:28:85:4f:85:20:7f:96:02:17:ae:3c:7c:1c:4b:96:
         57:4c:ea:81:16:9a:c4:a5:bb:b6:5c:20:14:7a:40:42:ed:21:
         76:a6:28:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:10:32 2025 by rpki-client