Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3233203d3e203532383230.roa
File:                     3137372e35322e3137342e302f32332d3233203d3e203532383230.roa (raw, json)
Hash identifier:          IsGgvjE9mXyiybQjo5TXPBbvwT2iQ5t/eYX0pp22tjE=
Subject key identifier:   EA:81:C4:DF:FB:F2:27:0A:E4:3A:D9:3D:E7:D4:83:91:74:B3:07:32
Certificate issuer:       /CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
Certificate serial:       21F3A6B9879366E8561B2F40C252F8E9E55C44BB
Authority key identifier: 7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3233203d3e203532383230.roa
Signing time:             Wed 04 Sep 2024 13:10:04 +0000
ROA not before:           Wed 04 Sep 2024 13:05:04 +0000
ROA not after:            Wed 03 Sep 2025 13:10:04 +0000
asID:                     52820
IP address blocks:        177.52.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl
                          rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f3:a6:b9:87:93:66:e8:56:1b:2f:40:c2:52:f8:e9:e5:5c:44:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
        Validity
            Not Before: Sep  4 13:05:04 2024 GMT
            Not After : Sep  3 13:10:04 2025 GMT
        Subject: CN=EA81C4DFFBF2270AE43AD93DE7D4839174B30732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:33:e5:b2:e0:a6:8b:fe:1f:24:5a:31:41:
                    ba:44:fa:08:45:c2:1a:fe:75:84:51:45:78:45:e3:
                    e2:86:44:be:4c:f4:9e:22:ad:06:df:16:74:31:99:
                    6e:e5:39:cf:ca:8a:c3:f8:20:a2:54:b2:b9:58:c9:
                    2d:99:5c:4c:e3:45:87:c6:9f:98:3a:87:60:c9:08:
                    c3:c5:ab:a3:38:44:59:eb:bf:fb:a8:20:38:28:22:
                    55:f8:49:2a:d3:71:8d:dd:24:3b:1c:8d:f0:fc:11:
                    2a:fc:c6:6b:a4:96:dd:00:4a:9a:ce:10:fc:cb:98:
                    20:d7:97:d2:a1:be:97:3b:3e:72:78:7d:87:57:b0:
                    e6:8e:e0:29:fd:c9:94:d9:90:3e:52:61:f7:ca:40:
                    c9:10:da:59:52:bd:c4:82:53:d5:cf:9c:53:0c:70:
                    b6:6c:61:bc:18:30:42:e4:16:29:a8:f6:0e:8d:1a:
                    fb:75:d0:e6:64:85:d8:b6:5f:a6:a6:65:c4:b7:ed:
                    d8:73:e3:7b:fa:05:e5:fa:40:cb:e5:81:a2:9d:2d:
                    3a:df:27:c8:c6:6b:9f:3e:44:eb:9b:f8:b7:28:43:
                    48:68:79:d9:9d:94:d0:04:15:75:c2:5d:a8:e1:78:
                    12:db:f6:c5:01:10:7c:06:3a:cd:ad:29:a4:28:5a:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:81:C4:DF:FB:F2:27:0A:E4:3A:D9:3D:E7:D4:83:91:74:B3:07:32
            X509v3 Authority Key Identifier:
                keyid:7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3233203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:c5:f7:5b:a2:6d:94:da:d8:14:b4:9a:81:c6:12:58:70:
         6b:a7:bb:db:db:a9:cf:7f:38:d0:1a:13:ed:d2:1c:a6:c4:86:
         49:48:0d:be:87:25:0c:c6:3e:a9:ee:83:95:16:be:87:b6:e7:
         65:75:43:fa:f1:44:60:55:6f:d5:f0:34:96:4f:30:38:46:0b:
         5f:36:c1:6a:82:56:80:20:a8:ca:a2:91:5b:d1:2b:7c:b0:58:
         39:86:f7:d1:fa:28:cb:8e:04:d8:8a:98:10:f9:b1:80:b3:67:
         db:38:39:49:3a:08:04:18:25:d5:74:6b:60:fc:b7:23:4b:bf:
         03:36:0e:55:e0:3e:a9:ce:ba:ec:39:d3:71:b8:04:05:9e:85:
         84:8b:83:5e:17:c8:be:73:15:dc:94:f0:98:e7:06:14:93:85:
         bc:9d:a6:8b:b9:1c:49:df:d8:2c:a0:17:27:ad:1c:db:5a:e5:
         42:78:15:d4:45:74:39:c5:28:24:51:ba:99:54:35:01:f8:54:
         92:11:b7:70:4a:2d:3b:b8:9e:d4:7f:64:f9:9a:09:71:0f:e8:
         eb:af:70:44:fa:33:09:de:33:dd:88:1c:e0:54:c9:24:c8:2c:
         7c:36:c0:bc:a5:4a:60:c7:e2:c6:c1:93:54:a0:38:c7:ba:0b:
         46:5f:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:04 2025 by rpki-client