Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32342d3234203d3e203532383230.roa
File:                     3137372e35322e3137342e302f32342d3234203d3e203532383230.roa (raw, json)
Hash identifier:          JWXzcsgqVnxrCyAT6WM5uodUCKPwShO3jGVXl5SPzOo=
Subject key identifier:   ED:C5:DB:CF:BB:6C:93:F9:5B:7B:85:F5:AB:B0:A6:12:5F:9E:B0:36
Certificate issuer:       /CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
Certificate serial:       0D362EE4D77C82EA30B1DA8F7CA531537666943F
Authority key identifier: 7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32342d3234203d3e203532383230.roa
Signing time:             Wed 04 Sep 2024 13:10:10 +0000
ROA not before:           Wed 04 Sep 2024 13:05:10 +0000
ROA not after:            Wed 03 Sep 2025 13:10:10 +0000
asID:                     52820
IP address blocks:        177.52.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl
                          rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:36:2e:e4:d7:7c:82:ea:30:b1:da:8f:7c:a5:31:53:76:66:94:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
        Validity
            Not Before: Sep  4 13:05:10 2024 GMT
            Not After : Sep  3 13:10:10 2025 GMT
        Subject: CN=EDC5DBCFBB6C93F95B7B85F5ABB0A6125F9EB036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:58:3c:ab:e9:cb:91:e4:79:88:54:d0:bd:
                    3e:5d:b1:75:bb:a9:e0:04:8c:40:b8:73:e1:55:9a:
                    98:0d:ca:0f:4d:a9:1a:65:2a:04:87:08:61:b4:e9:
                    80:e9:e9:7b:5e:84:32:16:db:30:48:7a:d9:0f:68:
                    0a:92:fb:5f:78:c4:59:2c:67:24:0f:0f:3e:87:00:
                    ef:9d:b7:4f:60:ab:44:c2:d1:73:98:a4:8c:77:c8:
                    34:f1:1b:06:26:fd:0c:d4:10:cf:26:21:91:5f:20:
                    8a:ca:4e:2d:c4:ed:cb:08:65:c8:f6:45:e6:a1:ad:
                    05:5b:96:84:83:62:97:fe:b1:11:fd:cb:70:1f:8a:
                    6c:53:22:e6:60:a7:10:11:e6:6e:7a:93:d0:1a:0e:
                    8f:0b:96:4f:2f:72:f0:39:94:89:4e:8e:29:ea:21:
                    5d:49:19:a1:ec:6b:3c:70:22:56:a3:ac:cc:b8:1f:
                    0e:ff:e4:d5:a3:3d:23:65:f2:0c:52:2e:85:1f:f2:
                    a8:78:31:1d:57:44:21:f5:7d:73:0c:2e:20:1a:1b:
                    47:03:f6:25:e2:df:52:d3:69:b0:ad:3f:be:64:fd:
                    12:b3:45:0d:5c:49:13:b9:af:f4:69:d9:66:a7:7a:
                    2b:52:86:1e:ce:38:4a:a0:45:a4:b2:4d:a8:e6:69:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C5:DB:CF:BB:6C:93:F9:5B:7B:85:F5:AB:B0:A6:12:5F:9E:B0:36
            X509v3 Authority Key Identifier:
                keyid:7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32342d3234203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:45:51:c2:d0:8b:7d:2e:a7:5c:20:80:4d:98:9d:74:bf:50:
         a2:b2:c0:c3:73:ff:6a:23:cd:0d:87:f1:54:44:70:0b:33:59:
         13:68:25:33:dc:6b:c8:6f:fd:9b:4d:bd:75:b5:06:a0:ff:cf:
         77:30:92:3d:38:e9:15:84:7f:74:f3:76:3f:69:28:bf:d0:0b:
         82:d0:bd:5d:12:c3:2c:69:a0:db:a9:73:ea:5e:99:b9:13:5f:
         d1:90:1b:b7:ff:71:53:97:46:56:30:b1:87:a6:1b:ae:ed:e3:
         01:fd:28:ce:9a:94:d3:e1:51:24:64:36:ff:1b:91:93:ef:d9:
         80:eb:fa:d7:ed:bc:8d:3e:6b:e3:14:88:94:9a:d7:e7:25:3e:
         1c:67:16:d2:c3:20:8e:3d:15:4e:9a:5c:07:8b:82:50:f1:6f:
         28:e5:c0:b8:4a:8b:a0:2e:c1:63:91:6d:6d:cb:47:53:14:f7:
         2e:39:62:19:45:b1:05:74:49:c5:6b:96:39:1c:87:b5:e4:03:
         ea:a6:15:d6:91:9f:52:01:73:54:b7:d7:5e:cc:51:cf:e7:c9:
         a0:78:65:f3:70:cc:c3:5a:3c:7f:46:88:6b:d5:cf:73:8f:de:
         ee:c7:8c:9e:b7:4e:03:ce:de:23:5e:18:00:ea:d1:41:7f:e3:
         4a:46:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:50 2025 by rpki-client