Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa
File:                     3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa (raw, json)
Hash identifier:          WAKTZENyc+SXTjS17ENHCayGO2lN3xVXsJCR6n3fjtA=
Subject key identifier:   DC:21:2D:41:1C:45:68:30:06:31:C7:73:E5:31:BE:08:D9:69:E9:76
Certificate issuer:       /CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
Certificate serial:       4C91B613A5A2219548A58644537DB585B31B8A0F
Authority key identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa
Signing time:             Thu 06 Mar 2025 13:07:47 +0000
ROA not before:           Thu 06 Mar 2025 13:02:47 +0000
ROA not after:            Thu 05 Mar 2026 13:07:47 +0000
asID:                     271002
IP address blocks:        177.223.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl
                          rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:91:b6:13:a5:a2:21:95:48:a5:86:44:53:7d:b5:85:b3:1b:8a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
        Validity
            Not Before: Mar  6 13:02:47 2025 GMT
            Not After : Mar  5 13:07:47 2026 GMT
        Subject: CN=DC212D411C4568300631C773E531BE08D969E976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:46:00:89:79:53:f8:92:38:11:e9:04:32:
                    e1:57:c8:c4:bb:4d:1e:f5:b8:f0:ca:8c:45:de:7c:
                    62:a0:73:98:0c:e6:e9:ed:6e:dd:cd:5d:8d:34:fe:
                    3f:6f:ab:50:68:5c:cb:7b:c6:cd:5a:54:fa:3b:fd:
                    16:2b:76:4a:f8:15:77:f0:0e:3e:82:29:f5:1c:c7:
                    62:96:6d:c7:33:b8:7f:6e:d8:36:9b:20:70:49:b1:
                    61:f1:f6:3f:b2:8e:9d:cf:9d:dc:43:4a:c1:28:72:
                    c7:c4:01:f0:19:50:02:5c:da:3c:0a:af:e1:4c:12:
                    89:6d:b1:60:33:6c:2c:ee:82:08:b3:ab:09:2b:80:
                    0d:bd:c3:19:41:38:7f:0a:a2:82:15:05:4b:2c:80:
                    b7:da:cc:eb:41:ee:1b:b3:d7:71:39:ce:d3:4a:d5:
                    c2:23:bc:dd:2c:61:96:b5:ce:89:96:35:b5:b0:73:
                    9d:98:b7:f1:79:f2:f8:39:3a:b0:13:2e:80:cf:b6:
                    d4:51:a2:60:46:27:e5:9a:ac:33:f2:3e:f5:6b:3b:
                    9d:d4:ee:6f:8f:9d:f4:cb:eb:cb:42:2d:44:c6:f3:
                    24:a9:a0:9a:a8:38:99:b4:f9:86:0e:44:7a:f5:0c:
                    20:07:ad:20:d2:7d:95:4d:be:50:51:32:75:0c:16:
                    97:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:21:2D:41:1C:45:68:30:06:31:C7:73:E5:31:BE:08:D9:69:E9:76
            X509v3 Authority Key Identifier:
                keyid:16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:4e:7b:43:f4:50:26:c7:c1:cd:f9:c0:7c:bb:98:00:5d:44:
         52:cf:00:6b:08:69:29:be:b9:cc:9a:6b:8d:0d:c5:53:24:89:
         9f:02:d4:fa:95:cb:6e:d6:99:1a:f6:b8:7f:fc:48:82:dd:d9:
         f2:30:76:56:bd:49:ce:86:f0:25:da:0b:3f:8b:6c:16:a4:8c:
         07:64:a4:52:ce:47:5e:5f:46:57:6f:99:c6:7c:c8:c7:4a:f0:
         87:66:a4:5d:8b:c3:5f:f7:2f:2d:0c:60:e5:08:76:5a:da:26:
         d4:d2:b0:5c:18:96:36:c0:f2:e9:07:71:0d:9c:cf:41:93:a8:
         6c:6b:ea:8b:3e:8e:19:e5:e7:29:d9:9c:66:5a:e0:f3:7d:2f:
         3d:2d:39:93:9c:e6:4c:4a:83:31:43:f1:73:6e:75:2f:61:ba:
         eb:92:c7:49:7b:ac:48:3c:2c:d2:38:be:5f:19:7e:04:3c:10:
         5a:6f:01:4c:84:7e:61:44:b6:8d:8c:77:f6:f7:cc:be:3f:92:
         1a:5e:84:db:a1:c8:ec:d8:59:35:7b:db:84:db:dc:70:b7:16:
         3e:11:48:2f:60:72:21:33:b6:63:1c:09:23:ad:5b:89:10:79:
         de:f3:12:2a:b7:ff:9a:36:51:b1:8a:b6:72:2f:c8:8c:55:9f:
         75:9a:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:56:32 2025 by rpki-client