Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/3137372e382e3131322e302f32302d3332203d3e20323633303238.roa
File:                     3137372e382e3131322e302f32302d3332203d3e20323633303238.roa (raw, json)
Hash identifier:          URpKDjN5sa4FFG0pV5WWUZCmXg5WtzukNDo81geRQag=
Subject key identifier:   57:51:2F:7F:9E:E8:DE:3F:4D:11:08:33:87:C4:11:EA:E6:BE:B4:86
Certificate issuer:       /CN=BCB67FAEE70CAE205D5105EC24B4E2684D1791FE
Certificate serial:       4E0DC05507107430D08B7A323A2EBF5952D6BEA5
Authority key identifier: BC:B6:7F:AE:E7:0C:AE:20:5D:51:05:EC:24:B4:E2:68:4D:17:91:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/3137372e382e3131322e302f32302d3332203d3e20323633303238.roa
Signing time:             Thu 17 Apr 2025 13:13:02 +0000
ROA not before:           Thu 17 Apr 2025 13:08:02 +0000
ROA not after:            Thu 16 Apr 2026 13:13:02 +0000
asID:                     263028
IP address blocks:        177.8.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.crl
                          rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 10:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0d:c0:55:07:10:74:30:d0:8b:7a:32:3a:2e:bf:59:52:d6:be:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB67FAEE70CAE205D5105EC24B4E2684D1791FE
        Validity
            Not Before: Apr 17 13:08:02 2025 GMT
            Not After : Apr 16 13:13:02 2026 GMT
        Subject: CN=57512F7F9EE8DE3F4D11083387C411EAE6BEB486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:9b:3d:5d:4c:c7:08:c2:59:8f:71:6e:2a:
                    a8:6e:7e:e3:e3:84:f7:82:8c:4b:9a:88:91:c6:f9:
                    53:75:40:a5:30:7f:5b:6d:51:30:6c:f2:06:f1:7a:
                    3e:b0:17:e6:bd:ea:60:82:f4:c9:96:94:eb:13:a5:
                    79:f4:c4:b1:21:70:08:00:e5:8d:39:0a:4f:71:78:
                    9c:1c:5a:64:3a:b5:99:f1:7d:64:c0:0c:f5:bf:48:
                    31:2e:d0:37:6f:9f:33:c1:ef:c5:24:44:69:84:c2:
                    b4:02:24:84:0e:f1:8d:33:6b:7d:1f:88:7c:43:99:
                    ca:8d:e7:ad:47:d9:aa:e6:de:4d:d2:95:05:cf:10:
                    6d:a2:69:a8:ed:45:01:ba:ca:0a:b2:d3:4c:ef:f2:
                    a2:58:3a:b5:96:27:16:ce:5a:86:01:f9:a6:96:14:
                    f3:d0:0e:37:b0:04:9f:bd:c5:a8:2c:3d:bb:d2:ca:
                    8c:be:d8:11:52:0f:04:61:02:9d:ba:6c:d0:b4:57:
                    ba:47:e1:05:aa:6e:32:bb:94:29:dd:e7:5b:6d:28:
                    7f:ab:9a:79:55:48:e2:d1:f8:64:b2:34:64:18:83:
                    ba:b1:b9:4e:59:89:75:67:ff:55:db:a9:59:88:e0:
                    f6:2b:fa:b3:0c:eb:32:8e:95:c5:13:12:95:25:c5:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:51:2F:7F:9E:E8:DE:3F:4D:11:08:33:87:C4:11:EA:E6:BE:B4:86
            X509v3 Authority Key Identifier:
                keyid:BC:B6:7F:AE:E7:0C:AE:20:5D:51:05:EC:24:B4:E2:68:4D:17:91:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/3137372e382e3131322e302f32302d3332203d3e20323633303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:60:48:d0:2a:1a:f3:6b:88:48:d7:75:ac:98:4d:b2:f9:
         b7:8a:d8:7d:10:97:a2:38:56:67:bd:33:cc:df:17:0c:cf:5e:
         12:0c:fa:0a:db:50:37:b2:c1:69:38:fa:96:18:75:bb:21:88:
         c3:09:af:45:3b:be:c8:9d:a6:8b:2f:62:95:8b:2f:0b:35:82:
         1a:b4:ea:ce:e9:ef:ec:95:32:f1:43:51:17:9b:25:1f:b2:bd:
         38:07:f3:31:6d:a1:47:2c:d5:8f:65:48:ad:04:79:53:72:d3:
         b3:71:0f:ea:e6:a9:8a:b2:00:13:2a:3e:fd:3a:52:48:08:21:
         e3:da:f8:ff:e3:1d:5f:4a:db:18:b5:ac:b2:19:a5:58:6e:7a:
         a9:56:fa:05:75:ec:26:42:1a:97:67:83:e8:af:3a:5e:c1:b2:
         e6:20:9e:e4:d9:77:4c:93:ec:1e:21:46:d8:d7:88:4f:7e:fc:
         65:ed:1a:a4:40:f0:6d:92:fd:f7:89:9c:ec:42:b5:1f:24:5c:
         16:d0:4e:ea:eb:bd:1d:22:80:fa:a0:f2:d5:a5:79:02:05:a9:
         96:ed:cd:3c:21:55:b5:37:c6:96:cf:13:5c:ec:37:d1:e4:b6:
         f9:2a:8d:92:79:d4:05:af:c6:be:ca:d4:64:b6:b9:df:40:5d:
         38:66:7d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:09:08 2025 by rpki-client