Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137302e3234362e3134302e302f32322d3234203d3e203238323934.roa
File:                     3137302e3234362e3134302e302f32322d3234203d3e203238323934.roa (raw, json)
Hash identifier:          jvNErLLnkRUvidcNI/CDgFAnpD/rniyQY/Bmf5IWfxQ=
Subject key identifier:   8C:57:21:B9:75:B5:57:A1:AC:C7:6A:3E:80:EF:3C:24:EC:12:67:69
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       4ABABDFCB7EB4EB9F233E698D8599E61C0D338B4
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137302e3234362e3134302e302f32322d3234203d3e203238323934.roa
Signing time:             Thu 12 Jun 2025 11:59:37 +0000
ROA not before:           Thu 12 Jun 2025 11:54:37 +0000
ROA not after:            Thu 11 Jun 2026 11:59:37 +0000
asID:                     28294
IP address blocks:        170.246.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 03:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ba:bd:fc:b7:eb:4e:b9:f2:33:e6:98:d8:59:9e:61:c0:d3:38:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jun 12 11:54:37 2025 GMT
            Not After : Jun 11 11:59:37 2026 GMT
        Subject: CN=8C5721B975B557A1ACC76A3E80EF3C24EC126769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:2f:75:96:a0:a0:5a:9f:b4:6d:4e:fe:e3:
                    3d:c9:d5:91:76:5d:98:3f:84:a1:55:14:21:15:fd:
                    2f:d5:25:bc:0f:0c:78:c7:55:d4:38:b7:bb:fb:17:
                    a5:5f:28:66:6f:31:03:d3:cd:d4:8f:94:ed:9d:cb:
                    8d:ef:45:1f:56:1c:53:7f:a1:4d:af:07:cc:29:6f:
                    18:8c:43:56:7c:02:bd:34:a3:79:c5:be:90:56:1e:
                    b6:ff:0f:58:4d:dc:f0:e3:a7:21:b8:5a:ab:6c:f4:
                    3b:15:d8:61:bf:58:68:73:b3:a8:26:f4:10:dc:16:
                    97:4e:d1:1d:ef:c2:73:bb:8d:a2:37:fc:90:64:11:
                    7f:ca:6b:f3:2d:28:84:b4:ce:c8:53:87:d3:16:e2:
                    bd:14:6c:16:b3:7f:d3:9e:0e:ec:7c:a4:bf:b4:1b:
                    51:e3:88:06:09:be:36:73:36:52:4a:04:c8:8c:aa:
                    86:d4:f4:95:82:c1:61:43:e1:1b:98:6e:8c:c4:51:
                    9f:ca:67:3f:84:90:28:59:32:0e:78:64:5b:cb:c3:
                    60:bc:ca:8e:b1:58:6b:fd:0e:93:d7:f8:ad:a4:82:
                    8f:a8:0d:f5:5d:9c:e5:fb:d8:a6:a0:8e:f3:e4:fb:
                    f5:01:75:93:ce:97:82:2a:72:f2:9c:0f:e7:e5:48:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:57:21:B9:75:B5:57:A1:AC:C7:6A:3E:80:EF:3C:24:EC:12:67:69
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137302e3234362e3134302e302f32322d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:64:84:74:e8:43:d5:b9:12:35:e9:6f:c6:eb:e9:0e:fa:
         26:d4:39:25:ec:c8:1b:2d:a3:97:a2:03:4d:b0:4b:05:b4:2c:
         a6:c8:59:60:68:48:df:7d:9e:fd:9a:6f:ec:a7:74:12:e8:d6:
         c3:57:e5:51:65:a3:84:17:f1:6c:48:b3:fd:1d:86:ad:dd:fb:
         fd:d6:2c:c5:fd:ce:3f:29:65:c1:92:00:4f:46:8f:75:85:54:
         8d:60:1b:97:e0:93:f5:76:90:9f:13:ae:ad:23:30:92:d6:c2:
         a2:ed:27:89:56:bf:06:83:ee:c7:0b:0a:f4:bc:ff:1e:6c:fd:
         b5:80:06:2e:81:09:9b:7a:1b:3c:10:15:ca:dd:2b:7c:80:9b:
         0e:3d:71:a5:a1:dc:f6:50:fd:90:9b:3d:8f:f4:56:0d:53:5b:
         8c:2f:5e:f4:fe:d1:e2:fb:a0:2c:90:6d:3c:2f:f1:84:63:34:
         42:99:ca:d8:3f:79:1a:59:12:70:0f:3e:dd:a7:c5:22:c5:97:
         37:09:92:26:5d:4f:05:92:70:01:72:10:be:f3:02:40:e1:33:
         43:99:7b:5a:b6:c3:b9:f6:1b:86:8a:5f:78:65:f5:3c:96:fe:
         80:43:2b:d3:10:07:36:b9:e8:5f:fa:d3:07:47:d5:ad:35:b5:
         6b:aa:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:58:41 2025 by rpki-client