Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135362e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135362e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          OH3aeSnbxBla/r4umZneq4pC9cxN32SpYxty4x0u2RQ=
Subject key identifier:   1B:9E:95:98:72:FD:4E:B4:57:47:B8:9D:21:D2:F0:0C:FB:58:F8:D8
Certificate issuer:       /CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
Certificate serial:       5062F27DDD2F4BD6058FD177C2AF326B28FAA7F1
Authority key identifier: 2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135362e302f32342d3234203d3e203631363032.roa
Signing time:             Wed 11 Jun 2025 05:46:59 +0000
ROA not before:           Wed 11 Jun 2025 05:41:59 +0000
ROA not after:            Wed 10 Jun 2026 05:46:59 +0000
asID:                     61602
IP address blocks:        177.124.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 12:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:62:f2:7d:dd:2f:4b:d6:05:8f:d1:77:c2:af:32:6b:28:fa:a7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
        Validity
            Not Before: Jun 11 05:41:59 2025 GMT
            Not After : Jun 10 05:46:59 2026 GMT
        Subject: CN=1B9E959872FD4EB45747B89D21D2F00CFB58F8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:1f:4a:be:9a:ba:8f:a5:a8:43:cc:6f:d1:
                    bb:37:be:e0:82:d7:46:b5:c1:80:7d:c3:f8:e7:e5:
                    14:23:24:58:06:0c:b5:c1:62:46:a0:b8:49:b3:9f:
                    28:53:9e:5e:46:9e:cd:46:70:0f:dc:17:10:3c:6a:
                    78:9f:af:f4:65:ec:f8:37:51:92:91:00:d0:8b:68:
                    66:35:04:c2:7c:d2:a5:b8:a3:77:1e:b0:b4:3d:a8:
                    d0:dc:f1:bb:38:c8:a3:3d:01:30:e4:42:58:c7:a7:
                    69:0b:12:aa:59:56:ed:13:ce:31:97:b4:2c:2b:c1:
                    37:e2:dd:be:7d:3f:4b:e3:71:79:08:a7:a2:2c:55:
                    7a:2b:b6:c6:35:17:77:8d:8f:80:5d:9a:06:42:23:
                    a7:e6:ba:8f:98:b0:ef:f6:2a:27:d6:c7:d9:91:e4:
                    b7:77:d7:85:8c:e6:d4:33:99:d1:2e:6e:a0:db:f9:
                    07:a9:c0:f2:a3:b1:6d:93:2b:ea:db:65:6e:66:2a:
                    1d:b3:6a:f5:a1:da:39:56:5e:8b:7a:78:f9:aa:e4:
                    16:56:2d:70:8d:a6:b2:f1:d3:da:6c:84:d7:72:6a:
                    9e:dd:8b:c5:de:f2:dc:ed:5a:0c:f2:41:17:fd:9d:
                    39:6f:3e:6e:78:36:e5:60:e7:62:4e:4e:86:4a:72:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9E:95:98:72:FD:4E:B4:57:47:B8:9D:21:D2:F0:0C:FB:58:F8:D8
            X509v3 Authority Key Identifier:
                keyid:2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135362e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:92:f8:5c:9a:1a:b5:b6:d1:f0:83:8b:b2:84:fe:54:21:b4:
         b0:54:46:aa:34:90:64:97:aa:12:a1:63:0d:36:d6:91:c6:b8:
         ee:cc:ed:64:76:b6:27:5d:76:00:37:79:13:65:a1:5f:1c:0f:
         f2:5e:14:32:f7:4f:4b:ab:78:cc:cf:b2:94:33:d1:24:db:ad:
         58:96:f4:ee:3c:c9:66:39:30:99:46:5f:3e:38:ac:39:fe:f2:
         23:14:b8:33:79:fb:42:1e:db:da:0d:01:55:61:8c:fa:61:de:
         28:cd:09:cb:4f:d7:6d:71:d6:7e:7d:87:85:8f:84:a0:6b:a2:
         2e:ee:cb:12:f4:f3:94:09:cd:52:39:20:f7:0a:19:59:16:23:
         0f:7d:72:3c:20:0d:7e:4c:45:79:74:42:1a:e1:d1:16:8f:65:
         95:00:44:22:fb:61:25:0c:72:b8:50:4c:df:12:e8:82:92:13:
         17:f8:b0:ff:2e:99:49:a2:39:48:40:75:53:d2:9a:ba:2d:3b:
         31:9c:1f:7e:3c:89:d9:5a:89:d8:4b:4a:4a:7a:75:71:f1:2b:
         32:dd:11:55:77:b6:44:8d:8a:9b:19:06:d8:00:2d:df:0d:aa:
         23:48:a7:a9:8a:42:87:d5:d1:28:30:45:53:eb:f7:75:6f:d6:
         0b:c6:08:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:35:19 2025 by rpki-client