Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          NOuQ8IcDbyUONZVbHjJzA6tb375QJ4nv7GgFY+x1AKU=
Subject key identifier:   23:9D:6E:68:58:14:69:68:E9:31:D3:72:5C:32:01:83:7F:C0:E9:D4
Certificate issuer:       /CN=576471CF7577222B160C490BFEEA5C66CB21874F
Certificate serial:       0C54D6859872FD220E3855C17DD71CDE0E2354AC
Authority key identifier: 57:64:71:CF:75:77:22:2B:16:0C:49:0B:FE:EA:5C:66:CB:21:87:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa
Signing time:             Wed 04 Jun 2025 08:12:08 +0000
ROA not before:           Wed 04 Jun 2025 08:07:08 +0000
ROA not after:            Wed 03 Jun 2026 08:12:08 +0000
asID:                     61602
IP address blocks:        177.124.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:54:d6:85:98:72:fd:22:0e:38:55:c1:7d:d7:1c:de:0e:23:54:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576471CF7577222B160C490BFEEA5C66CB21874F
        Validity
            Not Before: Jun  4 08:07:08 2025 GMT
            Not After : Jun  3 08:12:08 2026 GMT
        Subject: CN=239D6E6858146968E931D3725C3201837FC0E9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:0e:9d:19:c3:39:0b:46:27:c0:56:2c:5f:
                    e4:64:15:a5:76:0e:cb:70:a4:2b:76:de:52:e6:dc:
                    e0:f9:d9:58:85:2e:81:1a:6c:cb:e6:b7:5b:1c:1d:
                    80:0e:b8:43:88:9d:d4:50:da:82:dc:7a:6d:6e:f1:
                    49:7c:a5:89:18:43:12:ed:9f:72:f6:72:14:65:f7:
                    5e:42:11:8e:ab:4e:7f:b7:2f:1b:43:45:73:1f:f9:
                    67:76:a6:e7:00:79:ec:80:50:af:d4:94:9b:ec:fc:
                    4e:87:3b:4b:1d:fa:de:61:a2:00:ab:b4:5a:c2:14:
                    3d:ef:77:11:ab:ba:53:56:82:78:06:4f:a8:e3:e6:
                    0c:2a:c1:24:e6:ab:7b:b5:8e:a9:c2:7f:6f:49:9a:
                    4d:ba:44:86:6d:c8:4a:e7:85:dc:52:be:a0:da:da:
                    44:01:c8:8b:9f:5d:fe:9f:fc:c0:21:df:13:74:ae:
                    62:dc:74:e3:3c:8a:4e:1b:6f:7e:49:14:2f:bd:2f:
                    71:b8:db:8d:0a:2c:8c:b2:8e:c8:cc:cc:37:d2:6f:
                    f2:b4:c7:de:79:38:eb:e8:f2:f1:00:cf:c1:d8:3b:
                    fb:26:ed:2e:af:1f:03:1d:0d:bd:52:e0:4c:e6:d4:
                    50:59:f4:27:b2:d1:87:dd:e4:41:a5:57:ed:b1:8e:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9D:6E:68:58:14:69:68:E9:31:D3:72:5C:32:01:83:7F:C0:E9:D4
            X509v3 Authority Key Identifier:
                keyid:57:64:71:CF:75:77:22:2B:16:0C:49:0B:FE:EA:5C:66:CB:21:87:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:08:19:4c:bd:eb:b2:19:dc:b4:51:2b:48:a3:ba:c1:e0:a9:
         01:86:54:65:4d:15:77:9a:80:f0:94:0e:74:fa:41:6d:d8:c0:
         4f:76:6b:da:ec:55:d4:79:da:4e:5d:0d:32:2c:8c:27:60:8f:
         64:e0:5d:d6:71:b5:d2:14:b1:c6:a0:4a:0b:20:c6:b2:5a:bc:
         d3:9a:7e:bd:a2:d6:4e:f3:99:0a:16:38:b4:bd:0b:5f:12:5e:
         67:37:54:70:1e:f0:e5:ae:b0:7f:8d:62:e6:ad:64:c8:85:55:
         f9:86:d1:c3:5b:33:ca:0b:a9:72:f3:79:dd:28:e4:69:db:f1:
         f1:09:2b:33:24:14:4b:57:c1:2a:e6:cb:91:6c:76:d1:27:61:
         5f:9f:0e:a2:a5:5b:00:60:bb:60:a0:12:76:d5:87:74:6a:53:
         29:fb:5d:3c:17:aa:61:bf:5a:09:f7:ca:10:97:f3:1c:22:ae:
         83:12:91:62:07:59:2d:7e:69:1d:35:2f:05:9b:ba:0d:32:1e:
         4a:17:dd:cb:74:31:86:e1:8b:19:5e:80:2c:74:5f:8e:17:f8:
         36:7e:4f:0a:e6:7f:8c:f2:68:36:91:30:1a:dd:ca:79:52:6e:
         50:3a:b1:fe:6d:a4:e3:93:8f:5c:16:84:2a:be:e3:5c:28:ca:
         a1:60:db:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:13:12 2025 by rpki-client