Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          3fkTl82wcrVuYzm3SO2BgSov6V8pEsgWLH7BrW+2DTU=
Subject key identifier:   7D:2F:93:F0:0B:21:FA:CA:4C:A4:1D:91:35:CC:3B:F9:90:4F:D6:48
Certificate issuer:       /CN=576471CF7577222B160C490BFEEA5C66CB21874F
Certificate serial:       01CC1F130A6ED064C0FC229BD79585872D51267D
Authority key identifier: 57:64:71:CF:75:77:22:2B:16:0C:49:0B:FE:EA:5C:66:CB:21:87:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa
Signing time:             Wed 04 Jun 2025 08:12:06 +0000
ROA not before:           Wed 04 Jun 2025 08:07:06 +0000
ROA not after:            Wed 03 Jun 2026 08:12:06 +0000
asID:                     61602
IP address blocks:        177.124.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cc:1f:13:0a:6e:d0:64:c0:fc:22:9b:d7:95:85:87:2d:51:26:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576471CF7577222B160C490BFEEA5C66CB21874F
        Validity
            Not Before: Jun  4 08:07:06 2025 GMT
            Not After : Jun  3 08:12:06 2026 GMT
        Subject: CN=7D2F93F00B21FACA4CA41D9135CC3BF9904FD648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:83:4f:a0:f3:4c:ac:1e:a2:5e:f1:18:b7:
                    8d:19:21:72:63:9e:d3:fd:23:0b:c0:4f:eb:81:51:
                    7b:18:41:8b:39:53:92:b1:b5:48:56:34:75:88:5a:
                    bf:38:ee:cb:fa:88:5c:47:c8:b2:7b:b9:fc:8d:12:
                    1d:5f:2a:36:6c:ec:10:30:cf:a5:48:28:2b:2c:74:
                    0f:6a:d1:50:50:30:47:00:b3:2e:98:ff:e5:f3:44:
                    75:0c:1b:5d:32:c2:5c:04:e3:2c:f7:26:4d:02:25:
                    fb:4b:17:38:2d:d5:1c:c8:8a:51:91:0a:fe:6a:55:
                    a2:d7:d5:a2:d9:6c:4e:bb:b7:3f:73:94:29:72:6d:
                    d4:54:98:43:0a:f9:73:dc:c5:86:6a:76:92:4b:d8:
                    7a:a2:d9:c5:87:82:84:9d:cc:8d:b6:ad:c7:9e:85:
                    7a:ab:16:02:d9:3f:f0:9d:55:31:4e:85:0d:79:53:
                    f7:6e:f3:51:92:2b:4b:f4:ed:54:f1:ee:c8:dd:58:
                    26:20:d3:16:f2:a5:1f:2f:83:64:99:ec:79:80:b5:
                    8f:57:66:28:29:a8:78:dc:17:3c:ae:5a:80:51:84:
                    1c:17:a9:d7:fe:63:4a:5d:33:e6:ab:36:d3:35:19:
                    7f:91:50:c9:5d:b2:ed:b5:ba:05:42:94:8e:84:c7:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:93:F0:0B:21:FA:CA:4C:A4:1D:91:35:CC:3B:F9:90:4F:D6:48
            X509v3 Authority Key Identifier:
                keyid:57:64:71:CF:75:77:22:2B:16:0C:49:0B:FE:EA:5C:66:CB:21:87:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:77:c3:d3:74:05:15:7d:22:78:98:59:85:bf:c9:ba:9d:
         b5:ab:56:9a:89:d9:19:1e:74:d8:90:ae:38:f2:60:cc:27:a9:
         99:25:48:2b:2b:66:19:64:1b:c1:24:1c:27:c6:19:98:91:76:
         ae:c0:be:33:93:06:c9:c6:4c:26:a3:5f:cc:31:f7:dd:6b:34:
         13:8c:8a:9a:78:ff:74:a3:3f:86:c7:64:16:ba:e8:05:af:37:
         09:b6:60:07:7a:d7:b9:c4:ac:b6:3e:5f:28:07:47:29:de:45:
         28:70:63:4b:28:5b:25:fe:31:a5:ec:cb:80:05:0e:5e:81:ca:
         f0:c2:ee:14:2b:71:24:26:12:c3:e8:7a:ee:34:96:2d:b2:bc:
         d1:6f:7a:09:76:3b:98:01:b7:51:e8:00:16:2c:40:ed:02:06:
         06:60:ce:60:d1:14:2a:19:24:a9:f9:20:34:f3:07:d3:82:d2:
         86:57:f8:df:82:67:30:4c:1e:f4:07:2e:5c:53:26:71:13:22:
         93:8d:d8:7f:18:5a:81:99:25:0b:23:30:e4:4b:53:5e:57:32:
         36:f7:bf:7e:ac:58:b4:25:5b:91:c2:56:86:e8:2a:ba:34:9c:
         84:52:5f:71:15:99:86:a1:21:8d:57:84:a8:74:92:00:61:7f:
         60:1c:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:37:41 2025 by rpki-client