Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa
File:                     3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          DKOUa3SjaI+u0GLvaIP+Oqed0jGnhFUHLD0IjZcDpqg=
Subject key identifier:   7C:7D:EA:E1:98:5A:70:78:63:1C:79:1F:BD:24:D9:BF:7D:1F:3A:EB
Certificate issuer:       /CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Certificate serial:       6CED3B855DE8DF476359F311D0088A262134874A
Authority key identifier: 17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa
Signing time:             Thu 27 Mar 2025 18:16:09 +0000
ROA not before:           Thu 27 Mar 2025 18:11:09 +0000
ROA not after:            Thu 26 Mar 2026 18:16:09 +0000
asID:                     262346
IP address blocks:        177.125.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl
                          rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 06:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ed:3b:85:5d:e8:df:47:63:59:f3:11:d0:08:8a:26:21:34:87:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
        Validity
            Not Before: Mar 27 18:11:09 2025 GMT
            Not After : Mar 26 18:16:09 2026 GMT
        Subject: CN=7C7DEAE1985A7078631C791FBD24D9BF7D1F3AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:64:c8:0f:1b:64:ba:4e:2b:cc:8c:24:77:
                    ae:77:f6:df:52:ed:d1:fc:f1:02:05:9c:ea:69:d7:
                    cd:a7:48:64:0b:b3:87:02:70:2f:bd:95:5a:0f:98:
                    7b:53:97:63:60:76:7c:04:be:b2:f3:11:aa:40:7b:
                    6e:1c:64:9f:b2:ed:11:49:ee:48:8b:d9:d8:ae:a6:
                    06:8c:07:df:81:7c:a0:a9:5b:f0:61:a3:0a:67:5b:
                    94:f0:ad:7a:d7:05:e6:ec:68:0d:a3:47:2a:2e:e3:
                    21:12:f3:29:46:75:a8:da:63:fe:cd:30:f7:a8:12:
                    0e:41:79:d0:03:79:ae:09:f9:08:d3:14:04:bf:7d:
                    54:dc:a3:bf:5b:b4:de:72:a6:c0:01:fb:dc:a5:88:
                    54:b3:31:30:d4:73:c6:f0:5a:28:03:72:bb:bb:a1:
                    ff:04:82:b7:0c:e3:b1:66:c9:6e:d5:1f:79:0f:4d:
                    e1:b0:85:6a:8e:3b:f1:8b:f8:7d:8e:5e:24:a0:ad:
                    b1:df:7d:3c:49:16:d6:49:b1:ae:98:33:4e:31:98:
                    72:78:94:e7:30:07:c5:e0:3c:3c:fe:19:19:86:4a:
                    72:0b:90:a0:12:18:18:52:c3:67:58:3f:37:ac:e2:
                    9f:3b:de:dc:7a:15:aa:0b:07:52:d0:36:8b:11:12:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7D:EA:E1:98:5A:70:78:63:1C:79:1F:BD:24:D9:BF:7D:1F:3A:EB
            X509v3 Authority Key Identifier:
                keyid:17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:43:b5:b8:8b:02:c3:7e:8f:c5:87:c4:79:b1:41:7d:de:57:
         2e:d3:fc:75:bf:57:42:e6:f5:e1:a1:40:5b:15:c1:03:ed:32:
         4e:d0:65:7c:42:ae:29:ae:ad:e1:76:97:35:33:19:0b:ca:d0:
         2f:1a:ce:5e:4c:29:02:9f:72:c9:7a:22:13:af:5d:f2:9f:78:
         6c:b7:c3:14:57:81:af:4c:fe:df:1e:5c:09:97:9e:39:e3:20:
         89:c3:30:6e:00:cd:59:ad:bd:3b:7c:9d:6b:db:cf:44:d5:65:
         46:7a:6b:e9:76:a1:e3:fa:05:01:74:24:1e:84:41:72:c0:54:
         df:e4:fb:09:39:48:ab:c7:89:d1:e4:eb:d7:02:ca:af:c4:5c:
         55:74:f8:2b:4a:83:59:d0:27:19:b5:85:80:7e:ad:88:33:c4:
         0c:e3:28:e0:3e:39:f2:3d:4a:84:1d:31:8c:82:e2:0d:48:a7:
         8f:cd:81:af:34:50:6e:57:94:22:9b:45:cb:74:9e:5b:4a:7f:
         c9:ee:65:9f:d8:f6:48:a1:cf:32:bb:20:f9:8b:47:39:50:08:
         00:f0:27:25:b3:44:a3:f2:8e:dc:f9:c8:f9:77:b9:44:bd:01:
         e5:64:52:6a:5a:d1:b8:02:99:a0:cd:85:e1:cc:fd:bb:66:eb:
         7a:34:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:21:25 2025 by rpki-client