Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3137372e38362e33322e302f32322d3234203d3e20323632363231.roa
File:                     3137372e38362e33322e302f32322d3234203d3e20323632363231.roa (raw, json)
Hash identifier:          xKLrG/AO8ce4eep3uuETd57cPc6b1MP2a+DWkx2KnwU=
Subject key identifier:   9D:4A:18:01:C6:9B:33:A0:3A:D2:81:1B:46:BF:72:E3:12:7D:B9:65
Certificate issuer:       /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
Certificate serial:       4771EB204CE5EDCB5B36B4A3BA1732C96A8ECBC0
Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3137372e38362e33322e302f32322d3234203d3e20323632363231.roa
Signing time:             Thu 06 Mar 2025 05:45:43 +0000
ROA not before:           Thu 06 Mar 2025 05:40:43 +0000
ROA not after:            Thu 05 Mar 2026 05:45:43 +0000
asID:                     262621
IP address blocks:        177.86.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl
                          rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:71:eb:20:4c:e5:ed:cb:5b:36:b4:a3:ba:17:32:c9:6a:8e:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
        Validity
            Not Before: Mar  6 05:40:43 2025 GMT
            Not After : Mar  5 05:45:43 2026 GMT
        Subject: CN=9D4A1801C69B33A03AD2811B46BF72E3127DB965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:cd:a7:83:bc:89:45:75:f4:03:0c:27:c1:
                    91:bc:ae:81:0f:88:5d:02:22:c4:51:f4:cf:8f:b8:
                    c3:61:61:7f:f7:1b:d8:d8:50:c8:ce:af:14:ad:ed:
                    35:39:56:2e:65:e0:d2:c1:57:ee:b3:88:5d:ed:d6:
                    6b:31:ba:7a:7d:91:f8:af:48:63:f1:d5:fa:11:fb:
                    72:ea:36:97:f2:f6:63:b9:08:ec:8f:8f:d5:7f:6a:
                    d7:e4:4b:06:91:c4:5d:0a:f0:e9:50:4c:b9:bf:8a:
                    d6:fe:66:af:18:62:a3:23:13:17:da:56:3d:a6:5a:
                    43:4e:cc:a6:ca:8a:c5:85:5c:90:29:8f:e6:7c:3d:
                    6d:fc:0c:4e:9c:1c:66:b3:f7:37:8c:18:87:e3:3f:
                    f1:05:e5:18:29:83:69:ab:a7:b3:17:61:a6:f0:5c:
                    a2:44:19:74:5d:02:3b:c3:75:63:5a:d3:fc:4e:46:
                    92:4a:76:b1:cd:48:da:bf:35:fb:47:65:53:b0:0b:
                    3f:d7:f6:29:ae:8d:22:17:69:71:79:a1:00:0b:52:
                    3a:63:d3:6c:b3:e5:a3:f8:d7:26:b9:fc:3d:7b:bb:
                    99:ff:e7:d6:e8:b7:b1:71:7b:d6:5d:03:de:80:7e:
                    9b:e2:5d:66:7e:f4:80:70:28:f8:1f:2a:e1:22:c9:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:18:01:C6:9B:33:A0:3A:D2:81:1B:46:BF:72:E3:12:7D:B9:65
            X509v3 Authority Key Identifier:
                keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3137372e38362e33322e302f32322d3234203d3e20323632363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:3e:a0:f9:99:2a:86:53:3a:5c:5c:1c:9f:bc:eb:bb:c7:4d:
         4b:4a:20:b0:30:f4:00:43:98:53:88:f8:07:a4:dc:49:db:10:
         92:bb:c5:b8:bf:b8:af:8e:60:5f:70:41:33:6f:74:20:c9:be:
         81:75:ef:94:a2:c4:bc:2a:63:9e:da:20:9b:41:31:59:63:77:
         53:ab:09:99:79:67:8c:70:bd:6c:ba:67:37:aa:16:e4:a0:f1:
         6e:f0:2e:3b:a1:ba:8a:f7:52:8c:66:83:81:c3:6d:28:95:57:
         05:26:2f:c7:20:ab:e6:ca:77:49:91:fe:e5:21:bd:db:11:49:
         d1:22:6d:33:04:68:02:15:62:a4:e7:21:da:6e:5d:b8:5a:84:
         8a:34:34:74:70:6f:f8:20:a9:dd:b4:22:c2:07:28:c8:55:60:
         08:be:b2:40:2e:69:27:9c:5f:d9:1f:f4:a0:32:b1:8a:6d:12:
         b7:46:59:ac:fa:4f:6e:b8:af:dc:46:0c:f5:26:0e:35:fd:4f:
         b5:9f:26:b5:51:59:b8:ff:4b:cc:d9:0d:95:5f:33:5a:b0:cf:
         1b:c4:b7:45:e6:93:00:f1:35:d2:fa:c0:63:1a:03:16:8e:b6:
         3b:f1:43:4c:c0:68:5b:6c:ec:8e:16:34:12:2a:ab:8b:aa:e5:
         2e:9f:ac:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:06:00 2025 by rpki-client