Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          /9YhE1F4FZdelgGKMMcq7f315atYfdCnBr+7wxwoNqU=
Subject key identifier:   6C:8E:13:25:5D:BC:AE:2D:29:F9:7D:13:76:18:BA:74:A3:E9:E0:55
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       54F4353AF9D187BDAB7F3A95F6CD4E34C4AAF2E0
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 06 Mar 2025 16:16:34 +0000
ROA not before:           Thu 06 Mar 2025 16:11:34 +0000
ROA not after:            Thu 05 Mar 2026 16:16:34 +0000
asID:                     263522
IP address blocks:        177.126.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 10:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f4:35:3a:f9:d1:87:bd:ab:7f:3a:95:f6:cd:4e:34:c4:aa:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Mar  6 16:11:34 2025 GMT
            Not After : Mar  5 16:16:34 2026 GMT
        Subject: CN=6C8E13255DBCAE2D29F97D137618BA74A3E9E055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:cd:84:c5:59:7d:f1:18:50:e4:b5:4c:9b:
                    89:cb:95:14:9e:01:24:c6:71:d4:29:51:2a:f0:fd:
                    f6:ed:c4:2b:06:aa:71:d2:9c:46:e4:3b:c0:65:56:
                    28:a6:46:dd:4d:74:db:bf:a9:ec:1b:82:d6:67:7d:
                    94:08:4a:7f:f0:ae:ce:c0:c7:4f:9d:32:5d:c7:33:
                    94:7d:1b:b3:71:93:52:01:38:e5:e6:e3:d2:67:fe:
                    0e:d0:6a:b7:c6:b2:20:34:b9:37:c3:92:bd:d2:68:
                    5e:0f:8d:06:30:64:c7:a1:30:d6:ff:a0:26:2f:d0:
                    42:16:25:f3:c7:5f:5f:44:45:f2:9e:c6:46:04:aa:
                    a5:57:cf:14:8e:8d:ec:f8:51:fc:3a:5b:35:4f:02:
                    9b:af:02:a0:f9:c7:fe:8b:99:b9:b8:9f:51:bf:04:
                    1c:29:82:31:d1:16:29:a4:ae:14:80:d6:53:15:a2:
                    a8:2f:fe:63:63:d8:09:0d:2d:2e:c9:17:0f:4c:c3:
                    a5:cd:dd:7b:8b:90:56:1a:4a:56:59:2e:79:c1:ae:
                    b6:92:be:8f:52:ab:55:c8:36:e0:6a:27:6c:e0:d0:
                    c6:8b:09:64:6b:88:dd:74:e8:fa:34:61:0d:1f:29:
                    e3:07:17:71:78:27:54:b5:5d:e5:49:60:75:ef:15:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8E:13:25:5D:BC:AE:2D:29:F9:7D:13:76:18:BA:74:A3:E9:E0:55
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:9d:73:1b:6c:76:2c:d0:0d:a4:e6:89:5c:aa:64:ea:64:
         dc:b0:43:e2:cd:29:e6:e3:8a:9a:3b:00:e7:91:2a:3d:fa:97:
         2e:e6:33:d2:4e:59:b4:b9:79:9a:77:73:d9:2e:4b:93:df:a1:
         6e:13:bb:cf:f0:00:9c:28:d4:69:78:78:c1:79:52:a7:76:60:
         7b:5f:9e:9f:88:1c:d5:b1:ad:78:49:8b:71:ae:25:b2:0e:1c:
         28:a8:35:5a:cd:c5:76:c5:1e:e3:4f:80:57:c4:2d:ae:15:a5:
         90:c9:d1:e2:fe:c7:bf:f4:46:26:40:0e:07:fd:87:49:ff:cd:
         2d:cb:82:48:6a:8a:98:8b:de:25:15:2c:99:a4:78:35:82:9a:
         b0:5f:62:0a:1c:18:21:73:9f:d1:65:63:70:33:02:a0:bd:6d:
         d4:44:22:97:5b:64:83:4a:06:e2:c8:cb:5d:34:88:e2:f6:f5:
         a1:57:07:33:c6:18:5b:77:2a:93:10:c9:61:fb:de:84:3b:97:
         47:0b:dc:27:70:bd:40:58:d9:f3:c3:8a:2b:41:82:d6:bd:8b:
         8d:6f:68:bf:96:65:cd:67:65:d4:6b:d9:b2:21:fa:8d:1b:9b:
         2a:30:ce:aa:94:cb:62:40:b3:94:b9:ef:d5:b7:75:3e:85:6c:
         df:8b:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:21:00 2025 by rpki-client