Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32332d3233203d3e20323632323936.roa
File:                     3137372e31312e3132302e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          NpCB23ypJi8UOXKo9ojuhN4Q0dMt6aENjHjpKaY8fnE=
Subject key identifier:   C6:13:41:1E:0D:43:73:C9:13:BB:DE:81:CD:F2:06:B7:E0:92:89:F0
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       5E87246845A39A19890C594D3C2AA00731049A06
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:31 +0000
ROA not before:           Mon 31 Mar 2025 17:52:31 +0000
ROA not after:            Mon 30 Mar 2026 17:57:31 +0000
asID:                     262296
IP address blocks:        177.11.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:87:24:68:45:a3:9a:19:89:0c:59:4d:3c:2a:a0:07:31:04:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:31 2025 GMT
            Not After : Mar 30 17:57:31 2026 GMT
        Subject: CN=C613411E0D4373C913BBDE81CDF206B7E09289F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:8e:33:e9:2c:76:ed:28:5f:a2:20:10:36:
                    3c:a0:10:da:7b:21:77:f0:b5:63:be:a3:69:b3:bd:
                    b6:4a:a2:1e:9a:51:a1:38:b6:39:21:1c:bd:8f:ae:
                    eb:47:d3:c6:c7:48:df:42:34:f5:fa:ad:cc:b1:0e:
                    21:86:05:02:c2:51:9e:a4:4f:dc:b5:e8:96:b5:e3:
                    10:6c:18:1b:c8:23:84:0d:08:ea:92:5b:cb:40:5c:
                    83:52:34:bc:86:fc:e5:a3:6a:71:34:be:6d:19:33:
                    4d:1e:1d:f3:57:4e:93:3c:26:92:6b:2b:4f:2a:fb:
                    ce:85:44:8a:89:e7:28:90:3d:e3:de:0c:73:bf:c7:
                    a0:6f:94:0c:f8:33:6c:74:92:0e:48:22:75:c0:67:
                    85:4f:4e:96:c7:54:45:8f:b4:80:f6:7b:54:5c:47:
                    ef:83:9c:a0:3e:be:d9:7e:1a:44:f7:1b:cb:68:18:
                    2f:95:6c:ae:05:a6:06:1b:22:9a:44:f4:b6:ef:10:
                    94:ad:14:16:7b:02:f4:e4:7a:f3:0f:52:16:42:e6:
                    35:06:61:a8:49:a5:26:11:66:2d:6a:4d:42:99:0b:
                    75:e2:00:16:2a:b6:1e:40:8d:cc:58:96:8a:5d:a2:
                    f1:45:fb:8c:f5:b5:e6:46:ea:81:77:c7:9d:3b:72:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:13:41:1E:0D:43:73:C9:13:BB:DE:81:CD:F2:06:B7:E0:92:89:F0
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132302e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:bc:c0:bf:e9:72:5a:75:a2:c8:14:cb:9b:7c:af:4b:50:
         8d:49:e8:74:07:a2:29:e8:83:17:87:5a:d2:3d:4d:51:f5:87:
         fa:a9:bb:22:f8:4a:45:ae:fb:20:8b:21:c1:96:a8:30:09:c0:
         aa:84:eb:66:a9:ba:8d:d7:8e:ad:1c:f1:4c:e0:9b:9e:7e:81:
         8b:fc:33:8e:b8:1f:5b:1c:78:9d:5d:ae:69:3e:58:d5:08:97:
         a8:3d:1f:9a:1a:04:ae:b7:35:2e:b1:00:32:5b:bc:3f:1c:19:
         e0:d3:7b:7c:48:59:fc:fd:02:52:0c:ef:5e:86:98:0a:15:1c:
         ee:3d:41:1a:61:78:32:55:ba:b8:7d:23:29:a0:68:b9:b9:b5:
         34:5d:39:47:8a:b0:2d:27:01:2b:c1:c2:f3:d7:12:f8:60:cd:
         95:2e:00:91:ed:f6:46:d2:bf:0f:64:7a:7c:d1:13:dc:24:9c:
         e8:5b:b9:44:19:50:25:60:1d:4c:ff:72:e1:cb:d5:0d:b3:3f:
         ac:67:37:3b:10:fb:61:bd:ce:dc:95:c4:7c:3e:8e:bf:68:fd:
         a3:14:83:f9:dd:bf:b5:76:ed:75:0f:8d:d2:55:4f:a5:23:5d:
         6b:e2:3c:0a:d8:5f:42:02:a1:f4:ec:ad:6a:0e:ed:f3:6b:62:
         c1:ce:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:59:36 2025 by rpki-client