Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230362e302f32332d3233203d3e20323632373239.roa
File:                     3137372e39322e3230362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          vl8umQ3aD8GPyImLIBx3dutXSzAUIJSO7DuDZB5xhFA=
Subject key identifier:   6B:74:B9:EF:AA:54:30:C5:A6:BE:6B:15:52:0E:38:B6:66:CD:D0:74
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       1807F5BE3CECD936F3406FDD845D348371952E87
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:47 +0000
ROA not before:           Mon 16 Jun 2025 14:05:47 +0000
ROA not after:            Mon 15 Jun 2026 14:10:47 +0000
asID:                     262729
IP address blocks:        177.92.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 10:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:07:f5:be:3c:ec:d9:36:f3:40:6f:dd:84:5d:34:83:71:95:2e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:47 2025 GMT
            Not After : Jun 15 14:10:47 2026 GMT
        Subject: CN=6B74B9EFAA5430C5A6BE6B15520E38B666CDD074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:20:18:e2:7a:c2:f3:fd:8e:42:b5:0e:64:12:
                    29:fe:73:1d:c9:c8:3a:c5:3a:43:d2:15:41:d2:ce:
                    a4:10:de:42:24:3d:87:c7:39:9b:42:df:3c:b6:ae:
                    55:14:62:66:6b:6c:ee:73:88:68:97:2b:a7:02:01:
                    52:fb:a2:86:9d:9d:06:e5:ec:be:53:ad:ea:c1:ce:
                    95:df:05:55:2d:6f:94:c5:5e:01:95:a3:92:fd:1c:
                    42:ac:af:e1:e5:e9:86:59:48:a0:37:69:d6:ab:a4:
                    c0:56:13:e7:d6:e2:c9:d0:fd:46:4d:e8:e0:be:85:
                    22:75:ad:d1:d0:41:18:2a:33:79:23:a7:ce:16:76:
                    55:75:80:25:c2:16:49:2c:f6:8f:7b:f4:ae:e4:1f:
                    93:cf:80:d6:2c:27:58:16:91:be:9d:45:ac:81:c2:
                    db:df:b1:84:70:b0:39:11:34:9e:6e:2e:8a:8a:e9:
                    73:5d:04:f0:26:e1:4a:f7:d4:a6:0e:a2:ba:4b:5a:
                    ea:ce:53:f8:e6:98:24:4b:51:d2:d6:18:b1:20:a3:
                    7c:db:e3:49:88:9f:fd:d0:45:b7:4f:1c:f7:d7:00:
                    54:5c:fa:f4:21:ef:62:5d:6a:01:ac:bb:9c:69:5a:
                    8d:20:6b:d0:a7:99:cc:ba:20:a4:63:1b:5c:44:65:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:B9:EF:AA:54:30:C5:A6:BE:6B:15:52:0E:38:B6:66:CD:D0:74
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:a6:ea:5a:0a:99:80:b7:67:b7:8f:d6:03:c0:12:cc:5b:
         38:a4:8d:ef:d6:f5:f5:8b:53:c4:22:b7:c2:c7:0a:34:96:b4:
         4f:17:54:1d:c9:d2:0b:5f:5c:e4:ed:a7:98:90:ad:26:2d:0b:
         91:22:87:e0:25:d2:77:2b:f0:9b:1b:67:fe:b3:dd:b2:59:09:
         d8:98:d5:95:af:bf:79:06:8c:90:5e:b8:fc:83:74:f8:73:ad:
         12:7b:7e:ed:12:34:ac:7d:f8:55:cc:3a:a3:d8:20:58:46:84:
         f5:cf:a6:c6:b7:59:8e:db:88:52:61:9c:b7:bf:f9:64:8d:3c:
         1a:6c:b7:42:ef:78:81:04:2c:4f:24:c7:dd:c2:97:11:b7:66:
         e6:10:ec:34:03:21:e2:39:34:3c:c0:bb:96:8c:61:81:2b:1f:
         89:51:a8:e0:9f:24:08:b6:07:13:66:71:fa:66:72:b0:ac:7a:
         d6:0d:f0:47:ff:bc:a9:ba:84:0e:b8:9f:83:da:83:71:97:bf:
         43:7a:67:a2:ba:9b:d3:24:78:bf:b2:90:24:2d:48:4a:2f:e1:
         b0:fa:c6:02:45:f9:77:cc:99:89:79:aa:51:ac:aa:97:eb:29:
         f8:3d:35:1c:fa:46:33:e9:cb:58:3f:38:7b:b4:99:d7:f5:c0:
         5e:be:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:00:33 2025 by rpki-client