Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32302e302f32322d3232203d3e203532363132.roa
File:                     3137372e3132342e32302e302f32322d3232203d3e203532363132.roa (raw, json)
Hash identifier:          oYk7N9tdE32cXPPHqjL6P438HGWK4zK4PA+L1bWCEzw=
Subject key identifier:   E8:C9:52:FA:2C:EA:4C:72:F2:B4:60:8A:01:6A:ED:C9:94:36:71:78
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       22C772412C65001F2B54CC0E1736B5907EBFACA0
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32302e302f32322d3232203d3e203532363132.roa
Signing time:             Fri 20 Jun 2025 17:56:03 +0000
ROA not before:           Fri 20 Jun 2025 17:51:03 +0000
ROA not after:            Fri 19 Jun 2026 17:56:03 +0000
asID:                     52612
IP address blocks:        177.124.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 02:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c7:72:41:2c:65:00:1f:2b:54:cc:0e:17:36:b5:90:7e:bf:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Jun 20 17:51:03 2025 GMT
            Not After : Jun 19 17:56:03 2026 GMT
        Subject: CN=E8C952FA2CEA4C72F2B4608A016AEDC994367178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:78:bd:2e:c7:bf:60:70:38:68:49:aa:f4:
                    fe:13:d8:b1:df:16:d9:a9:ec:45:b0:f1:94:50:10:
                    21:a8:02:c8:55:96:d0:c6:33:2b:c4:0f:ec:c0:df:
                    6b:bd:c9:a2:56:be:26:e5:be:e4:e3:07:8b:a8:3c:
                    cb:2c:2c:3e:aa:9c:80:2a:c3:0b:bf:07:b4:4a:47:
                    22:60:81:4d:cf:21:04:56:3f:55:3c:bb:fe:ce:62:
                    ec:eb:2f:f2:71:09:47:48:60:ec:f2:93:00:95:9a:
                    88:c7:9b:88:16:5f:a2:6e:d9:36:9d:06:20:8f:70:
                    48:69:2a:a8:a1:43:30:75:70:29:0c:8a:e2:eb:a4:
                    d1:c9:ef:2a:c5:09:5e:98:8e:d2:ff:e7:c9:ab:88:
                    2a:7b:7d:92:e2:9c:d5:09:6f:b8:f5:61:a3:16:58:
                    01:d6:aa:5c:b4:81:e8:74:96:b8:11:4c:b2:bd:b7:
                    ed:d8:e0:c5:9f:b6:a8:1c:c9:b9:83:e8:2f:47:79:
                    1b:f0:dc:bf:27:12:be:41:4d:5f:d0:b1:77:82:83:
                    b3:ec:01:3c:99:53:c5:bc:59:30:db:0a:78:42:fb:
                    fb:43:f4:43:2b:61:1f:ac:a4:2e:45:80:48:48:55:
                    b4:a1:48:61:e3:b6:bd:6a:81:a0:30:3b:d5:92:94:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C9:52:FA:2C:EA:4C:72:F2:B4:60:8A:01:6A:ED:C9:94:36:71:78
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32302e302f32322d3232203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:96:ce:16:6e:09:2f:db:92:13:79:09:0a:4b:b7:9c:7d:d3:
         a1:10:e5:5e:cc:b4:2f:48:cc:ac:e6:da:16:e4:f9:49:09:0b:
         60:16:ed:a5:1d:cd:9e:da:cb:2b:8e:4f:d9:75:34:4e:73:a3:
         1d:66:c8:4a:bc:30:1b:e9:3d:7d:d4:6f:18:5c:27:26:f4:e1:
         2d:c0:d7:ac:44:c4:b4:44:87:55:42:c0:a0:36:4a:7c:48:e2:
         89:f4:dd:7f:29:96:5c:30:75:94:f9:a7:a8:4b:bf:68:e6:86:
         ad:23:16:7b:ed:c3:ca:28:9e:aa:68:8c:b5:3a:8b:6b:82:39:
         cb:a2:49:ed:ef:18:19:e0:99:af:db:f4:02:c6:a8:97:06:0d:
         8e:7e:77:87:0f:6a:a7:03:51:43:bc:82:5f:82:08:f0:16:62:
         ee:a6:9c:03:2d:1d:5c:72:2b:5b:3b:57:89:9f:4e:e4:b4:33:
         7a:3f:8a:9b:23:aa:a9:69:13:b6:1d:d3:7f:7c:19:67:9c:09:
         7d:99:3f:8d:0e:62:59:c2:15:38:81:07:96:9b:1a:70:48:3c:
         ab:ca:8b:ce:27:84:cf:47:1d:51:4a:4a:62:4d:03:94:47:b0:
         84:5a:ca:c6:94:72:d0:a0:46:95:f8:dc:7e:bc:b1:75:08:d9:
         a4:4c:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:14:14 2025 by rpki-client