Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32312e302f32342d3234203d3e203532363132.roa
File:                     3137372e3132342e32312e302f32342d3234203d3e203532363132.roa (raw, json)
Hash identifier:          7O99rQuggeZojE+mxJ1qOGi7VY+7fLDjjiwPX40QHbU=
Subject key identifier:   65:E5:F5:CA:44:FB:35:5A:B0:86:DC:00:07:1F:A1:49:6B:7C:C9:0A
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       20F75BB80D6398E7BEE974C1CB1E430F4D9F1FC9
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32312e302f32342d3234203d3e203532363132.roa
Signing time:             Fri 20 Jun 2025 17:56:08 +0000
ROA not before:           Fri 20 Jun 2025 17:51:08 +0000
ROA not after:            Fri 19 Jun 2026 17:56:08 +0000
asID:                     52612
IP address blocks:        177.124.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 08:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f7:5b:b8:0d:63:98:e7:be:e9:74:c1:cb:1e:43:0f:4d:9f:1f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Jun 20 17:51:08 2025 GMT
            Not After : Jun 19 17:56:08 2026 GMT
        Subject: CN=65E5F5CA44FB355AB086DC00071FA1496B7CC90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:41:b6:7d:08:16:92:79:99:28:7e:fa:3e:
                    c7:52:14:f0:82:4f:60:cd:13:86:f5:d1:13:3a:df:
                    2c:c5:16:ed:20:45:b2:51:60:3e:93:1e:20:2f:0e:
                    7f:d6:c7:39:41:ec:88:7f:34:50:f5:fe:90:99:89:
                    41:1b:13:72:ed:2d:04:50:66:5d:63:9b:84:57:bc:
                    87:6b:c7:0e:c2:f0:cc:20:1c:f8:bd:6e:51:25:15:
                    b9:93:77:36:db:b5:fd:c9:f2:cf:91:60:8c:db:bf:
                    75:1d:84:5a:fc:9c:5d:26:3a:1e:ad:b8:8c:15:ce:
                    9c:01:c7:c8:53:40:db:f2:7d:9b:79:9a:0e:85:96:
                    d8:51:52:1a:b6:cd:05:10:45:5d:b5:b9:95:cc:9f:
                    86:1d:40:67:34:8b:7d:99:ea:2e:91:c9:ad:7b:ea:
                    da:e1:1b:99:74:1d:86:04:ba:c6:90:1c:2f:04:d8:
                    53:8d:f8:77:88:ed:a2:c8:48:5a:45:15:11:f0:b1:
                    ce:f4:8a:c1:1e:c2:30:86:c8:5d:9e:25:8e:36:33:
                    e2:55:d9:b3:75:7e:bf:0d:76:d1:89:d0:38:49:c7:
                    01:90:fe:b8:7b:d8:35:fb:34:77:ac:17:71:90:1f:
                    d4:ee:b9:64:f4:b9:22:50:e9:9c:7f:67:15:28:79:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E5:F5:CA:44:FB:35:5A:B0:86:DC:00:07:1F:A1:49:6B:7C:C9:0A
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32312e302f32342d3234203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:e2:35:0b:87:75:ad:db:ef:30:cd:22:29:01:7d:db:7d:
         08:6a:8b:1d:6e:ab:28:e0:b8:36:68:06:85:2f:26:44:6d:83:
         d5:62:90:14:7c:30:1e:b6:73:50:c3:7c:8c:68:d6:35:41:89:
         0c:5e:97:92:1e:bb:1c:4a:74:b3:a3:31:5e:7e:44:c3:32:4d:
         47:05:2c:fe:d9:e0:e1:5b:9b:b1:ad:d0:e3:a0:35:66:42:d8:
         55:a2:cc:1a:eb:0a:ac:aa:99:00:a7:3b:75:0e:02:c7:3d:3b:
         45:b0:dc:6c:20:91:17:54:0f:ba:22:b9:67:45:22:6d:28:ea:
         ac:1a:79:b2:b2:4b:4b:0d:ac:b0:2e:1c:66:d6:e1:5d:42:15:
         9d:7b:27:dc:87:21:df:2c:fb:9e:06:79:c0:da:77:21:30:4b:
         6a:bb:60:5b:d5:04:c1:ef:d2:1e:f2:6a:96:18:c1:73:05:53:
         d0:50:67:80:03:e2:cb:b2:57:37:6a:29:71:f4:63:35:7f:e3:
         d1:de:24:d2:f1:f5:e3:20:25:3d:00:a6:5d:3f:ec:0b:62:01:
         de:c7:9c:9b:5e:88:9b:e1:52:1c:61:1f:58:91:1f:17:e3:af:
         69:d1:d5:f1:72:ec:cf:69:56:d0:fd:23:85:45:8b:9e:a8:fd:
         f7:dd:aa:87
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIPdbuA1jmOe+6XTByx5DD02fH8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzMzlDODZERTBDNjVGNDI5OUUwQjkyNUVERDg4RUFC
ODg2RjcyRDAeFw0yNTA2MjAxNzUxMDhaFw0yNjA2MTkxNzU2MDhaMDMxMTAvBgNV
BAMTKDY1RTVGNUNBNDRGQjM1NUFCMDg2REMwMDA3MUZBMTQ5NkI3Q0M5MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfkG2fQgWknmZKH76PsdSFPCC
T2DNE4b10RM63yzFFu0gRbJRYD6THiAvDn/WxzlB7Ih/NFD1/pCZiUEbE3LtLQRQ
Zl1jm4RXvIdrxw7C8MwgHPi9blElFbmTdzbbtf3J8s+RYIzbv3UdhFr8nF0mOh6t
uIwVzpwBx8hTQNvyfZt5mg6FlthRUhq2zQUQRV21uZXMn4YdQGc0i32Z6i6Rya17
6trhG5l0HYYEusaQHC8E2FON+HeI7aLISFpFFRHwsc70isEewjCGyF2eJY42M+JV
2bN1fr8NdtGJ0DhJxwGQ/rh72DX7NHesF3GQH9TuuWT0uSJQ6Zx/ZxUoeXYLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZeX1ykT7NVqwhtwABx+hSWt8yQowHwYDVR0j
BBgwFoAU1jOcht4MZfQpnguSXt2I6riG9y0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFF5cmFKblBFRVFXbWpGTGE0ZEJwUTlRNTgyTHQ3Smt6Mkw3M2EzanZv
RWUvMC9ENjMzOUM4NkRFMEM2NUY0Mjk5RTBCOTI1RUREODhFQUI4ODZGNzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzM5Qzg2REUwQzY1RjQy
OTlFMEI5MjVFREQ4OEVBQjg4NkY3MkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hReXJhSm5QRUVRV21qRkxhNGRCcFE5UTU4Mkx0N0prejJMNzNhM2p2b0VlLzAv
MzEzNzM3MmUzMTMyMzQyZTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsXwVMA0GCSqGSIb3DQEBCwUAA4IBAQAk3OI1C4d1
rdvvMM0iKQF9230Iaosdbqso4Lg2aAaFLyZEbYPVYpAUfDAetnNQw3yMaNY1QYkM
XpeSHrscSnSzozFefkTDMk1HBSz+2eDhW5uxrdDjoDVmQthVoswa6wqsqpkApzt1
DgLHPTtFsNxsIJEXVA+6IrlnRSJtKOqsGnmysktLDaywLhxm1uFdQhWdeyfchyHf
LPueBnnA2nchMEtqu2Bb1QTB79Ie8mqWGMFzBVPQUGeAA+LLslc3ailx9GM1f+PR
3iTS8fXjICU9AKZdP+wLYgHex5ybXoib4VIcYR9YkR8X469p0dXxcuzPaVbQ/SOF
RYueqP333aqH
-----END CERTIFICATE-----
Generated at Mon Jun 23 01:04:59 2025 by rpki-client