Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa
File:                     3137372e3132342e32332e302f32342d3234203d3e203532363132.roa (raw, json)
Hash identifier:          o9mtnq245aBARgve3J1ekc6q7YmXSxtTRUyVIRXfCOs=
Subject key identifier:   0C:09:4D:18:DA:D6:86:26:09:EC:79:A1:9A:1B:47:F0:A3:4C:80:C5
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       515499448C3668334F6C1D537C4F11DB925E1A72
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa
Signing time:             Fri 20 Jun 2025 17:56:12 +0000
ROA not before:           Fri 20 Jun 2025 17:51:12 +0000
ROA not after:            Fri 19 Jun 2026 17:56:12 +0000
asID:                     52612
IP address blocks:        177.124.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 08:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:54:99:44:8c:36:68:33:4f:6c:1d:53:7c:4f:11:db:92:5e:1a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Jun 20 17:51:12 2025 GMT
            Not After : Jun 19 17:56:12 2026 GMT
        Subject: CN=0C094D18DAD6862609EC79A19A1B47F0A34C80C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:9c:f0:19:0e:1e:76:13:ca:f7:a4:42:75:
                    12:f1:2f:4c:f7:e3:03:74:75:2f:57:72:3d:24:61:
                    c2:0c:a0:00:64:4c:8c:d8:e4:71:23:30:e2:cf:85:
                    d9:c1:58:4d:3e:c5:e0:96:a0:7a:2d:fc:b2:43:8d:
                    6a:60:8f:a2:2e:1e:fa:86:5a:c6:c2:ea:66:cb:fb:
                    da:ed:45:40:dc:cc:39:30:be:cb:19:49:73:3f:4f:
                    bd:34:83:63:91:ee:8b:c9:4b:d7:f6:8b:2a:45:37:
                    ce:66:ed:4d:6b:a1:32:3f:0a:1b:7a:ae:13:1a:72:
                    03:a4:76:b9:62:00:4d:46:a2:57:12:12:20:50:5e:
                    e5:fc:c0:a3:54:87:4b:ff:d8:42:75:eb:6a:10:61:
                    02:9d:7b:97:5b:d8:a4:86:c9:94:7f:d0:7b:6a:28:
                    13:d5:ca:41:00:0b:52:e3:4a:11:fc:94:de:0c:f4:
                    92:93:68:12:ab:fc:5a:a7:94:52:2e:e6:31:06:ff:
                    ad:74:bf:90:f6:6c:95:be:a8:5c:ce:7d:c4:2c:ea:
                    fc:de:44:c2:d4:01:60:d1:70:11:c2:ec:b4:f8:d2:
                    b5:bc:ee:7b:6e:01:61:be:43:ec:28:a7:09:41:ef:
                    c4:8b:9a:09:20:ed:e6:e2:99:d7:50:10:42:67:b1:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:09:4D:18:DA:D6:86:26:09:EC:79:A1:9A:1B:47:F0:A3:4C:80:C5
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:7a:58:10:8a:bb:27:79:7b:0b:e8:37:9f:48:f3:51:69:24:
         bb:95:2d:60:a2:ed:c1:6d:53:da:e3:84:54:67:8c:ad:d0:a0:
         09:de:24:71:89:a4:69:c2:b1:37:72:35:ae:c8:4b:18:2a:b0:
         29:65:8a:20:15:10:68:8a:a0:43:a6:6b:df:3f:1d:f6:a4:fe:
         b5:d4:cd:54:79:48:e6:ff:8c:b6:8a:ac:2d:31:8d:51:23:cb:
         12:00:42:aa:48:ff:ce:75:7f:46:5a:31:e1:9d:ff:c1:07:4f:
         7b:20:df:da:20:74:57:75:b8:ba:8a:15:25:9b:43:a0:db:76:
         7e:99:ca:7e:cd:5e:d1:a0:08:4d:58:b6:a3:68:e2:24:1b:28:
         9f:27:92:7a:c0:f7:d4:ed:2f:14:f5:d5:1d:cc:52:ec:4f:bb:
         f6:7d:8d:df:a4:b2:22:7f:f2:00:69:34:ac:6f:9c:25:12:17:
         fe:12:34:bd:0f:2c:1c:df:39:bb:99:a4:8a:50:15:bf:ef:6c:
         fd:db:37:e2:ca:f3:a0:a0:17:d9:d3:ad:cc:ac:77:b2:db:72:
         98:27:24:b4:00:6c:85:ee:e9:55:30:ac:bc:0d:48:8f:9f:dd:
         9c:42:fa:c9:44:2c:1e:d3:f1:72:24:62:73:0a:d7:95:b0:d1:
         1d:b3:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:04:43 2025 by rpki-client