Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          y2YfNxKu+A6izDFhKLOJQLbfsrmBFM6J+UExX80517w=
Subject key identifier:   DD:F3:AD:6F:B3:E5:7E:8C:D2:84:D7:18:CA:21:61:D5:BE:54:C2:36
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       3776D514C6787D312332EA117C4532B8B2412194
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:33 +0000
ROA not before:           Mon 31 Mar 2025 17:52:33 +0000
ROA not after:            Mon 30 Mar 2026 17:57:33 +0000
asID:                     262296
IP address blocks:        177.11.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:76:d5:14:c6:78:7d:31:23:32:ea:11:7c:45:32:b8:b2:41:21:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:33 2025 GMT
            Not After : Mar 30 17:57:33 2026 GMT
        Subject: CN=DDF3AD6FB3E57E8CD284D718CA2161D5BE54C236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:c6:e2:a6:45:82:03:0e:51:c6:d5:c1:db:
                    c8:d6:8d:04:45:58:f5:c2:6d:69:f4:54:4a:8d:70:
                    b5:1b:63:cc:d2:f4:bd:30:98:cf:41:6a:77:29:71:
                    f8:e4:cc:67:a9:b5:4a:4d:15:55:e5:16:bd:6f:d2:
                    2b:67:3d:4e:56:75:15:7e:77:92:fc:b8:59:13:41:
                    90:f8:e9:b6:db:5c:ff:9b:4b:8b:b8:ac:16:1f:c0:
                    af:75:82:13:37:f1:f6:0f:91:61:5e:af:83:c6:d2:
                    85:32:93:4e:41:e0:06:5f:8c:96:72:af:62:46:ec:
                    3a:c8:cc:ed:59:57:26:c7:25:be:5c:e8:c2:c7:49:
                    21:09:30:df:74:ad:83:15:06:c8:3c:a7:a6:30:dd:
                    9f:5c:be:b2:4c:74:b3:26:ac:97:2f:c9:07:2f:02:
                    5a:d9:9e:38:ab:42:04:36:6f:0b:c7:e8:c8:0a:a4:
                    42:77:ff:8e:b3:45:39:bb:01:4b:77:b8:19:7c:39:
                    c1:7d:8e:69:c3:77:6c:67:c9:6c:34:5f:11:9e:5a:
                    46:1d:fe:20:97:3c:b7:c1:ba:94:22:a6:92:30:6b:
                    8e:60:57:d2:4f:f4:8f:2d:9a:6a:ac:6e:ff:72:98:
                    53:ac:6d:e6:70:8a:6f:de:12:79:e0:c2:31:71:bd:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F3:AD:6F:B3:E5:7E:8C:D2:84:D7:18:CA:21:61:D5:BE:54:C2:36
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:dd:3d:81:b7:c9:9c:50:40:e4:45:4a:1c:c2:04:4d:5c:
         5b:c7:66:dd:eb:e1:a6:93:43:52:32:8b:ee:dd:98:dc:e5:02:
         b6:f4:a2:30:29:e2:d1:24:e9:61:50:c5:bf:62:ff:d7:13:e9:
         30:11:12:74:8a:73:6b:c3:3c:2e:12:13:80:d3:93:87:f2:45:
         c2:e1:e9:56:97:a0:51:b9:a3:38:9f:9f:8a:e2:d3:b3:90:bb:
         a8:8b:c1:a6:50:7e:c9:42:d1:ba:c8:c2:13:a5:61:ad:16:9a:
         a2:3c:21:94:f5:f3:a7:ab:e1:1e:af:c6:ba:81:56:25:5e:79:
         6e:20:7f:10:5f:44:eb:ed:41:31:7a:80:1d:12:7d:21:ee:72:
         8c:b2:dc:2d:e1:8b:2b:ca:5e:ce:86:12:d8:8e:fc:a0:f0:de:
         f9:2d:7e:d4:21:b8:ce:af:ce:79:f9:8a:d6:5f:e1:e3:63:24:
         fe:c9:74:42:f1:47:ba:af:51:4c:07:b9:f1:6d:d6:9e:2e:11:
         61:e6:87:04:32:10:18:5e:1f:ae:a9:aa:9b:ed:d8:45:04:a7:
         6b:7e:c4:a1:e0:68:5f:c8:fa:be:75:59:2f:27:30:b0:e7:d0:
         8d:d5:58:4a:a5:ae:d6:7a:89:2a:a1:5f:b8:9a:99:24:cf:b4:
         9b:e0:09:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:13 2025 by rpki-client on console.sobornost.net