Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa
File:                     3137372e38352e37362e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          FVClhQgO9pswkncKzH52aqsITyuGf7JV4zDYMmqzBfo=
Subject key identifier:   9E:25:D4:C5:85:43:3B:68:5B:B1:00:A6:CC:A9:CA:8C:1A:DF:43:5C
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       119AEF298803B3690248FA4EEBA989122A6650A6
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:31 +0000
ROA not before:           Mon 31 Mar 2025 17:52:31 +0000
ROA not after:            Mon 30 Mar 2026 17:57:31 +0000
asID:                     262296
IP address blocks:        177.85.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9a:ef:29:88:03:b3:69:02:48:fa:4e:eb:a9:89:12:2a:66:50:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:31 2025 GMT
            Not After : Mar 30 17:57:31 2026 GMT
        Subject: CN=9E25D4C585433B685BB100A6CCA9CA8C1ADF435C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:e8:51:06:f7:05:41:07:32:53:35:ab:14:
                    8c:d6:e1:fd:6e:20:ce:f2:d9:35:4f:3b:5a:c2:54:
                    b0:0a:27:d9:5f:52:33:e6:aa:82:6f:23:27:b3:bc:
                    f4:d6:b4:be:9b:e3:c8:fd:2e:16:de:25:51:a9:50:
                    19:a0:05:cf:a6:39:dc:9e:10:b1:06:1e:50:e8:01:
                    42:0a:7d:98:f4:86:6d:25:fb:25:c6:b9:bc:23:66:
                    bd:d6:10:be:d6:99:ed:f5:ba:09:f6:bb:3e:a7:e8:
                    a3:71:ab:7e:35:af:dd:64:e5:34:87:9e:bb:6e:58:
                    a1:91:ff:c8:09:c4:fa:6f:09:3d:fe:5f:bd:7c:59:
                    ac:bb:f2:67:8a:27:ff:e9:48:cc:ea:d1:7f:88:dc:
                    e0:7e:00:ad:3b:f8:96:d6:9b:f0:6d:27:7c:94:40:
                    f9:d2:db:73:d5:84:e4:49:f5:c3:c1:c8:21:98:d2:
                    6b:b4:39:45:12:ac:98:82:14:6e:46:02:70:1d:70:
                    df:65:e2:5f:53:da:a5:23:df:d0:d9:57:ca:20:c4:
                    17:bd:67:69:04:2a:e8:7a:6f:84:0b:d3:d6:d0:06:
                    e1:f8:18:07:79:36:b7:09:ff:0a:bb:63:cd:8d:ce:
                    c8:a4:65:67:91:b9:c7:5f:4d:dd:7a:93:17:f3:d9:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:25:D4:C5:85:43:3B:68:5B:B1:00:A6:CC:A9:CA:8C:1A:DF:43:5C
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:d3:f4:0f:4e:f5:de:d7:74:ca:ee:14:7a:f9:e2:b3:be:00:
         53:e0:fa:72:4a:3b:d5:9c:99:fc:fe:c0:c0:a5:95:50:03:ff:
         74:a4:cd:d6:61:63:8a:63:f1:a4:b1:7d:35:fe:26:2c:b9:84:
         28:9e:77:e7:de:7a:94:10:92:fe:9c:ef:ba:9d:fb:9d:1a:cb:
         93:ff:e1:d9:25:53:6a:27:fc:e4:9a:33:08:16:f2:58:30:dc:
         a3:c2:75:2e:7b:3c:38:85:8e:c8:77:bb:be:05:ac:f7:bf:3b:
         9c:28:78:3e:27:be:da:25:0b:6a:00:dd:c1:c1:0a:52:2f:6a:
         ae:d2:d1:9a:a2:88:dc:ce:fe:aa:c6:0a:31:cd:9e:f2:28:ec:
         d6:59:a3:89:84:bf:92:05:db:e6:14:b1:48:dc:e3:69:b6:63:
         f8:2a:15:75:d0:c7:c5:16:f9:b9:9d:86:e3:b7:e4:34:2f:55:
         2b:05:16:ac:87:ac:1e:9f:6b:4c:e6:dd:4d:d8:f1:97:64:86:
         b3:c6:fc:59:3a:2a:5d:3e:d7:4e:e4:f2:0a:22:16:54:cc:dd:
         8d:89:12:94:23:ab:87:9c:3c:16:c6:d7:60:11:07:71:48:ca:
         93:0d:e1:5d:76:c8:1e:41:ff:18:a2:1c:e1:52:64:dd:81:a3:
         00:16:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:13 2025 by rpki-client on console.sobornost.net