Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa
File:                     3137392e34322e39362e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          fTUkZLp/3shvmLynyAI23ui0P6HH7ZMZ+5u1Z68UvDQ=
Subject key identifier:   6C:9B:0F:5E:C6:AE:E7:BD:6C:BD:31:2C:1A:C2:F6:7D:84:B4:57:7F
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       350ACC12F1F51E2FA5C566E57A2DE191C02B5B60
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa
Signing time:             Sat 31 May 2025 14:17:05 +0000
ROA not before:           Sat 31 May 2025 14:12:05 +0000
ROA not after:            Sat 30 May 2026 14:17:05 +0000
asID:                     52573
IP address blocks:        179.42.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 15:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0a:cc:12:f1:f5:1e:2f:a5:c5:66:e5:7a:2d:e1:91:c0:2b:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: May 31 14:12:05 2025 GMT
            Not After : May 30 14:17:05 2026 GMT
        Subject: CN=6C9B0F5EC6AEE7BD6CBD312C1AC2F67D84B4577F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:8c:fd:e4:53:9b:6e:e0:eb:11:bd:1d:e3:
                    42:3f:e7:9e:b2:06:7f:bf:de:0b:f1:79:15:86:15:
                    a4:1d:94:8a:88:8a:63:25:86:80:29:10:54:44:56:
                    8e:ca:60:7c:3e:e7:c2:a3:5d:11:8b:b6:57:4f:e5:
                    7b:8e:25:84:76:14:9b:9b:e3:02:e3:dd:3d:6c:dd:
                    50:f0:d4:85:d8:19:28:49:1d:b4:70:69:e9:89:ac:
                    2c:ff:df:73:54:0e:d8:21:86:ea:e7:98:37:0d:a7:
                    38:e9:24:3e:96:99:dc:f1:a3:26:84:1a:9f:82:9e:
                    4c:6d:ba:e3:82:ce:ce:f5:a8:d9:57:68:0b:77:0d:
                    7d:2f:cc:09:73:b7:18:01:5a:8b:fc:36:4c:94:f9:
                    88:c8:0d:90:84:09:09:3e:ea:6f:b9:91:91:89:e0:
                    14:51:cf:db:4a:98:cd:18:1e:d5:33:2c:c9:1f:7a:
                    80:f6:cc:3d:1e:8c:1f:9f:15:b6:2e:0c:92:a6:94:
                    1f:46:e3:83:c2:35:f2:99:09:4d:90:ce:20:31:05:
                    78:1a:6a:e8:f9:00:5e:4f:4c:4b:d3:c7:fc:cd:16:
                    0a:a4:7a:13:fd:9b:a8:ea:f2:cf:63:3c:4e:a3:de:
                    b6:7b:ca:bd:5c:84:bf:15:c8:c4:5d:cd:8a:6e:0a:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9B:0F:5E:C6:AE:E7:BD:6C:BD:31:2C:1A:C2:F6:7D:84:B4:57:7F
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:e9:11:9d:d6:56:8b:95:69:91:70:42:b4:57:f4:6d:85:
         c7:17:7e:d5:ad:2e:7b:98:14:ef:47:45:ac:58:e1:d6:cf:b9:
         c3:ba:5d:b0:c7:09:04:99:d6:2b:8a:87:fc:d9:a0:b6:98:c0:
         80:d9:d3:1f:3a:d4:0f:f1:56:d4:94:39:33:68:1b:b6:b0:6d:
         80:a2:82:91:d0:89:0c:7d:c1:07:6f:1d:4f:42:96:24:b1:05:
         02:56:93:64:a5:61:ce:2a:de:e4:64:f0:63:a3:59:eb:4e:46:
         31:39:71:9e:b6:21:7d:a9:b9:60:97:b5:8f:b8:bb:8e:ae:e9:
         e6:78:87:38:ee:2a:70:97:fe:84:9e:5e:5d:83:5c:3b:2d:ec:
         ff:2d:79:eb:8b:93:05:1c:13:5d:10:d3:2a:ea:1d:5d:f6:48:
         5e:c7:d7:c4:20:52:cc:b0:ce:67:a2:40:42:83:6f:e0:92:a1:
         5c:fb:87:69:b1:99:93:fc:d4:d9:97:0f:4a:c7:2d:09:34:58:
         67:18:9f:9e:ef:c5:b2:07:02:34:05:25:b4:81:dc:86:b7:25:
         11:f0:56:40:a8:f1:98:3f:0f:ae:15:d8:d7:81:00:37:fa:ba:
         59:70:27:43:e6:05:5b:20:56:4e:7d:c8:58:6f:81:2b:8d:60:
         c8:bc:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 08:59:56 2025 by rpki-client