Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa
File:                     3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa (raw, json)
Hash identifier:          ga2Tl3umWRjMEgHd//YxksU7R8XehIxkY+fHEt2ckZw=
Subject key identifier:   F5:22:A1:CB:2D:C1:38:1D:52:BF:76:01:7A:AC:8D:98:79:94:E1:D7
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       1E56898029233B0A7863080381CB4D38D0A3864B
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:48 +0000
ROA not before:           Fri 16 May 2025 13:12:48 +0000
ROA not after:            Fri 15 May 2026 13:17:48 +0000
asID:                     270760
IP address blocks:        179.109.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 02:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:56:89:80:29:23:3b:0a:78:63:08:03:81:cb:4d:38:d0:a3:86:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:48 2025 GMT
            Not After : May 15 13:17:48 2026 GMT
        Subject: CN=F522A1CB2DC1381D52BF76017AAC8D987994E1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:72:c0:7e:f8:48:b6:cf:2d:3e:20:c2:b3:
                    93:e6:97:c0:08:ce:51:93:37:53:9f:4b:63:b8:b2:
                    05:33:e4:e6:05:2d:cc:61:96:a5:81:a9:a0:43:55:
                    eb:11:77:d0:e0:06:ea:ff:3a:63:f4:53:0c:25:68:
                    5b:46:9d:cb:09:c9:f8:55:d1:bf:a6:32:30:a4:ff:
                    10:a5:ae:fc:f3:97:a4:5f:d2:bc:4e:b0:d4:af:9c:
                    69:af:e7:44:84:60:6b:52:72:e0:83:9c:e7:57:a0:
                    91:3c:0d:f8:bd:61:25:f2:df:17:eb:cf:1a:89:b8:
                    7d:66:e3:b5:98:12:5e:a6:71:7e:ba:6c:d2:64:b4:
                    47:ee:0b:62:15:94:85:47:4f:5f:bd:94:16:8a:0d:
                    e7:07:15:c7:a7:0a:e0:7b:d2:bc:49:f4:4c:d1:64:
                    05:eb:9f:b5:58:9a:e4:c8:60:13:97:30:90:40:d9:
                    5b:5c:e2:94:06:a1:86:6b:3f:5d:26:da:45:bb:ba:
                    30:4f:7f:7c:7e:ea:e1:1a:1c:cb:35:23:82:8b:09:
                    8b:c6:04:7e:47:a3:de:6b:74:bd:01:25:5b:d8:35:
                    b8:1e:dd:92:9e:1c:b6:71:24:14:b8:97:dd:b9:4e:
                    ed:b5:00:f1:63:78:d7:33:50:9a:5e:40:fa:98:26:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:A1:CB:2D:C1:38:1D:52:BF:76:01:7A:AC:8D:98:79:94:E1:D7
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:c4:1e:37:b7:7c:69:1c:bb:c3:50:a7:32:2e:25:53:69:
         c3:91:d7:a2:31:3a:29:b0:c7:24:4d:55:e0:99:63:22:10:79:
         8a:f5:e6:29:2c:07:90:af:71:43:b0:47:e5:98:15:31:83:bb:
         69:ce:bd:87:5b:78:c5:7f:f1:9e:7d:13:bb:d8:5f:9d:a9:42:
         b5:83:c6:46:39:40:b6:e9:91:ad:68:c1:24:aa:9f:bb:d8:04:
         9b:d7:e3:f4:45:7f:fa:d1:1b:c0:2f:94:02:e8:0c:45:88:6e:
         60:89:08:bd:c9:66:34:cb:6c:b5:7e:78:15:c3:b6:7d:05:e3:
         5a:5d:c0:a7:6d:8e:3c:4b:49:b2:06:43:2f:64:45:06:c0:75:
         dd:99:52:0f:50:6b:a5:38:67:83:4d:8b:f6:c1:65:ac:50:f8:
         0a:d2:77:58:3b:ef:94:25:5a:6e:d4:57:1a:15:5f:36:41:65:
         0e:88:95:8e:da:8f:75:ed:ec:7f:f0:e0:61:1e:26:b8:7d:fb:
         ce:11:e6:fb:c1:6a:2d:2b:65:57:e8:b2:b5:b5:69:d4:07:34:
         41:72:44:3c:b7:49:50:fd:4a:7e:48:96:ec:39:94:56:da:6b:
         72:d6:36:48:fb:85:7a:4f:cf:b5:5d:c3:91:35:94:bf:ca:ea:
         c1:3b:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:35:10 2025 by rpki-client