Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137392e3130372e3139322e302f31392d3234203d3e203238323934.roa
File:                     3137392e3130372e3139322e302f31392d3234203d3e203238323934.roa (raw, json)
Hash identifier:          T8BfVIHA/8gPEC/TOHpbVQlICQT+Bx8Z28On/qHiVas=
Subject key identifier:   6B:90:98:24:D8:9C:85:B2:29:41:B4:C9:40:60:F8:31:BC:EE:CC:D3
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       091BB3529D30814DEB1C76112A515F8274834C48
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137392e3130372e3139322e302f31392d3234203d3e203238323934.roa
Signing time:             Thu 12 Jun 2025 11:59:39 +0000
ROA not before:           Thu 12 Jun 2025 11:54:39 +0000
ROA not after:            Thu 11 Jun 2026 11:59:39 +0000
asID:                     28294
IP address blocks:        179.107.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1b:b3:52:9d:30:81:4d:eb:1c:76:11:2a:51:5f:82:74:83:4c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jun 12 11:54:39 2025 GMT
            Not After : Jun 11 11:59:39 2026 GMT
        Subject: CN=6B909824D89C85B22941B4C94060F831BCEECCD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9e:3d:14:b0:d8:5a:1f:e0:ce:65:48:1e:40:
                    60:c8:21:72:9c:eb:7e:42:29:dc:8e:4a:3f:ea:a2:
                    c3:c3:90:57:80:b9:bf:5d:bd:d6:60:d1:e0:e2:b4:
                    b6:c4:59:ef:98:b8:df:10:1f:84:8c:1e:19:98:4c:
                    8f:82:db:49:da:62:a7:6a:e1:a9:dc:52:9b:8c:bc:
                    e5:33:26:82:9f:e5:2d:74:ff:6c:bd:b2:fb:79:96:
                    77:f7:9a:96:0e:bd:d4:1f:cb:a6:22:10:d1:db:6a:
                    81:cc:72:d1:50:53:3a:dd:33:3f:04:e0:1e:ff:b0:
                    67:91:86:6c:ff:0a:ef:23:02:8e:fc:7c:99:7a:94:
                    77:ae:56:d6:d0:8a:4b:c5:2d:99:00:63:d8:5c:ce:
                    38:d7:ce:38:a3:3a:90:30:5a:fa:98:ed:6e:9b:f0:
                    62:ec:75:16:4f:a0:29:20:a1:00:4d:57:2f:ca:d4:
                    53:48:50:13:c0:de:65:16:95:46:39:96:8a:55:ac:
                    ec:03:df:5c:05:ff:3e:39:df:4f:2f:8d:4d:6b:f6:
                    fd:29:4e:1d:d0:c7:da:5d:7f:67:21:e6:44:20:52:
                    9a:ca:c1:e3:34:70:4f:21:b2:2a:4b:6c:51:b9:ad:
                    72:62:28:59:df:49:fd:8e:0e:d0:e5:35:9e:41:d2:
                    fe:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:90:98:24:D8:9C:85:B2:29:41:B4:C9:40:60:F8:31:BC:EE:CC:D3
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3137392e3130372e3139322e302f31392d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:43:32:ff:15:be:94:e5:7f:9f:3e:1d:05:e0:52:ca:e2:c7:
         ba:38:cf:99:86:d2:2e:51:f8:49:c2:7f:a1:37:f6:32:04:08:
         c3:e8:0f:bd:be:38:0a:98:4f:ae:7f:8f:be:65:68:d8:01:1e:
         c2:99:e0:81:0b:dd:1a:a5:5f:cc:1a:11:69:ce:ba:a3:d4:e2:
         6a:27:57:59:f5:a5:c4:05:55:94:d7:59:38:d6:30:ff:46:8d:
         af:fe:d5:b4:23:32:95:b2:da:04:1b:6f:29:a5:9e:53:03:3c:
         c3:8b:5b:af:40:7c:19:9c:44:41:d9:ba:f8:a8:5f:2c:ab:2d:
         3d:96:2a:cf:fa:82:be:ba:73:e7:4b:7b:23:ee:c5:cb:bf:fc:
         45:7a:b1:5a:d8:af:1d:17:56:69:c0:df:46:04:18:11:2b:5a:
         29:fe:be:04:22:f3:b2:5b:8f:22:a6:de:cf:24:55:84:13:bc:
         c3:8b:d1:53:5d:a4:d0:44:5d:c8:83:3a:52:f6:5a:32:6a:21:
         91:78:c7:cf:97:4a:aa:36:6d:1d:2a:b9:77:14:09:30:0e:8f:
         6b:3b:bb:3b:96:8d:5c:d8:5d:dc:fb:35:48:1a:74:81:e1:f0:
         2b:26:3e:a2:15:fb:6f:08:e9:cf:ab:b0:e8:fb:c7:2f:c5:4f:
         2e:6a:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:45:48 2025 by rpki-client