Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234312e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3234312e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          BsVWl7BBddsoNuHOm0kloFkIVfOh6GvPcDwnA9kIkz0=
Subject key identifier:   26:BB:E1:9F:26:05:90:35:26:B9:00:93:72:42:07:7A:7C:E9:42:16
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       6D224AB45C1D71CEE17A1D2195F53E4BE907C166
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234312e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:19 +0000
ROA not before:           Wed 09 Apr 2025 18:43:19 +0000
ROA not after:            Wed 08 Apr 2026 18:48:19 +0000
asID:                     28252
IP address blocks:        179.189.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 09:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:22:4a:b4:5c:1d:71:ce:e1:7a:1d:21:95:f5:3e:4b:e9:07:c1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:19 2025 GMT
            Not After : Apr  8 18:48:19 2026 GMT
        Subject: CN=26BBE19F2605903526B900937242077A7CE94216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:16:c3:e6:43:7a:25:0f:f9:c2:52:9b:40:
                    2f:ed:3c:b8:07:dd:a4:e7:7a:ef:49:ae:8d:27:b7:
                    3e:e4:0c:bf:26:19:f6:cf:f0:dd:24:98:d3:5c:70:
                    b6:24:9f:e3:c5:e3:fa:95:87:b5:1f:8e:a2:43:36:
                    9d:2a:94:ce:f8:c4:f3:a9:3c:c2:5c:e4:82:97:7c:
                    a4:c8:32:fc:d6:19:b1:cd:72:d5:ce:25:b8:dd:c4:
                    f8:06:ec:95:f5:82:a7:95:e0:b5:7d:e7:25:ae:9e:
                    4f:99:5b:73:9a:08:80:a3:4c:31:04:82:83:44:2a:
                    00:ec:20:f8:b7:aa:4d:1a:52:00:25:46:0e:93:1d:
                    46:5c:f9:85:97:df:b0:b3:5a:07:58:6d:a3:33:f6:
                    e1:f7:10:52:95:32:69:2f:13:e4:26:02:66:eb:77:
                    6b:3e:85:ab:48:ae:3c:56:5e:41:e3:8b:39:cc:dd:
                    8c:66:1b:a7:d2:57:70:51:85:80:46:23:23:5f:05:
                    cf:e1:22:0f:ce:f7:4c:c8:b9:09:6a:99:da:d2:29:
                    30:ce:91:d1:7f:40:14:7c:7c:d5:68:ae:ce:d0:6b:
                    41:71:3e:f3:75:2b:e2:f1:d1:f1:b6:02:cb:2e:ba:
                    70:c7:84:eb:93:17:59:1d:87:c0:54:27:8a:36:bf:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:E1:9F:26:05:90:35:26:B9:00:93:72:42:07:7A:7C:E9:42:16
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234312e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:37:8d:b7:e8:c6:a9:00:15:3b:5a:fb:40:9f:6f:33:45:
         b9:43:a1:3b:a8:1c:a6:7a:84:b0:a7:f9:3f:29:2b:06:f1:90:
         f8:5a:d8:cf:15:de:46:93:52:bc:68:89:6b:1c:a7:84:69:c4:
         d6:bf:65:49:fc:ae:97:4c:51:08:f4:79:1f:93:71:5c:f5:4d:
         b4:1b:6b:a3:cd:15:64:ee:fd:3a:fb:2c:5c:4b:13:1b:00:4f:
         c9:71:c7:0e:6b:93:0f:a4:6a:4c:23:9e:7e:e2:66:57:36:5c:
         af:99:cb:82:b7:bb:e1:63:a6:5f:63:3c:f3:6b:5d:a0:a7:b7:
         c7:66:41:01:79:2d:c2:7b:72:e5:cf:65:46:ab:7d:93:96:ea:
         7b:be:72:96:b2:6f:48:bf:62:ec:79:fe:eb:5c:b7:9f:90:70:
         5a:fc:97:e2:ff:50:75:cc:86:8f:c8:c9:f2:f4:d3:99:ee:1b:
         05:43:a7:28:5f:11:78:c6:88:1f:e2:26:6b:3c:3f:63:92:fc:
         ab:d4:4d:0b:34:7d:38:8a:0d:47:2e:ca:1b:72:2d:58:e4:4f:
         76:7f:cd:64:63:1a:5b:69:39:3b:97:46:29:b3:3e:10:6f:34:
         16:9b:bd:08:3b:1a:35:11:a2:5c:59:82:6e:ba:7d:81:e9:15:
         c6:03:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:54:11 2025 by rpki-client