Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234322e302f32332d3233203d3e203238323532.roa
File:                     3137392e3138392e3234322e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          wqNhIG8OmlzOi3Nl16KPZQHgSGwliiuCyHjjyV9y/y8=
Subject key identifier:   14:24:C6:CC:B7:3D:31:01:D0:D6:16:0D:54:83:58:0C:94:7C:97:4C
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       3CA2D744C47B33D099F64FB4AD994F32FA033E2C
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234322e302f32332d3233203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:16 +0000
ROA not before:           Wed 09 Apr 2025 18:43:16 +0000
ROA not after:            Wed 08 Apr 2026 18:48:16 +0000
asID:                     28252
IP address blocks:        179.189.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 08:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a2:d7:44:c4:7b:33:d0:99:f6:4f:b4:ad:99:4f:32:fa:03:3e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:16 2025 GMT
            Not After : Apr  8 18:48:16 2026 GMT
        Subject: CN=1424C6CCB73D3101D0D6160D5483580C947C974C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:a8:a3:a9:4a:df:b8:e7:62:a4:30:c5:e4:
                    fe:dc:bc:ae:68:e2:ba:0e:3d:4d:3a:d9:59:ca:4e:
                    59:11:09:8e:2e:c1:b7:46:ac:44:e6:db:7d:91:01:
                    d3:04:c5:94:6c:d1:f1:81:11:3b:bf:91:ba:f7:0b:
                    9c:ae:c5:6b:d7:f7:6f:5e:b2:da:40:f7:58:26:14:
                    40:ef:7a:4e:89:cd:56:7d:f9:01:02:0f:63:80:f1:
                    55:06:27:f3:8b:0c:90:66:6d:a4:b8:90:8c:0f:70:
                    7b:5f:63:a1:ba:6f:e3:f7:11:03:4f:c4:9b:a4:b9:
                    52:32:21:6a:63:e9:2e:b8:04:1f:e8:49:b0:ee:de:
                    44:f4:64:07:a4:e7:70:03:4e:84:29:63:c5:eb:b0:
                    ea:82:8e:3a:1e:1c:6b:a8:1f:76:45:62:69:44:7b:
                    e1:fc:df:b0:3b:9d:1d:fb:31:e1:fc:91:ab:4f:f2:
                    26:32:fb:1c:b8:30:1e:3c:bb:f7:51:4f:20:c1:16:
                    f1:3d:e8:2e:5f:40:64:eb:7e:ee:5d:a5:10:d3:83:
                    49:6b:ec:43:ac:1e:6f:70:b7:bf:42:33:d9:ac:5e:
                    e6:d8:51:df:95:9c:d6:2a:ed:34:5c:bd:4f:72:5a:
                    ae:74:c9:cc:e1:3a:c2:f8:36:e4:f7:d6:d0:c3:0a:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:24:C6:CC:B7:3D:31:01:D0:D6:16:0D:54:83:58:0C:94:7C:97:4C
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234322e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:10:b3:ad:5f:56:58:cf:12:89:08:37:ba:83:0b:dd:fa:
         09:88:6e:58:e5:2c:53:11:70:73:5f:60:bd:4b:db:1a:93:dc:
         0b:7e:43:1e:92:3b:b5:7b:1c:19:c1:fc:0e:f5:c9:08:7b:da:
         3d:86:4d:72:4d:1e:f3:6b:e4:5a:48:65:70:47:91:79:09:83:
         d7:22:d1:dc:9e:35:fd:39:65:f1:ba:e8:8d:ec:51:d7:33:2e:
         00:bc:8b:bc:ac:ce:d3:12:53:5f:41:9a:d2:d2:2b:8d:7c:4b:
         9b:a9:a5:e7:ed:65:50:49:cd:03:40:ff:2f:41:96:92:e4:2a:
         35:81:b3:e4:45:f3:80:79:0c:ad:a0:7d:6c:3f:68:88:2e:ef:
         2f:79:e0:06:09:3d:b1:62:4f:9c:15:a9:1c:cf:18:bc:23:39:
         85:a7:fa:f2:88:ec:61:7b:e2:cb:9c:6d:ab:96:1a:c5:cf:ae:
         ea:83:ec:0e:e6:71:d0:06:71:c3:23:d7:fe:34:92:15:e8:47:
         06:68:21:e0:e4:44:37:ee:fd:23:45:62:40:cc:de:ba:e1:4d:
         95:ec:88:82:a3:9b:46:13:5c:af:61:95:a9:d8:60:07:69:4c:
         41:79:28:7d:75:e8:4a:6a:cd:9c:4c:47:31:ee:87:02:53:6c:
         96:ec:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:44:01 2025 by rpki-client