Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234322e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3234322e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          uh0zqUmBAs5YhsEmTgfvisnwY4C2CEf3OnT0qfK3hzY=
Subject key identifier:   DC:68:39:62:D4:70:34:41:B4:38:D1:B6:93:C4:0F:9C:33:2E:1F:F2
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       4282F6C6CBB539F41C2ED17953F7FE8ADE8A941A
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234322e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:21 +0000
ROA not before:           Wed 09 Apr 2025 18:43:21 +0000
ROA not after:            Wed 08 Apr 2026 18:48:21 +0000
asID:                     28252
IP address blocks:        179.189.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:82:f6:c6:cb:b5:39:f4:1c:2e:d1:79:53:f7:fe:8a:de:8a:94:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:21 2025 GMT
            Not After : Apr  8 18:48:21 2026 GMT
        Subject: CN=DC683962D4703441B438D1B693C40F9C332E1FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:27:85:a1:27:b8:e0:56:ab:76:0a:18:3f:
                    cc:d4:14:a9:0a:7d:bd:db:e9:57:b1:2c:b7:cf:99:
                    c7:d5:b7:1d:01:7d:fc:75:5a:52:e4:61:83:8d:ec:
                    4a:bf:cc:78:29:26:59:72:e1:8c:b0:fa:61:a6:33:
                    d2:1f:38:ce:02:ac:b4:87:7d:2f:59:bf:41:44:98:
                    46:9c:4b:3f:ca:e1:f0:dd:e2:d5:ad:52:ce:4f:09:
                    05:19:a8:85:df:9f:87:72:e2:6c:60:56:ba:1d:28:
                    14:60:49:bc:21:dc:d5:35:14:b5:06:49:d6:e0:74:
                    6b:62:26:8e:78:13:ee:cd:92:dc:2f:b1:db:98:e3:
                    2d:c9:30:17:54:c1:9f:f5:63:6d:8f:48:9c:c5:0d:
                    48:49:02:f3:60:5f:71:72:31:94:47:16:8e:4d:a7:
                    f8:bb:22:90:00:2e:53:71:5d:4a:1f:45:67:11:91:
                    6a:19:f0:72:75:69:eb:70:c8:e5:8b:2a:2f:e9:36:
                    91:f8:28:ac:08:b9:ec:44:c5:03:fd:dc:70:e9:4e:
                    be:92:51:af:bc:42:c9:f8:09:4b:96:a9:10:64:f5:
                    a0:b4:b0:8e:e9:18:9c:ec:44:e3:eb:59:5d:c5:2a:
                    12:41:a9:fd:64:6f:8e:5f:db:f6:87:ca:08:f6:d4:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:68:39:62:D4:70:34:41:B4:38:D1:B6:93:C4:0F:9C:33:2E:1F:F2
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234322e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:99:49:9e:72:91:10:a4:11:42:d3:c5:ce:0e:83:29:45:9a:
         e2:6e:8f:ac:3b:1f:ec:82:31:0d:d0:80:de:f7:ad:eb:62:b4:
         a1:4c:cb:23:d2:6a:4e:f9:4f:06:2f:3f:36:69:b0:aa:47:6c:
         e6:7c:b8:39:b2:13:29:a9:e9:00:ab:d3:3c:a2:ff:1c:75:4b:
         1a:29:5b:70:aa:36:ae:c0:3d:16:4d:0a:17:2a:01:50:1d:3b:
         9c:4e:8d:3f:27:e3:f9:fb:b9:a5:0d:7d:21:7b:df:1b:f1:3e:
         5d:da:54:12:90:d0:3f:e4:fa:dc:21:7c:e2:e9:6c:a8:7a:ee:
         59:5d:dc:78:fd:f0:1b:c0:41:25:56:f4:76:2e:b3:ee:55:25:
         5d:56:e7:60:d5:cf:86:0d:7e:ef:d5:e6:3a:3b:3e:22:0d:9e:
         d6:0c:04:83:81:29:3f:0e:48:10:8e:30:d4:4c:57:6f:32:67:
         6f:e4:8f:e1:b4:33:2c:75:5b:12:b9:60:b6:a8:2d:92:f0:26:
         10:f2:b5:12:0f:24:8b:b1:d7:d8:6c:11:2d:12:cd:56:af:04:
         4d:b0:c0:a0:1a:91:40:bc:15:f8:04:b0:4b:d1:6c:a1:bc:9f:
         a1:8c:77:51:3d:d6:6f:e6:98:f7:18:21:5f:50:45:13:53:e6:
         e9:39:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:33:07 2025 by rpki-client