Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234352e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3234352e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          LAwR/0OU4lBaLxwPjB0wamwBLTkx8++Kw4RXF3pz+vg=
Subject key identifier:   0F:E6:DE:A1:60:B7:D6:D9:EE:CA:45:E4:2D:CD:7C:A0:B4:7C:BE:25
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       237811E0CF42FF370524236459B964D3582519B0
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234352e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:17 +0000
ROA not before:           Wed 09 Apr 2025 18:43:17 +0000
ROA not after:            Wed 08 Apr 2026 18:48:17 +0000
asID:                     28252
IP address blocks:        179.189.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:78:11:e0:cf:42:ff:37:05:24:23:64:59:b9:64:d3:58:25:19:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:17 2025 GMT
            Not After : Apr  8 18:48:17 2026 GMT
        Subject: CN=0FE6DEA160B7D6D9EECA45E42DCD7CA0B47CBE25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:bf:26:58:d6:c8:87:63:4f:f5:3c:a4:c5:
                    81:b3:ea:b8:41:0f:91:2a:ee:26:aa:ed:0e:60:7c:
                    72:39:c7:63:d3:28:83:ee:92:76:f4:e2:7c:5d:14:
                    36:e3:d3:a8:5a:d6:2e:c4:b2:6a:b3:17:8b:3f:0b:
                    51:16:6f:07:dc:70:9b:9c:ee:75:bb:d2:cd:01:c4:
                    bb:2d:57:d8:b6:ce:0b:05:93:66:6e:c9:c5:9e:a2:
                    ba:2b:4f:c9:24:d6:5f:55:b3:a0:35:1a:24:53:22:
                    5f:66:3d:2c:38:5a:03:b7:ab:5b:68:5a:be:2d:8b:
                    5e:d9:f0:b0:42:05:cb:21:2b:04:5d:42:a0:db:71:
                    85:e0:ae:c6:53:5e:5f:51:30:86:4b:25:a6:50:0e:
                    0e:f4:37:70:f2:f8:b8:99:7b:8c:6f:71:e9:c3:44:
                    0d:36:76:57:93:48:8c:e1:7d:d5:20:8e:56:3c:d2:
                    a7:56:4a:8a:31:66:85:61:ed:7f:c9:36:f6:14:25:
                    48:b7:d6:e0:52:12:82:f4:a9:10:4d:5b:07:8a:ee:
                    07:59:01:32:4e:c0:af:d5:ed:9a:6d:bf:e4:d3:59:
                    2c:2f:b2:bc:a5:fa:17:4e:1b:a1:ae:48:57:80:ac:
                    21:97:ee:08:b5:45:8b:16:a0:06:19:cf:de:4a:41:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E6:DE:A1:60:B7:D6:D9:EE:CA:45:E4:2D:CD:7C:A0:B4:7C:BE:25
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234352e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:57:60:14:8d:84:f3:63:fc:75:02:dc:98:fc:00:2f:62:
         8c:94:6e:5e:c3:bb:4d:1d:ea:06:e8:83:b4:4e:93:22:96:14:
         74:87:be:7b:5c:62:96:ab:49:6f:1a:ed:82:ea:77:8d:2b:82:
         a8:61:d6:ab:00:e2:fb:af:5f:56:24:1d:5b:eb:0f:fb:e4:fc:
         cb:3d:52:1e:38:12:f3:f6:55:87:9c:1f:04:34:1b:f9:d9:9b:
         61:57:17:5e:93:72:89:e5:4e:6f:a2:40:cd:cb:3b:4d:59:be:
         79:d2:16:b6:35:20:6f:c0:1a:4b:55:09:d9:51:63:32:d7:94:
         7d:0e:f1:39:0c:05:be:41:c6:1b:1a:b3:20:b1:e6:8b:87:c6:
         60:d0:04:38:4a:e6:9e:98:ab:89:6f:e3:56:63:18:fb:ba:22:
         33:2a:99:df:e9:cf:64:8b:e9:e3:f5:b8:ae:78:bc:ee:4f:ab:
         71:c1:48:52:26:0c:ea:65:1e:f9:24:a1:d8:1b:9b:3a:9d:36:
         ab:f5:1a:85:36:f9:9b:51:57:2d:d4:2e:56:5e:da:9e:72:97:
         af:1e:64:4e:5e:4f:62:7e:34:7e:a6:5c:78:be:bc:fb:dd:ac:
         3d:e9:b3:39:14:f3:ed:b7:e8:a9:2b:43:69:30:dc:99:72:2a:
         ad:f7:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:28:40 2025 by rpki-client