Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32322d3232203d3e203238323532.roa
File:                     3137392e3138392e3234382e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          lWZ3D0jdai5agUSdX+st47rgzQHpj+rz0V0X1el1GZ4=
Subject key identifier:   10:6C:9F:96:40:2D:80:C4:3A:F9:F8:25:0F:24:07:24:F8:BB:B8:F0
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       76D3DF631DCC7CB39CB1F81065B07C0FA67EAEDC
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32322d3232203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:16 +0000
ROA not before:           Wed 09 Apr 2025 18:43:16 +0000
ROA not after:            Wed 08 Apr 2026 18:48:16 +0000
asID:                     28252
IP address blocks:        179.189.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d3:df:63:1d:cc:7c:b3:9c:b1:f8:10:65:b0:7c:0f:a6:7e:ae:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:16 2025 GMT
            Not After : Apr  8 18:48:16 2026 GMT
        Subject: CN=106C9F96402D80C43AF9F8250F240724F8BBB8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:67:42:3c:c6:e6:7d:73:71:95:af:50:a6:
                    b5:b4:19:56:f6:11:6b:cf:3d:58:9a:50:d1:ae:ba:
                    38:64:38:72:d6:f5:90:60:92:2b:87:86:0d:56:d0:
                    b5:2a:8d:59:64:72:c8:c8:99:c0:ab:1b:f7:94:58:
                    95:0f:f9:8b:0b:8f:5d:1b:18:c4:f6:d7:37:cd:d4:
                    8c:45:6f:8f:9d:d8:9b:45:3d:3b:01:f7:3e:63:b2:
                    02:28:0d:2f:0b:df:c6:6a:e2:34:38:04:3f:d9:92:
                    49:cb:04:d7:5f:3a:1f:f1:af:cf:7a:6f:7d:b3:67:
                    8a:b4:c0:ab:9b:69:75:f7:ad:c6:0e:43:0f:31:40:
                    1e:9b:9f:bf:0b:4b:49:04:34:00:21:dd:cf:48:b2:
                    bd:3e:d4:dc:84:b0:e3:12:29:b6:ff:c6:06:ae:15:
                    b9:f4:ef:0d:33:8a:20:e1:58:2c:c7:15:6a:89:29:
                    3a:c0:fc:46:5f:49:0e:3a:10:8f:74:3a:3d:b2:8a:
                    11:00:c4:f4:df:c6:e2:5d:1b:40:c1:2c:55:58:fc:
                    09:f2:22:18:31:57:95:df:cb:ce:d9:2f:2f:6c:ff:
                    9c:d8:b5:7f:f4:4b:64:fb:b5:9c:03:6b:b1:3c:15:
                    43:8f:50:69:2e:5c:11:47:c9:b2:c3:3a:80:44:38:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6C:9F:96:40:2D:80:C4:3A:F9:F8:25:0F:24:07:24:F8:BB:B8:F0
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:88:b0:d8:f3:58:44:09:9f:e4:e1:0e:29:99:38:f3:9a:03:
         5e:f1:69:e6:0c:f2:c2:ce:2d:ee:57:7f:bb:68:c2:64:ec:73:
         7e:12:40:c4:25:b2:ce:26:4c:1b:ce:2e:c3:6d:4d:f8:17:ff:
         9e:bd:53:fc:83:13:e1:09:0d:7c:f0:d3:95:c1:68:c4:1a:3d:
         cb:50:39:a1:33:ea:1c:87:8b:19:63:9a:bd:1d:0d:46:e3:fd:
         37:63:cd:48:aa:17:75:1b:56:0a:5a:07:fe:a4:65:98:9a:1c:
         2f:b2:9a:01:8b:56:46:b0:02:60:9f:68:a5:0e:2f:2e:c4:74:
         3d:d2:bd:bc:57:3c:86:24:a1:88:f9:0e:cc:38:be:f9:ed:af:
         bc:3b:5a:b2:d8:68:43:e4:36:e7:0e:16:fe:60:df:d8:da:80:
         4e:91:0e:3c:47:42:4e:5f:f5:29:5e:eb:b1:b5:e6:47:77:a4:
         37:f1:e9:25:ba:ee:6e:98:b5:3d:dd:14:b8:a0:09:f1:7f:84:
         0b:40:3a:0c:7c:43:10:d4:bf:8d:f0:41:d5:4d:4c:47:f5:06:
         05:a5:7e:0d:04:26:85:22:25:93:ad:f7:05:e9:7e:5a:fd:1a:
         85:78:d8:0d:6d:5d:17:cc:ee:16:0d:b7:43:83:3a:88:5a:b8:
         b0:bc:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:54:20 2025 by rpki-client