Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32332d3233203d3e203238323532.roa
File:                     3137392e3138392e3234382e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          C1S9JBw7xaqMGW8QjbuGF4Qwa6iK75UbUpVoYdr/ps0=
Subject key identifier:   80:4D:D3:91:F3:15:D9:37:97:FB:A8:9A:BE:22:29:AB:91:D3:20:A4
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       3182735C0B8E8F95967ABA0B189A5D64319E16C7
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32332d3233203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:20 +0000
ROA not before:           Wed 09 Apr 2025 18:43:20 +0000
ROA not after:            Wed 08 Apr 2026 18:48:20 +0000
asID:                     28252
IP address blocks:        179.189.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 23:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:82:73:5c:0b:8e:8f:95:96:7a:ba:0b:18:9a:5d:64:31:9e:16:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:20 2025 GMT
            Not After : Apr  8 18:48:20 2026 GMT
        Subject: CN=804DD391F315D93797FBA89ABE2229AB91D320A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:ca:1b:4f:85:95:0d:09:87:6c:ae:81:85:
                    3a:dd:88:9c:92:ae:50:f1:18:0c:28:80:3c:ce:af:
                    32:0f:9f:7b:de:ce:25:b3:a2:6d:7b:cf:26:d6:f6:
                    4c:71:ca:18:94:10:0b:d4:52:e6:81:2c:13:ed:83:
                    57:8c:52:d0:cd:35:6a:8c:60:4e:29:dd:ec:61:0c:
                    0f:c8:c2:37:86:03:a9:72:76:0c:3c:92:3b:d7:11:
                    4d:1b:76:ad:f5:06:91:90:cc:6c:be:be:d1:ea:70:
                    34:1c:70:2b:04:1e:c8:f5:2e:03:dc:23:a4:61:c0:
                    8b:86:0f:28:19:85:84:44:40:45:98:b2:0f:b0:54:
                    59:7f:36:80:58:0a:9a:4c:ce:44:e1:32:ec:e9:c7:
                    3d:ca:94:2d:bf:a7:56:98:18:06:fd:76:d6:26:4e:
                    75:e5:f3:1f:50:47:81:2c:39:b9:6c:29:2c:c4:84:
                    29:e4:df:49:c5:e9:08:0a:91:8f:f1:b5:7e:77:48:
                    87:ff:df:bc:23:41:a9:b8:ae:0f:d4:b2:d5:1d:24:
                    27:2d:6c:d3:fa:f9:b4:39:b5:45:aa:be:0e:3b:61:
                    26:19:9e:73:79:9f:22:45:87:de:2a:81:9a:d3:21:
                    4f:73:cf:4c:a9:25:2f:d4:92:a7:98:b4:50:52:76:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4D:D3:91:F3:15:D9:37:97:FB:A8:9A:BE:22:29:AB:91:D3:20:A4
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:7a:9d:83:65:b7:06:59:58:9b:c1:64:da:cf:f0:5d:ef:a4:
         83:fe:7f:25:a1:98:37:b7:7a:67:e6:16:50:f2:d5:3d:67:90:
         2f:3d:b9:f5:3c:4a:77:59:15:d3:90:80:77:00:01:bf:57:ac:
         e1:40:e6:17:2c:0c:ae:61:20:f1:52:88:63:a8:a8:00:d6:6d:
         43:bc:35:46:2f:90:f0:af:0d:74:19:e2:04:91:2a:8c:fc:c0:
         05:f8:2f:03:a3:9b:68:01:b8:6b:ec:07:17:bd:56:ba:03:e3:
         cc:6c:ec:cc:2a:b0:ad:d2:23:87:ae:c9:ed:72:60:bd:15:40:
         26:b3:d1:90:1c:f3:4f:7d:d6:29:3e:ce:e4:47:1e:ae:3e:74:
         c3:54:66:f0:5a:42:2d:45:ef:1b:75:b7:31:c7:1b:96:74:f1:
         0f:0e:5b:88:00:76:d3:07:68:49:a5:ce:98:23:c1:e0:bc:04:
         b2:56:af:a1:bd:0c:27:cb:d0:16:80:15:70:ae:cf:bf:e4:1e:
         f8:21:6d:c3:65:4a:4b:22:5c:74:b0:86:14:c8:ed:cc:83:56:
         47:67:48:e5:b1:13:80:f1:c3:60:33:a2:51:94:a6:7a:e1:6b:
         48:f0:d9:e2:7d:7a:9f:ed:15:24:6c:c9:f1:cf:40:99:6d:c7:
         44:1d:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:13:13 2025 by rpki-client