Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235332e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3235332e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          i0b7GYP0gflnBzuwBHeYhZmmKMHKWoPhbSZSNps1uFU=
Subject key identifier:   13:14:15:1E:13:D3:CB:D9:1F:C7:12:D9:77:84:76:9F:23:EA:52:CF
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       33720949BCD388896F16D5A35D5EED20DDBC06D7
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235332e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:14 +0000
ROA not before:           Wed 09 Apr 2025 18:43:14 +0000
ROA not after:            Wed 08 Apr 2026 18:48:14 +0000
asID:                     28252
IP address blocks:        179.189.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:72:09:49:bc:d3:88:89:6f:16:d5:a3:5d:5e:ed:20:dd:bc:06:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:14 2025 GMT
            Not After : Apr  8 18:48:14 2026 GMT
        Subject: CN=1314151E13D3CBD91FC712D97784769F23EA52CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:95:e1:30:92:65:1b:5d:c1:ed:74:89:6f:b5:
                    c0:9e:6e:dc:c8:95:c9:aa:44:02:9a:af:55:78:24:
                    cb:1b:0e:8f:0d:7b:fa:02:c7:50:1b:52:f8:cc:5c:
                    05:ac:9f:ba:be:6f:d0:f4:66:2b:03:17:ee:9a:6f:
                    2d:6b:05:1c:a3:5e:25:a3:16:02:56:cf:67:cb:ad:
                    12:e1:86:06:9e:c3:c8:5b:80:c3:c8:a9:01:a4:50:
                    ce:de:62:c8:df:ed:06:8f:58:23:ed:ed:d6:2c:35:
                    54:50:df:1a:8b:c7:6d:4a:77:84:d9:b8:89:40:13:
                    32:52:df:29:70:f2:51:8d:c9:99:5f:3c:79:ad:6f:
                    60:75:ad:71:9d:79:f3:23:97:e4:19:60:97:01:91:
                    61:e8:28:87:fb:79:02:6b:c8:ab:22:5a:83:33:59:
                    27:dc:d3:37:33:26:ca:72:2b:7b:e7:90:54:45:67:
                    18:d9:21:f6:01:1e:34:dc:6e:04:2e:6a:e3:2d:86:
                    c1:78:db:a1:72:d4:cd:b3:22:61:b1:18:04:99:b2:
                    c1:1a:be:13:dc:a9:ab:1b:c0:18:23:63:f6:ca:cf:
                    c1:f7:65:56:73:b0:7c:b2:20:90:69:e9:0c:2e:ae:
                    33:6b:79:1c:80:52:fa:3e:03:0e:f6:41:1c:4b:43:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:15:1E:13:D3:CB:D9:1F:C7:12:D9:77:84:76:9F:23:EA:52:CF
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235332e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:ce:0e:3f:04:0d:e6:ba:f3:80:3d:f7:cd:3a:48:ee:25:
         0b:64:bb:ab:81:b0:5f:6d:0c:82:04:dd:a1:bc:79:62:26:24:
         3a:21:d1:de:90:80:8f:f2:5c:c9:b6:d8:79:27:ee:3e:dc:48:
         90:51:19:72:83:bf:c6:1a:02:d1:8d:56:44:a5:ef:c6:a4:f8:
         dc:95:e9:77:d7:c0:ae:6d:b2:5f:dc:3b:77:83:9e:b0:8e:5b:
         34:8e:89:c8:c8:91:6b:4f:e6:73:87:a8:47:eb:ff:73:bf:42:
         52:65:0b:29:36:5e:7c:75:aa:d2:dc:8d:46:19:7b:f2:ec:1d:
         18:b8:4d:00:78:e3:71:a2:40:5a:e0:f0:51:20:e7:81:a2:e5:
         bc:42:9f:8c:3c:1c:16:b9:1a:bf:2a:0b:fe:f9:d4:91:07:d2:
         e4:c3:78:60:ed:8c:cb:66:14:ba:5b:b7:4c:2b:87:53:f3:f7:
         17:3d:70:ba:4c:9e:df:df:b1:b1:96:6c:fa:43:51:bd:60:ee:
         24:54:12:a7:95:f0:35:bf:d0:95:89:9e:00:49:c6:b7:e8:2a:
         87:05:ab:10:99:ef:3e:f6:f1:bd:43:34:f1:8d:d1:f6:19:89:
         d8:2c:d7:0b:cc:0f:73:b3:86:89:89:f7:73:8a:23:00:32:ad:
         e0:88:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:56:15 2025 by rpki-client