Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3235342e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          FeH+J1Vjj+QrHwmkrrxPk6Q7arXlqvLc4S6DYUPiusY=
Subject key identifier:   74:42:CB:51:D6:18:71:BD:94:BF:A4:9B:0E:0B:BC:DF:5F:6A:E3:F1
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       0FC489E57A78BF94E4FD812AB9988D3876956B90
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:48:22 +0000
ROA not before:           Wed 09 Apr 2025 18:43:22 +0000
ROA not after:            Wed 08 Apr 2026 18:48:22 +0000
asID:                     28252
IP address blocks:        179.189.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c4:89:e5:7a:78:bf:94:e4:fd:81:2a:b9:98:8d:38:76:95:6b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:43:22 2025 GMT
            Not After : Apr  8 18:48:22 2026 GMT
        Subject: CN=7442CB51D61871BD94BFA49B0E0BBCDF5F6AE3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:eb:f9:7a:74:e2:47:74:87:0a:60:c2:30:ff:
                    8b:ad:05:fc:79:32:9d:44:ea:ac:e2:92:6c:1a:1b:
                    bb:90:75:5f:3b:b7:3d:ef:82:06:e3:97:9d:0c:37:
                    78:8f:da:48:b0:c9:06:34:cc:a5:73:0b:de:16:b3:
                    79:b6:e8:99:f4:fe:e3:c3:0c:ce:55:18:57:97:62:
                    d6:70:eb:b6:7d:28:2a:ba:05:a6:ce:77:da:55:4c:
                    5b:59:07:1a:8d:fe:42:9c:91:de:e1:51:ea:75:2d:
                    e7:a2:ad:a2:3b:93:ce:5b:4b:b3:f1:92:4a:8c:da:
                    54:df:d1:4b:18:7a:db:0a:23:f9:57:5f:3d:05:6d:
                    9c:e6:14:34:32:f2:6d:7a:8a:07:8f:7e:95:9e:11:
                    1b:62:69:5d:a0:66:c3:5d:b8:21:cf:c8:6f:17:8b:
                    a3:84:18:94:28:cb:80:88:8c:6c:4e:6e:71:8a:3c:
                    1d:f3:db:64:ea:6b:75:6e:9b:24:d3:6e:49:c3:04:
                    d1:28:f9:33:19:50:ba:28:32:24:d6:90:a7:9c:77:
                    79:74:68:9c:58:e9:2b:fa:2e:d2:f0:44:df:61:40:
                    87:b1:89:d6:81:2d:a0:5e:e9:f6:4c:9d:05:2a:28:
                    53:60:fe:e5:51:f2:33:53:4d:77:d7:69:a4:41:2f:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:42:CB:51:D6:18:71:BD:94:BF:A4:9B:0E:0B:BC:DF:5F:6A:E3:F1
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:00:7c:18:99:f1:44:7a:26:6e:eb:6e:05:97:2a:c6:42:0a:
         f3:62:f8:7d:40:c1:02:5d:f9:ae:16:30:25:a7:e5:fb:ba:e2:
         52:34:8e:a4:c8:d9:ae:41:fa:a4:fb:8f:3e:cb:aa:5e:81:e7:
         f6:44:2a:5b:a3:0d:46:8b:05:fb:94:04:c6:41:b9:ff:03:02:
         41:2f:2d:f7:93:3a:ac:d3:63:dc:0c:51:6c:db:0d:93:40:cd:
         c7:ac:b6:6a:cc:ca:b2:ab:90:5e:b6:43:cd:f2:aa:e3:a5:3d:
         7d:ca:4a:2a:33:c8:81:70:aa:c5:d6:66:98:85:9b:73:f4:76:
         51:e0:0d:9a:6b:db:6c:5c:f1:2b:0c:6a:36:97:4d:d7:a9:88:
         b9:b2:2f:05:7e:de:e6:f7:6a:d8:65:b1:47:3a:47:1b:99:0a:
         de:e6:76:ae:8a:16:b7:04:fc:47:58:df:50:0c:17:55:1a:73:
         c7:ca:94:25:b1:cd:6c:ab:f2:97:e5:d9:7c:d3:42:07:e9:f3:
         31:9b:3c:30:98:ae:54:33:48:04:ac:07:ae:c5:3d:69:71:2e:
         9d:43:3b:df:65:74:47:63:33:09:c1:e4:6b:31:4e:9c:e2:ca:
         ed:24:a4:01:1a:78:4d:bb:84:e5:7c:87:69:72:cd:aa:de:5a:
         ff:4f:f2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:41:11 2025 by rpki-client