Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/3137392e3132342e3231322e302f32322d3332203d3e20323731363136.roa
File:                     3137392e3132342e3231322e302f32322d3332203d3e20323731363136.roa (raw, json)
Hash identifier:          8MOTu8eWxWJdOyb3Rj+44q1aBxu7QzXcDhIUq8fF8wo=
Subject key identifier:   00:38:98:F0:FE:A7:02:46:28:0B:60:31:1B:07:E6:6B:18:E3:DA:35
Certificate issuer:       /CN=8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA
Certificate serial:       636832C2F6324312156F20D751E8C90EEA34290E
Authority key identifier: 8C:6C:46:F6:D7:FA:4B:15:66:FA:D6:07:9B:92:B6:C7:C4:F9:13:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/3137392e3132342e3231322e302f32322d3332203d3e20323731363136.roa
Signing time:             Wed 11 Jun 2025 21:29:15 +0000
ROA not before:           Wed 11 Jun 2025 21:24:15 +0000
ROA not after:            Wed 10 Jun 2026 21:29:15 +0000
asID:                     271616
IP address blocks:        179.124.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl
                          rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 21:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:68:32:c2:f6:32:43:12:15:6f:20:d7:51:e8:c9:0e:ea:34:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA
        Validity
            Not Before: Jun 11 21:24:15 2025 GMT
            Not After : Jun 10 21:29:15 2026 GMT
        Subject: CN=003898F0FEA70246280B60311B07E66B18E3DA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:f2:7e:f6:fe:db:93:11:f2:4d:d0:84:bb:
                    98:d2:01:d8:9d:5d:c7:5f:ee:c4:4a:12:07:c1:81:
                    a3:29:fa:f8:64:93:2e:d3:d9:0d:2a:a8:67:c4:84:
                    5a:aa:da:e3:ee:4f:2a:43:2d:fc:6c:1c:98:d2:40:
                    83:bf:e6:6b:70:db:f1:77:e8:62:6b:9f:3b:68:54:
                    5a:9b:20:9e:45:2c:57:36:08:4b:60:13:db:24:65:
                    62:1f:a7:90:b7:c5:9b:e9:07:b1:03:27:e0:a6:a8:
                    9c:ba:44:e7:82:d0:5d:df:2c:1e:54:8e:7f:3a:e7:
                    66:3c:76:ca:4d:a0:ac:ad:15:3a:f2:82:7d:dc:c7:
                    54:bc:8f:6b:ed:31:19:c0:c3:12:eb:2b:db:b9:42:
                    32:68:45:ea:dc:3b:2d:fa:b9:34:74:e7:6b:34:b5:
                    90:6e:b3:1c:31:19:c0:cd:5f:52:65:f1:8b:04:d9:
                    60:e2:6e:bb:7f:4f:51:65:21:16:a4:83:00:b8:e1:
                    7c:be:fb:b4:83:3b:6f:e6:e1:12:10:ba:ee:3a:58:
                    11:da:ed:ca:fa:aa:71:5e:f5:c8:84:fe:ad:ef:5a:
                    90:91:d4:63:5b:f8:17:fe:f4:25:f3:f6:f7:3f:a0:
                    e5:48:1f:70:14:57:de:c7:d3:c5:a4:94:45:9d:e7:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:38:98:F0:FE:A7:02:46:28:0B:60:31:1B:07:E6:6B:18:E3:DA:35
            X509v3 Authority Key Identifier:
                keyid:8C:6C:46:F6:D7:FA:4B:15:66:FA:D6:07:9B:92:B6:C7:C4:F9:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/3137392e3132342e3231322e302f32322d3332203d3e20323731363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:37:d9:86:38:a4:3e:86:30:79:88:38:4a:8f:ff:34:e0:
         00:40:87:b3:92:4b:3a:45:7e:21:2a:bc:16:a9:10:ab:f7:7a:
         7c:86:8e:0c:8d:df:07:a9:7c:22:fa:1a:8c:e6:7d:0f:92:a8:
         50:dc:65:cd:ea:60:a7:f4:ac:61:17:96:6d:80:cc:07:59:c4:
         fe:e4:87:7d:81:4c:6f:a2:05:77:fe:17:e5:3f:b8:23:57:66:
         36:17:5e:f8:2a:71:2b:c4:d1:8f:7c:ad:ac:3a:d0:6d:27:c8:
         34:68:45:c0:17:f0:8f:d1:a9:28:c8:9f:3e:11:87:c2:b5:e9:
         03:3e:a3:14:b2:29:73:92:b4:c6:26:aa:3b:53:eb:04:3a:6d:
         f1:c3:c7:06:de:bd:43:e3:5a:fe:5b:db:bd:0c:72:85:25:e1:
         8c:ae:35:28:36:1e:1b:16:3a:42:c5:29:87:13:9c:1d:56:30:
         97:00:33:df:0e:57:e1:a8:74:12:05:3d:ed:39:26:33:43:36:
         96:b7:ed:b9:67:de:30:93:d6:c4:ce:09:34:11:22:34:c0:5a:
         02:13:f2:23:5a:88:85:e2:f3:7a:da:7d:3d:c2:98:26:51:94:
         5a:b5:2e:2a:e0:da:f4:30:ca:9e:0f:e5:33:1e:74:5c:4b:45:
         26:3f:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:45:16 2025 by rpki-client