Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa
File:                     3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier:          aa9SjDvs0oU+22XKSGehnMNSTBwMcsmXfyLku5gCZJw=
Subject key identifier:   EA:F8:45:7B:86:45:A1:F0:D8:2F:92:E9:D2:78:FA:4A:52:96:E5:4A
Certificate issuer:       /CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
Certificate serial:       1D717349031D2674C26AF7401B8DA9E7A7E8DAD0
Authority key identifier: B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa
Signing time:             Sat 03 May 2025 16:08:25 +0000
ROA not before:           Sat 03 May 2025 16:03:25 +0000
ROA not after:            Sat 02 May 2026 16:08:25 +0000
asID:                     271207
IP address blocks:        179.42.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl
                          rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 16:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:71:73:49:03:1d:26:74:c2:6a:f7:40:1b:8d:a9:e7:a7:e8:da:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
        Validity
            Not Before: May  3 16:03:25 2025 GMT
            Not After : May  2 16:08:25 2026 GMT
        Subject: CN=EAF8457B8645A1F0D82F92E9D278FA4A5296E54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:89:e0:98:44:fa:82:22:3e:7c:5b:82:92:
                    18:15:bb:9d:5d:50:4b:44:c4:e9:8a:07:f0:0a:ab:
                    50:ee:90:2e:b3:15:ba:24:57:6b:b1:36:48:10:e7:
                    38:be:e8:ca:f8:fa:6d:e7:5f:25:3c:8e:3b:99:a5:
                    77:82:76:e0:ce:76:af:a4:7e:d1:29:d5:45:72:1c:
                    62:a4:ad:1d:d6:d1:a2:b1:60:ec:0f:e3:0e:19:06:
                    fd:b3:2e:b6:af:cb:3a:7a:22:fa:55:2f:49:7a:9b:
                    ee:b7:c7:bf:21:d3:ce:fb:94:1b:06:72:b4:36:78:
                    69:71:46:8d:55:5f:aa:1a:85:80:1f:14:d8:0e:1f:
                    41:1d:4d:70:9f:d2:f5:6b:3b:15:c9:00:36:0d:e3:
                    d9:46:b5:3f:44:83:f8:81:e4:e1:77:ef:7a:57:02:
                    15:19:00:c0:18:19:29:e5:cd:33:bf:47:1b:2d:a4:
                    4d:41:73:03:05:c0:0b:8b:94:ac:11:a8:b4:0e:71:
                    6c:c0:6f:b9:fb:b8:a2:44:4c:f2:df:2d:59:a4:35:
                    35:09:c7:e9:19:78:84:fd:01:2d:d0:d1:f9:d0:42:
                    88:d5:38:1e:83:ad:d0:60:e3:bf:0c:52:45:f9:c5:
                    2e:46:6f:47:99:b4:f5:ab:39:4c:92:70:58:44:bf:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:45:7B:86:45:A1:F0:D8:2F:92:E9:D2:78:FA:4A:52:96:E5:4A
            X509v3 Authority Key Identifier:
                keyid:B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:b8:b1:0d:bb:92:91:bf:0c:48:e2:62:53:2b:9f:ff:3a:
         fa:86:14:40:14:58:9b:64:55:c5:81:07:13:21:f8:72:54:78:
         44:e9:4a:0c:01:79:b7:f3:c1:c4:46:b7:c1:09:24:f1:4d:6b:
         27:8e:7c:aa:0f:94:28:4b:41:89:af:80:f1:8a:15:dd:2b:d6:
         c6:cd:56:aa:ee:c7:2b:cf:a8:61:65:ae:7c:09:89:b2:a0:e1:
         a6:fd:3a:dc:e9:6a:b5:a5:0d:03:44:a5:26:9e:b6:58:b9:80:
         d0:d3:72:65:e4:4b:0d:bd:53:aa:ee:85:89:9f:3a:bd:4a:81:
         9b:7c:1e:0b:5f:57:12:48:f8:3a:bf:e5:98:d8:41:85:0a:58:
         05:30:ab:3e:df:a4:0a:c8:b4:7b:99:e2:9d:36:d1:3c:b2:2f:
         12:a1:47:75:ec:8b:53:86:1a:ea:fc:c8:47:08:06:a3:eb:77:
         cd:1b:cd:f3:3d:61:86:56:c1:17:0b:51:3e:88:20:fe:de:1e:
         f4:e4:42:1c:90:d3:3e:fe:83:20:a2:3c:7b:d9:4e:18:3f:9f:
         d8:58:a2:18:4a:b5:47:b9:3f:4e:bf:66:26:82:ba:37:32:fe:
         aa:e7:4d:d7:ef:cb:ad:fc:27:f7:2b:ea:d4:8a:3a:79:79:29:
         4c:c2:ce:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHXFzSQMdJnTCavdAG42p56fo2tAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZCN0M4MTA3NTE5REVFMkRDNjAyMzVERDg0MDA2REM2
M0VCODBGRTAeFw0yNTA1MDMxNjAzMjVaFw0yNjA1MDIxNjA4MjVaMDMxMTAvBgNV
BAMTKEVBRjg0NTdCODY0NUExRjBEODJGOTJFOUQyNzhGQTRBNTI5NkU1NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6ongmET6giI+fFuCkhgVu51d
UEtExOmKB/AKq1DukC6zFbokV2uxNkgQ5zi+6Mr4+m3nXyU8jjuZpXeCduDOdq+k
ftEp1UVyHGKkrR3W0aKxYOwP4w4ZBv2zLravyzp6IvpVL0l6m+63x78h0877lBsG
crQ2eGlxRo1VX6oahYAfFNgOH0EdTXCf0vVrOxXJADYN49lGtT9Eg/iB5OF373pX
AhUZAMAYGSnlzTO/RxstpE1BcwMFwAuLlKwRqLQOcWzAb7n7uKJETPLfLVmkNTUJ
x+kZeIT9AS3Q0fnQQojVOB6DrdBg478MUkX5xS5Gb0eZtPWrOUyScFhEv2uHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6vhFe4ZFofDYL5Lp0nj6SlKW5UowHwYDVR0j
BBgwFoAUtrfIEHUZ3uLcYCNd2EAG3GPrgP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ205ZXZlOUxaeHpwRDRid1pYYlE0YlpmRllBY1B6a1pTVjdncTR1RHp4
dzYvMC9CNkI3QzgxMDc1MTlERUUyREM2MDIzNUREODQwMDZEQzYzRUI4MEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QjdDODEwNzUxOURFRTJE
QzYwMjM1REQ4NDAwNkRDNjNFQjgwRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtOWV2ZTlMWnh6cEQ0YndaWGJRNGJaZkZZQWNQemtaU1Y3Z3E0dUR6eHc2LzAv
MzEzNzM5MmUzNDMyMmUzMTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMjMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzKogwDQYJKoZIhvcNAQELBQADggEBAKbZuLEN
u5KRvwxI4mJTK5//OvqGFEAUWJtkVcWBBxMh+HJUeETpSgwBebfzwcRGt8EJJPFN
ayeOfKoPlChLQYmvgPGKFd0r1sbNVqruxyvPqGFlrnwJibKg4ab9OtzparWlDQNE
pSaetli5gNDTcmXkSw29U6ruhYmfOr1KgZt8HgtfVxJI+Dq/5ZjYQYUKWAUwqz7f
pArItHuZ4p020TyyLxKhR3Xsi1OGGur8yEcIBqPrd80bzfM9YYZWwRcLUT6IIP7e
HvTkQhyQ0z7+gyCiPHvZThg/n9hYohhKtUe5P06/ZiaCujcy/qrnTdfvy638J/cr
6tSKOnl5KUzCzkw=
-----END CERTIFICATE-----
Generated at Sun May 4 03:12:40 2025 by rpki-client