Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa
File:                     3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier:          qZy9fPd4Vu9sl76+cmOuqkV1ZcaSruTCEskq7mXpea0=
Subject key identifier:   C1:41:AD:61:4B:1E:59:70:D7:4B:F3:10:A9:42:23:DB:98:F5:9A:DF
Certificate issuer:       /CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
Certificate serial:       63962B70916F9A16A888B0BBB9658CE9E35D68BE
Authority key identifier: B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa
Signing time:             Sat 03 May 2025 16:08:25 +0000
ROA not before:           Sat 03 May 2025 16:03:25 +0000
ROA not after:            Sat 02 May 2026 16:08:25 +0000
asID:                     271207
IP address blocks:        179.42.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl
                          rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 16:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:96:2b:70:91:6f:9a:16:a8:88:b0:bb:b9:65:8c:e9:e3:5d:68:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
        Validity
            Not Before: May  3 16:03:25 2025 GMT
            Not After : May  2 16:08:25 2026 GMT
        Subject: CN=C141AD614B1E5970D74BF310A94223DB98F59ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:2a:bd:47:4d:a3:a3:0e:9b:07:72:4d:2e:
                    34:fe:fa:87:f9:d6:d5:fe:46:91:3e:15:6e:63:51:
                    9d:f7:d2:32:e1:43:6e:6a:dc:47:f6:4a:d7:73:65:
                    42:8f:1b:f8:cb:63:85:ef:51:a0:f0:fc:62:a4:a4:
                    bf:4e:c1:ac:a8:b4:76:1a:db:58:d8:47:1c:69:be:
                    08:11:0c:8c:1d:a3:5b:bd:e7:69:c2:40:3e:b0:3d:
                    e4:f9:83:23:df:ec:02:5b:50:1b:36:b9:e0:a5:93:
                    25:ca:18:81:53:9e:13:b0:da:2d:01:19:8f:56:47:
                    a1:77:08:91:51:47:c1:31:12:31:30:71:45:72:61:
                    98:e2:34:03:46:ae:15:61:b0:24:78:4b:5d:f0:63:
                    e3:7e:df:8c:67:62:a4:b4:62:87:e2:35:84:0f:89:
                    51:9f:bc:b8:7f:8a:f3:37:0f:be:ba:48:ce:6b:0d:
                    57:75:61:cd:84:41:b0:93:62:7b:2d:38:a2:af:c2:
                    e7:f1:2a:4f:50:f2:24:3a:d0:da:b7:34:ac:c3:68:
                    2a:c2:e8:30:0c:7f:7d:5f:06:85:0b:cb:ac:1c:21:
                    bd:69:ed:c6:f2:0c:3d:f3:05:6a:67:b5:58:0c:14:
                    1d:e5:7d:34:2c:dc:80:87:9c:20:75:ea:ca:e0:8d:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:41:AD:61:4B:1E:59:70:D7:4B:F3:10:A9:42:23:DB:98:F5:9A:DF
            X509v3 Authority Key Identifier:
                keyid:B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:db:48:18:6e:e7:eb:31:24:df:9a:69:e9:57:a6:97:76:87:
         f7:ef:77:44:d8:6e:9e:e2:1f:0a:ed:f3:6f:bd:c9:a8:f5:80:
         0c:6c:3c:39:c8:56:0f:c4:cb:3c:b4:2e:7e:3b:ff:b7:a0:62:
         c4:2a:81:11:b2:8f:9a:16:33:e9:ff:7f:0e:11:b5:ac:bd:c0:
         fd:4b:1c:11:bc:8f:61:39:95:f4:ad:6a:1a:00:a3:f5:54:90:
         fb:e3:6a:5d:f4:2d:59:92:36:06:a0:78:11:57:c6:ce:49:78:
         b2:99:fe:2b:e2:f5:cb:fc:e1:12:30:42:d8:3c:4a:a0:bb:66:
         d2:82:b0:2f:cf:d7:9f:1f:0b:5c:f2:8b:a2:d4:71:34:02:cf:
         f8:ff:e4:b1:54:d9:45:22:ea:d5:83:63:42:d0:e0:01:f4:c3:
         2d:8b:cf:cc:40:15:ee:14:96:a6:97:43:6b:26:b5:92:ac:49:
         4d:4b:b3:88:7f:4c:6c:4e:37:3e:58:a2:73:b7:02:13:46:2b:
         c4:03:c4:ac:26:78:44:dc:ca:70:33:f2:88:4f:3c:07:37:68:
         1c:46:f7:1c:b9:70:43:3c:5e:81:43:92:3c:82:02:2e:3d:d5:
         6d:02:6b:f5:a3:d0:c0:1a:8e:c7:47:c6:00:30:42:8f:88:a6:
         f5:51:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:12:41 2025 by rpki-client