Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137352e302f32342d3234203d3e20323731353636.roa
File:                     3137392e36332e3137352e302f32342d3234203d3e20323731353636.roa (raw, json)
Hash identifier:          n9ga9pqy00+yPEF53elALGDfDbP8YEdejz19ze84UNg=
Subject key identifier:   01:3D:6C:FB:D8:82:BC:3D:ED:02:C7:EA:0B:A1:F3:5A:E4:3C:D5:99
Certificate issuer:       /CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
Certificate serial:       406ED3C59AB6D3C39DA55C8FDF3EF6D3BD0F66F2
Authority key identifier: E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137352e302f32342d3234203d3e20323731353636.roa
Signing time:             Mon 02 Jun 2025 12:43:06 +0000
ROA not before:           Mon 02 Jun 2025 12:38:06 +0000
ROA not after:            Mon 01 Jun 2026 12:43:06 +0000
asID:                     271566
IP address blocks:        179.63.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl
                          rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 00:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6e:d3:c5:9a:b6:d3:c3:9d:a5:5c:8f:df:3e:f6:d3:bd:0f:66:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
        Validity
            Not Before: Jun  2 12:38:06 2025 GMT
            Not After : Jun  1 12:43:06 2026 GMT
        Subject: CN=013D6CFBD882BC3DED02C7EA0BA1F35AE43CD599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:4c:5c:d1:03:2d:77:a0:e1:ea:18:58:8e:
                    a7:7d:f1:23:48:88:af:9d:6a:35:12:2c:03:3e:bc:
                    6a:88:ea:e8:d0:54:71:1a:b7:c4:2d:06:27:dd:41:
                    8d:df:a2:6a:b7:d0:b9:05:96:ed:fe:ff:52:28:28:
                    d9:9b:a7:ae:8b:cf:04:ed:43:98:2a:76:5f:de:ff:
                    87:64:4e:d1:0a:38:93:f2:ad:ea:41:8b:a9:73:47:
                    88:a2:07:2a:06:ee:c8:e9:5f:36:ce:b5:f8:58:62:
                    8f:54:a1:ab:dd:4c:f6:c0:c8:a9:01:fa:8a:54:d7:
                    96:66:f7:34:ba:ff:07:bb:40:05:2e:28:65:22:ba:
                    6f:1e:5a:5b:25:7e:f5:a2:ff:8c:8b:2a:11:49:de:
                    ea:d5:5e:cc:ee:69:6f:f7:b6:98:83:fe:99:8b:ec:
                    ae:4b:8f:f4:e1:b6:c1:9f:c4:cb:28:1d:82:86:20:
                    85:f4:5e:84:d6:dd:5b:f3:1e:ae:0e:be:3c:5a:82:
                    c0:56:6b:32:82:83:c3:6c:fe:87:af:cb:2e:7a:10:
                    c2:c8:40:f1:c9:31:2a:b1:ae:cf:a8:ff:af:30:3e:
                    46:6b:f9:02:b8:ef:25:2b:b6:23:b1:63:cf:8c:84:
                    22:16:e1:22:83:2c:5c:1f:81:9c:8b:76:47:f3:25:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3D:6C:FB:D8:82:BC:3D:ED:02:C7:EA:0B:A1:F3:5A:E4:3C:D5:99
            X509v3 Authority Key Identifier:
                keyid:E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137352e302f32342d3234203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:e3:3b:e6:0f:cf:82:1b:e4:9b:26:92:65:51:5e:94:35:ce:
         48:98:e4:70:27:ac:bf:b7:58:3d:b9:51:5b:85:3b:fa:ae:46:
         bb:c2:3a:bf:26:d8:fe:dc:e5:d8:af:24:69:c0:e4:77:af:57:
         1b:cc:24:f7:06:f0:f5:67:bd:c3:8c:6d:64:84:d4:f7:65:44:
         3a:a2:9c:eb:3f:c9:10:5a:b7:64:63:38:d3:1d:fc:ec:cd:a1:
         50:2b:49:11:99:1e:ee:e4:b2:5a:2b:9e:ed:c6:8b:a3:c3:81:
         e0:31:58:5f:86:87:64:a8:cc:32:21:a9:e2:e9:b8:38:b9:f1:
         70:b9:84:bd:fa:2f:64:7f:02:7e:05:53:d5:9f:0e:0d:6c:26:
         a1:71:13:30:34:9c:d1:68:4f:61:7d:52:07:e5:9f:90:71:c5:
         68:7d:20:6a:f5:b5:63:f5:12:3c:ad:e4:d4:26:b6:53:33:09:
         a8:3e:2a:07:65:66:61:27:b6:35:f7:99:64:96:98:91:de:fe:
         48:33:51:59:22:24:6f:dd:96:9c:b7:97:2c:6c:7f:f8:8f:e1:
         d0:d2:a9:a3:b8:a0:f1:42:c2:ba:fc:d0:3f:c0:00:06:a6:cb:
         35:5b:9f:cf:46:d4:7e:42:5d:a7:69:3a:3b:99:d3:08:cc:90:
         c8:70:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 04:58:40 2025 by rpki-client