Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
File:                     3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          65gA/77fIfi/AzedgoYOwttHc1VkZPbASGxxcWoce2U=
Subject key identifier:   2D:07:06:87:C4:9C:21:34:AC:A6:C6:85:39:25:77:DD:FA:C0:5C:85
Certificate issuer:       /CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
Certificate serial:       12174F31CD3663F15E2623011027F669229B57A3
Authority key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 19 May 2025 12:10:22 +0000
ROA not before:           Mon 19 May 2025 12:05:22 +0000
ROA not after:            Mon 18 May 2026 12:10:22 +0000
asID:                     52545
IP address blocks:        179.107.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 03:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:17:4f:31:cd:36:63:f1:5e:26:23:01:10:27:f6:69:22:9b:57:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
        Validity
            Not Before: May 19 12:05:22 2025 GMT
            Not After : May 18 12:10:22 2026 GMT
        Subject: CN=2D070687C49C2134ACA6C685392577DDFAC05C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:cf:63:2c:1f:e9:72:55:52:51:e8:c9:d9:
                    20:43:8b:44:0e:d0:8a:c7:fd:2f:e3:81:56:a9:86:
                    ba:79:d0:15:f9:70:de:1a:35:ea:38:98:9f:47:ef:
                    33:8a:54:ff:c3:27:96:77:90:6b:25:26:dc:e1:38:
                    d0:96:12:46:ba:3a:97:86:28:71:0c:98:38:7c:ab:
                    e4:fd:bf:1b:dc:91:67:35:ac:88:da:be:59:c6:60:
                    7d:d6:3d:62:d4:17:2a:c3:ea:33:32:1a:4a:19:06:
                    d2:8a:d2:89:66:e2:a5:5e:c3:87:20:7b:d1:43:6e:
                    ce:d5:61:15:65:7b:b1:01:79:33:28:fb:6f:0d:cd:
                    1d:3f:ba:a2:71:e9:7f:ef:d2:87:c6:e4:b0:9a:bc:
                    3e:53:72:ae:ed:d7:de:81:72:83:09:2a:7c:82:a1:
                    f2:99:9a:3d:3a:94:f9:b0:3f:5a:a7:65:9c:81:14:
                    53:c4:a2:e9:49:49:5a:93:70:70:12:40:d6:3e:7a:
                    3f:79:0b:74:dc:b4:4b:d6:a1:01:47:36:b2:3e:5f:
                    1a:1c:21:27:9a:60:6b:45:e0:4b:9f:68:30:33:8e:
                    7a:18:62:6f:ff:a1:66:f2:ff:15:f8:6a:fa:25:1e:
                    36:97:1f:3d:9e:42:02:60:9a:6b:b4:b7:91:9f:ef:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:07:06:87:C4:9C:21:34:AC:A6:C6:85:39:25:77:DD:FA:C0:5C:85
            X509v3 Authority Key Identifier:
                keyid:C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:fa:33:10:46:0d:d7:a8:60:d9:10:4a:33:86:a6:6f:ef:
         da:45:b9:6e:03:77:c8:19:63:f2:e3:0a:73:48:d5:4c:35:69:
         0c:93:46:b0:5c:5e:a3:9d:fc:19:a1:2c:7c:37:b8:ef:cd:01:
         78:52:75:32:6e:44:ab:da:d2:92:9b:c9:16:88:16:e2:42:75:
         fc:fb:d7:9a:8a:77:ee:04:0d:06:f9:9e:0a:75:be:e5:b0:23:
         cc:67:73:4e:61:59:e5:f5:1b:ee:95:29:26:cf:31:a5:f3:6e:
         ed:7a:43:90:b0:7c:15:5d:30:92:d3:64:62:1a:b3:b1:82:02:
         c1:51:b4:db:67:7e:be:9b:09:88:94:f1:24:75:19:9c:4e:5f:
         27:f1:14:77:ab:ef:50:7d:6e:db:5f:cb:ed:4e:2b:87:50:d0:
         aa:48:e3:1b:a6:7f:4e:e2:9c:13:f3:da:11:9b:e6:fc:ca:28:
         f8:7c:74:35:25:47:6d:04:c6:16:e2:31:40:ea:df:cd:a0:db:
         41:27:57:ce:aa:a6:07:c2:77:91:86:49:a9:6c:ea:03:64:8f:
         21:08:0e:db:a5:bf:af:aa:2c:54:3d:38:8b:db:24:a4:92:39:
         08:83:f7:3d:1c:74:48:e1:e5:98:f0:98:d0:e6:8e:e8:4e:89:
         45:5d:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 08:58:54 2025 by rpki-client