Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/3137392e36332e3135322e302f32322d3332203d3e20323731363139.roa
File:                     3137392e36332e3135322e302f32322d3332203d3e20323731363139.roa (raw, json)
Hash identifier:          UOpTe3w1JjkgFxkbpDXnl5mj+oyUVetaoVDbOxGP0yQ=
Subject key identifier:   CF:4F:BF:9C:34:C6:16:0F:FA:06:B9:A8:6F:32:9C:F7:14:8E:50:94
Certificate issuer:       /CN=0580FCB80D10C913EE92386D442A6DCD904C68FD
Certificate serial:       4242851DBE78C0F2B01F12BBED06BE31F8E8FB10
Authority key identifier: 05:80:FC:B8:0D:10:C9:13:EE:92:38:6D:44:2A:6D:CD:90:4C:68:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0580FCB80D10C913EE92386D442A6DCD904C68FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/3137392e36332e3135322e302f32322d3332203d3e20323731363139.roa
Signing time:             Mon 14 Jul 2025 13:47:23 +0000
ROA not before:           Mon 14 Jul 2025 13:42:23 +0000
ROA not after:            Mon 13 Jul 2026 13:47:23 +0000
asID:                     271619
IP address blocks:        179.63.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/0580FCB80D10C913EE92386D442A6DCD904C68FD.crl
                          rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/0580FCB80D10C913EE92386D442A6DCD904C68FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0580FCB80D10C913EE92386D442A6DCD904C68FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 09:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:42:85:1d:be:78:c0:f2:b0:1f:12:bb:ed:06:be:31:f8:e8:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0580FCB80D10C913EE92386D442A6DCD904C68FD
        Validity
            Not Before: Jul 14 13:42:23 2025 GMT
            Not After : Jul 13 13:47:23 2026 GMT
        Subject: CN=CF4FBF9C34C6160FFA06B9A86F329CF7148E5094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:5e:de:08:eb:e8:2a:aa:cd:1c:80:ac:23:
                    85:e1:5c:ba:da:05:bf:56:5a:33:0d:43:1c:11:a4:
                    40:86:bb:77:48:2c:ce:f6:36:0e:b3:e6:d7:53:4b:
                    08:1b:96:ee:18:0c:62:04:34:bd:60:d5:e9:59:9d:
                    24:ad:be:9a:1a:c9:9f:b3:e1:9d:83:c5:cc:ef:7a:
                    fb:ac:e8:83:5f:c6:41:99:ab:e3:87:8a:c8:db:89:
                    e0:a2:7e:61:ed:ee:33:ce:7c:05:5e:aa:a8:d1:51:
                    bc:85:4f:13:94:d9:dd:48:2f:94:f5:7e:28:a2:8a:
                    fc:2b:68:82:f5:27:6c:9f:3c:95:1b:02:73:2d:45:
                    d0:30:b0:14:f0:a3:1d:3b:a3:eb:18:c3:37:e7:fa:
                    0e:76:21:f6:d3:d2:49:e8:12:67:04:68:f1:55:be:
                    27:e3:be:1c:13:39:6c:ed:6d:05:2c:10:77:7b:7f:
                    b3:2a:24:9c:20:d8:ed:1f:ff:dd:2a:78:09:e0:05:
                    eb:d9:0c:e7:39:bb:14:f8:ab:f6:84:12:f2:99:af:
                    05:72:bd:5c:a6:9b:26:11:5f:6d:fb:ff:50:db:51:
                    40:6d:12:ec:7a:21:17:74:de:f3:90:10:66:af:89:
                    dc:92:83:80:05:7d:a7:c9:65:8e:a3:8d:5a:ac:78:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4F:BF:9C:34:C6:16:0F:FA:06:B9:A8:6F:32:9C:F7:14:8E:50:94
            X509v3 Authority Key Identifier:
                keyid:05:80:FC:B8:0D:10:C9:13:EE:92:38:6D:44:2A:6D:CD:90:4C:68:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/0580FCB80D10C913EE92386D442A6DCD904C68FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0580FCB80D10C913EE92386D442A6DCD904C68FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/3137392e36332e3135322e302f32322d3332203d3e20323731363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:95:c8:d4:cc:62:78:ca:5f:f5:56:e0:45:de:61:2e:b4:b6:
         eb:c0:56:8d:a1:f5:7a:5c:ce:12:3b:0c:d2:21:34:95:9a:6c:
         bc:16:33:a3:15:25:9e:59:f1:7f:b1:43:4e:be:e4:bd:c2:4f:
         dd:e9:61:3a:08:81:88:3a:76:28:fd:e3:51:34:c9:f1:ca:71:
         ba:80:c0:87:7b:3f:00:4f:b6:6f:21:09:f0:d1:1c:84:8b:4b:
         39:8e:92:3e:4d:69:40:33:a6:d7:51:69:d7:5c:a6:fb:b5:e1:
         a9:5a:8f:e7:f8:26:f6:47:5c:c5:b4:cb:72:46:60:f9:97:b9:
         95:90:f5:00:c2:26:c4:ec:d0:41:34:7d:b2:d4:03:0b:a2:78:
         17:30:60:2e:ee:e9:39:73:8f:54:d4:53:a1:19:14:a2:f2:24:
         45:89:2d:d3:a8:9f:14:e1:65:a5:a7:b8:b1:5b:64:4a:38:c8:
         7c:e6:d0:9d:ef:e6:85:22:6d:b3:3b:cf:ef:f5:3d:1f:95:19:
         29:02:db:16:d0:c4:35:c4:ef:5e:24:5f:8f:c2:57:2d:05:b9:
         70:7e:32:67:fe:1f:71:47:09:44:11:68:55:09:d1:9f:74:84:
         8e:a5:3b:df:73:b2:2d:a4:14:2d:62:a6:55:ec:b8:10:6d:75:
         3a:2b:43:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQkKFHb54wPKwHxK77Qa+Mfjo+xAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU4MEZDQjgwRDEwQzkxM0VFOTIzODZENDQyQTZEQ0Q5
MDRDNjhGRDAeFw0yNTA3MTQxMzQyMjNaFw0yNjA3MTMxMzQ3MjNaMDMxMTAvBgNV
BAMTKENGNEZCRjlDMzRDNjE2MEZGQTA2QjlBODZGMzI5Q0Y3MTQ4RTUwOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVT17eCOvoKqrNHICsI4XhXLra
Bb9WWjMNQxwRpECGu3dILM72Ng6z5tdTSwgblu4YDGIENL1g1elZnSStvpoayZ+z
4Z2Dxczvevus6INfxkGZq+OHisjbieCifmHt7jPOfAVeqqjRUbyFTxOU2d1IL5T1
fiiiivwraIL1J2yfPJUbAnMtRdAwsBTwox07o+sYwzfn+g52IfbT0knoEmcEaPFV
vifjvhwTOWztbQUsEHd7f7MqJJwg2O0f/90qeAngBevZDOc5uxT4q/aEEvKZrwVy
vVymmyYRX237/1DbUUBtEux6IRd03vOQEGavidySg4AFfafJZY6jjVqseICJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUz0+/nDTGFg/6BrmobzKc9xSOUJQwHwYDVR0j
BBgwFoAUBYD8uA0QyRPukjhtRCptzZBMaP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3M4M0pSZkJyRTJUa21YNVVrWWhmR2JZaTlNZUhLaHJrcXBFN0U4eVJY
RUwvMC8wNTgwRkNCODBEMTBDOTEzRUU5MjM4NkQ0NDJBNkRDRDkwNEM2OEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1ODBGQ0I4MEQxMEM5MTNF
RTkyMzg2RDQ0MkE2RENEOTA0QzY4RkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzODNKUmZCckUyVGttWDVVa1loZkdiWWk5TWVIS2hya3FwRTdFOHlSWEVMLzAv
MzEzNzM5MmUzNjMzMmUzMTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzNjMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzP5gwDQYJKoZIhvcNAQELBQADggEBAIiVyNTM
YnjKX/VW4EXeYS60tuvAVo2h9XpczhI7DNIhNJWabLwWM6MVJZ5Z8X+xQ06+5L3C
T93pYToIgYg6dij941E0yfHKcbqAwId7PwBPtm8hCfDRHISLSzmOkj5NaUAzptdR
addcpvu14alaj+f4JvZHXMW0y3JGYPmXuZWQ9QDCJsTs0EE0fbLUAwuieBcwYC7u
6Tlzj1TUU6EZFKLyJEWJLdOonxThZaWnuLFbZEo4yHzm0J3v5oUibbM7z+/1PR+V
GSkC2xbQxDXE714kX4/CVy0FuXB+Mmf+H3FHCUQRaFUJ0Z90hI6lO99zsi2kFC1i
plXsuBBtdTorQyY=
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:25:56 2025 by rpki-client