Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa
File:                     3137392e36332e36302e302f32322d3234203d3e20323731353830.roa (raw, json)
Hash identifier:          ubEYd4Apl2LSfFtqhue6y5BqmkbX6gfhg6/lDsNoVJM=
Subject key identifier:   DA:8D:71:D5:F0:D9:64:7D:88:CC:2A:26:3C:D5:D8:29:56:3A:7D:3E
Certificate issuer:       /CN=C1C298FB8C90994C283CD51157EDBA40378A4876
Certificate serial:       0BEC5CE37D12A608CE11E1F9C571BB60E44A9FEC
Authority key identifier: C1:C2:98:FB:8C:90:99:4C:28:3C:D5:11:57:ED:BA:40:37:8A:48:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C298FB8C90994C283CD51157EDBA40378A4876.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa
Signing time:             Fri 20 Jun 2025 18:09:52 +0000
ROA not before:           Fri 20 Jun 2025 18:04:52 +0000
ROA not after:            Fri 19 Jun 2026 18:09:52 +0000
asID:                     271580
IP address blocks:        179.63.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/C1C298FB8C90994C283CD51157EDBA40378A4876.crl
                          rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/C1C298FB8C90994C283CD51157EDBA40378A4876.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C298FB8C90994C283CD51157EDBA40378A4876.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 19:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ec:5c:e3:7d:12:a6:08:ce:11:e1:f9:c5:71:bb:60:e4:4a:9f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C298FB8C90994C283CD51157EDBA40378A4876
        Validity
            Not Before: Jun 20 18:04:52 2025 GMT
            Not After : Jun 19 18:09:52 2026 GMT
        Subject: CN=DA8D71D5F0D9647D88CC2A263CD5D829563A7D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:a1:e8:f4:a1:9a:c9:00:9a:90:3a:11:4e:
                    6c:1b:79:fc:3c:11:37:42:a4:1e:39:28:a1:2d:76:
                    87:c7:e7:7f:ae:39:d7:dc:d2:4d:3b:54:c1:d9:f7:
                    c5:f1:fb:10:f5:d0:2d:d6:a3:ab:b3:b7:c4:25:c0:
                    2c:e1:72:9a:b6:44:48:5e:a4:75:c5:17:85:2c:1a:
                    c8:7a:54:db:e0:58:2a:99:ef:d0:0b:77:00:a6:5c:
                    0a:2b:21:0b:e5:82:38:a5:1d:f8:fc:f6:9f:04:d6:
                    74:5d:cb:61:52:ab:4e:f3:d1:0e:e8:75:44:ed:4e:
                    40:35:e0:27:4e:d2:51:b0:1c:5a:60:7a:5b:1b:18:
                    4e:0f:6d:19:52:c6:66:c4:ad:a7:f7:f6:d5:1f:94:
                    53:80:34:d5:cf:80:8d:c8:78:f0:0f:9f:4c:62:ea:
                    d4:60:d5:44:e6:76:88:07:9b:c3:7a:63:f4:ea:40:
                    20:03:44:ae:3a:50:30:21:f2:18:9a:eb:b1:a5:aa:
                    5f:ae:98:76:c4:a5:35:8c:ba:29:ad:da:0d:4c:6a:
                    ae:3a:29:1b:f0:9e:80:b3:30:01:07:fc:e4:7a:29:
                    bf:25:8d:c4:3c:e5:f1:56:46:80:ad:58:f3:e2:4f:
                    92:ad:fb:d2:52:3d:a5:f8:13:e3:2e:53:ca:f2:64:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8D:71:D5:F0:D9:64:7D:88:CC:2A:26:3C:D5:D8:29:56:3A:7D:3E
            X509v3 Authority Key Identifier:
                keyid:C1:C2:98:FB:8C:90:99:4C:28:3C:D5:11:57:ED:BA:40:37:8A:48:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/C1C298FB8C90994C283CD51157EDBA40378A4876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C298FB8C90994C283CD51157EDBA40378A4876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:75:22:0c:50:c3:48:f3:28:dd:4b:43:9d:e1:cd:85:a5:70:
         c9:9e:3c:a3:ad:d4:14:3a:0f:c6:ae:65:02:eb:46:a8:a5:60:
         aa:cd:dd:a1:51:fd:e4:b6:5f:97:2e:d9:dc:2a:ee:45:c6:b5:
         5f:51:cf:75:2f:55:0e:32:f2:6a:5d:11:0b:03:c4:2a:83:14:
         b3:9b:2e:23:a8:59:5c:46:87:6e:81:9d:b6:cc:62:cd:18:85:
         1b:75:00:55:46:e6:f5:3c:71:65:c1:73:9d:8e:df:c8:90:8f:
         60:05:fe:7a:85:16:a2:2a:94:99:02:13:43:00:16:a5:70:6a:
         43:a2:64:6c:05:91:a9:4b:ad:dd:33:04:3f:20:5c:4d:b8:aa:
         c8:10:ba:68:51:dd:a4:7b:ba:23:6d:8d:b0:da:8c:c9:4b:3e:
         0a:6d:24:0c:15:92:53:f3:c0:9b:d7:88:1a:3c:64:f6:c5:93:
         7b:69:34:6b:25:04:ee:f5:f9:0e:28:28:dd:ad:81:fe:77:5a:
         e2:30:f1:a0:69:4c:1a:00:65:71:a9:86:ca:c2:73:0b:d4:37:
         c9:1c:9a:7f:ad:fc:ab:a3:3e:b4:3a:62:f2:82:02:a1:17:de:
         99:db:1d:08:63:5b:64:d6:6a:e0:41:d8:3c:99:84:cd:41:96:
         32:7a:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:09:41 2025 by rpki-client