Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa
File:                     3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa (raw, json)
Hash identifier:          gWr+NTO8mED4100/3/dbXgrS46pvlmphL4LeLMK0xug=
Subject key identifier:   CE:E7:94:34:B2:DD:AD:E4:F4:54:38:42:9D:FD:3C:45:D4:85:73:2B
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       5A4803DFCC474D0FA49FA8D4F76750A0BD2DB734
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa
Signing time:             Mon 12 May 2025 10:43:24 +0000
ROA not before:           Mon 12 May 2025 10:38:24 +0000
ROA not after:            Mon 11 May 2026 10:43:24 +0000
asID:                     262441
IP address blocks:        179.106.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 23:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:48:03:df:cc:47:4d:0f:a4:9f:a8:d4:f7:67:50:a0:bd:2d:b7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: May 12 10:38:24 2025 GMT
            Not After : May 11 10:43:24 2026 GMT
        Subject: CN=CEE79434B2DDADE4F45438429DFD3C45D485732B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:c1:f4:29:65:95:e8:52:cf:a4:03:48:19:
                    74:54:53:13:53:fb:9e:e5:d0:31:15:18:99:79:53:
                    b2:a9:86:7f:02:37:8b:bf:35:39:5c:ce:5f:92:df:
                    a1:75:00:2c:d8:cc:a0:eb:c0:fd:c1:11:df:4d:e1:
                    9c:a3:1e:96:ad:e1:6d:94:7b:13:b0:2f:f9:2d:6c:
                    02:ea:36:76:4a:4f:cf:35:b9:c3:91:c4:e3:80:84:
                    2f:55:5b:e9:c0:09:1a:45:75:0c:c1:a6:95:0f:66:
                    3e:cd:78:40:36:ef:87:29:fb:f4:a1:51:19:94:ca:
                    8d:a0:0c:aa:b0:f5:6c:a9:8e:b8:32:30:bf:a4:e5:
                    a3:68:1a:ff:0f:12:bc:67:f2:66:03:cd:f1:22:d9:
                    ca:ea:be:c5:c5:26:8f:1a:0f:ee:b3:ae:8a:79:8c:
                    8c:73:65:e8:9d:25:7c:6f:bb:7b:cc:f0:ec:36:c7:
                    7b:8b:08:30:8e:53:f3:1d:37:48:d1:68:cd:56:3e:
                    75:7a:fd:13:b4:be:61:04:ec:b8:71:ef:00:ca:b0:
                    f4:59:69:dd:ca:e4:63:f7:9a:42:a8:d0:52:39:ce:
                    4d:2a:9b:59:b7:31:25:b4:a4:f9:b1:c7:b1:2b:d4:
                    a3:ac:ae:aa:c4:3e:e0:fd:08:8a:21:9f:ee:92:68:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E7:94:34:B2:DD:AD:E4:F4:54:38:42:9D:FD:3C:45:D4:85:73:2B
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:41:32:a2:11:d7:1a:95:6a:84:77:60:28:9b:11:4e:3c:01:
         c4:6d:01:4d:49:9c:97:79:7f:7f:87:a9:7e:a7:47:e7:6a:03:
         55:22:41:86:3c:c8:e8:2f:f8:ff:fb:6f:11:b8:44:a5:d4:9e:
         c3:67:d5:8d:7f:20:9e:06:41:1a:f5:28:f5:9e:ca:40:ea:76:
         85:1b:32:27:75:b0:ba:b6:77:75:f7:50:39:a3:0b:4c:94:b2:
         08:b6:5e:96:c8:83:03:52:3e:38:4e:05:a8:b2:75:e2:97:b6:
         fa:13:d9:87:01:a3:27:06:81:07:f5:0d:3c:e8:6d:8c:89:ad:
         86:34:8b:2a:3e:e4:78:a3:11:62:41:e1:ea:87:35:96:c0:5e:
         69:1c:ca:2f:6f:cf:66:ec:c7:07:fd:8c:e8:02:c7:74:db:5e:
         3d:3a:24:58:ba:33:9e:24:dd:24:33:58:fc:aa:12:35:5b:d9:
         b7:bc:15:12:0a:cb:64:2e:5e:fa:ea:6e:2a:56:92:d9:2f:68:
         44:ac:82:f2:df:f7:15:75:15:88:a4:29:d9:06:2a:53:76:10:
         c1:b6:07:9b:23:8a:80:52:d6:38:7a:78:15:88:c3:49:74:0d:
         f7:80:66:b4:b7:ed:ea:0e:62:9e:04:11:ba:dc:03:2c:e6:83:
         0a:d2:ee:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:25:53 2025 by rpki-client