Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa
File:                     3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa (raw, json)
Hash identifier:          RvjBWTTGSRQhFYPFHIcADDXN+HPlEAjpyTfgUWjt4MY=
Subject key identifier:   95:01:C4:93:A6:15:C3:59:D5:D3:2E:EF:74:7A:DF:6F:F4:23:E7:D5
Certificate issuer:       /CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01
Certificate serial:       635FB56B27C1BFEFCDF864A8A05B6EB559BAD8E9
Authority key identifier: 9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa
Signing time:             Tue 03 Jun 2025 17:09:46 +0000
ROA not before:           Tue 03 Jun 2025 17:04:46 +0000
ROA not after:            Tue 02 Jun 2026 17:09:46 +0000
asID:                     271297
IP address blocks:        192.231.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl
                          rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 07:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5f:b5:6b:27:c1:bf:ef:cd:f8:64:a8:a0:5b:6e:b5:59:ba:d8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01
        Validity
            Not Before: Jun  3 17:04:46 2025 GMT
            Not After : Jun  2 17:09:46 2026 GMT
        Subject: CN=9501C493A615C359D5D32EEF747ADF6FF423E7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c1:bf:23:c8:b9:bb:1d:2d:64:45:08:82:93:
                    af:a0:09:de:cb:68:37:b2:7a:ea:90:14:52:c3:f9:
                    39:4f:41:91:e1:24:f8:1d:0f:fe:5d:98:bc:5a:18:
                    fe:f1:2e:97:6e:ca:4b:b2:9d:b9:d1:35:da:9e:96:
                    46:1b:ec:12:12:6a:e4:1e:b6:0b:d5:8d:f3:40:be:
                    c8:0c:e2:46:b1:10:12:26:b2:96:48:7f:92:58:fc:
                    a6:a2:db:77:a4:b8:3e:be:b3:51:f9:b6:f1:fc:0b:
                    de:84:34:d6:cc:7f:4e:17:38:58:e7:5f:f3:cb:ef:
                    bf:84:da:82:f5:d7:ba:55:c4:bc:f8:cc:9d:1b:be:
                    f8:2e:6e:52:21:84:29:25:82:b7:a5:79:9b:33:98:
                    a2:9e:c8:04:dd:0a:ad:31:c2:e0:ad:f2:bb:87:b1:
                    07:0d:05:05:fa:48:a2:e1:46:cc:b7:17:0e:dc:99:
                    bf:64:9d:85:b2:df:e0:16:4d:2c:9c:26:63:cb:93:
                    d3:62:94:ab:00:f1:27:77:c4:9f:75:88:2c:f5:74:
                    60:cc:62:57:5f:32:d1:54:e7:a4:ba:4d:90:bb:9b:
                    75:e7:ff:85:7d:68:62:dc:76:18:03:19:b3:2c:c8:
                    ed:0b:a5:a0:b0:5f:70:c6:b8:d0:a8:9a:b5:a8:c5:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:01:C4:93:A6:15:C3:59:D5:D3:2E:EF:74:7A:DF:6F:F4:23:E7:D5
            X509v3 Authority Key Identifier:
                keyid:9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:8c:87:78:1d:70:e2:e8:39:4a:1d:95:84:47:22:1d:af:35:
         c3:20:d2:30:e4:be:ba:16:bb:9f:d4:74:26:30:91:09:48:77:
         f1:f6:72:fc:4c:7e:e3:32:26:80:af:95:0c:f4:15:f7:b6:69:
         d8:ed:ac:cd:16:48:7c:d1:e4:fc:cc:f2:54:bb:b5:90:f1:b4:
         3d:3a:d6:87:ad:cd:8b:37:97:2c:4e:86:74:38:00:42:f9:8f:
         5f:15:4b:eb:c5:ae:61:dc:67:74:42:b4:73:77:d3:5c:d3:17:
         4c:45:a8:2a:67:96:54:63:48:7d:ea:52:c0:32:89:c4:a4:8a:
         ff:27:4e:58:10:5e:0d:96:80:78:e8:2c:a5:b2:5c:b5:eb:43:
         c5:91:b4:29:07:86:55:09:e3:71:08:27:37:e3:14:a9:e4:1d:
         76:24:ab:67:e2:08:76:85:51:00:ce:c8:31:be:56:fc:78:4f:
         1c:ac:5f:51:12:69:51:bb:97:09:45:28:e4:70:70:78:5e:3e:
         4d:a5:af:e9:68:99:0e:09:6f:8f:8b:5c:f9:eb:3f:35:8c:35:
         cb:8e:ab:06:cc:12:af:fc:59:99:f1:0a:36:fb:75:38:09:8d:
         18:fb:ba:ea:8c:57:02:c7:6d:b0:ef:68:89:ee:6f:f8:c8:8f:
         2e:17:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:09:35 2025 by rpki-client