Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa
File:                     3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa (raw, json)
Hash identifier:          STCeYxUgmeHjQJ6dwbLcx1iNGK+KWBgLRvr/F/RZZSc=
Subject key identifier:   E6:12:92:CE:FA:30:AD:E5:19:38:C7:4C:0B:15:FC:81:AF:62:5E:D2
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       73EC72DA5F742EED14D388665C30F109959AD1EF
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa
Signing time:             Mon 30 Jun 2025 01:10:22 +0000
ROA not before:           Mon 30 Jun 2025 01:05:22 +0000
ROA not after:            Mon 29 Jun 2026 01:10:22 +0000
asID:                     263641
IP address blocks:        179.127.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ec:72:da:5f:74:2e:ed:14:d3:88:66:5c:30:f1:09:95:9a:d1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:22 2025 GMT
            Not After : Jun 29 01:10:22 2026 GMT
        Subject: CN=E61292CEFA30ADE51938C74C0B15FC81AF625ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a8:99:44:77:97:8d:39:1f:4c:d8:3c:3f:bc:
                    c6:a0:4b:1e:59:a7:13:e9:b3:a7:36:b7:cb:ec:9b:
                    db:c4:86:b0:8e:ab:f5:df:45:33:f7:20:69:9e:5f:
                    34:f0:0d:a4:91:7c:41:f9:67:85:d2:82:56:84:38:
                    0d:8b:4b:28:ae:d7:8b:d0:50:db:74:c5:2c:a8:57:
                    0e:ae:c6:1a:ab:a5:5a:aa:e6:7d:eb:24:15:6b:6a:
                    7a:9d:d5:e4:26:9b:62:e9:f0:72:52:d7:c7:94:3a:
                    e3:d7:da:94:21:25:03:5e:7e:98:0b:a9:e3:fa:58:
                    bb:49:b1:38:58:5e:9b:de:d2:32:08:5a:ea:fe:1d:
                    53:85:33:d6:b4:65:91:86:c9:2f:89:02:da:26:ca:
                    2f:a7:3e:09:e2:04:38:83:20:68:5c:39:05:ed:a4:
                    35:2c:52:e0:1c:f7:53:eb:8e:eb:aa:c0:6c:3e:34:
                    98:be:97:d2:f1:60:ff:17:4c:a3:32:bf:6d:4e:7e:
                    2d:60:8f:5a:2a:b0:8a:f9:b8:82:15:3b:6e:07:da:
                    0a:f9:02:98:91:6e:9d:5c:53:75:26:29:78:c7:d3:
                    f5:1f:79:62:86:2c:64:cf:6b:3e:c4:73:dd:3b:65:
                    88:f8:e4:fd:c6:eb:86:0e:18:f9:80:25:bf:d1:7a:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:12:92:CE:FA:30:AD:E5:19:38:C7:4C:0B:15:FC:81:AF:62:5E:D2
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32312d3231203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:29:4b:06:1e:95:93:f9:66:22:42:6c:57:6b:18:86:1a:73:
         ac:f3:d2:95:74:5b:68:a6:e4:2e:d6:49:93:a9:7a:a3:d9:fe:
         59:95:e1:c1:97:ed:e9:2c:3b:09:0f:27:f8:c1:f4:6f:d4:90:
         f1:5a:18:f3:58:22:e0:d6:f7:b1:ba:ac:46:c5:2f:4d:05:04:
         0a:38:18:f7:42:46:d7:be:9d:d6:9b:bb:3c:4f:92:7b:a8:67:
         ee:d4:df:6b:c0:80:61:0c:45:75:da:23:07:45:a9:96:5d:35:
         61:16:cb:32:d6:9b:31:97:45:07:e2:ef:46:5b:18:7b:06:1d:
         3a:1a:25:83:f7:e2:f8:07:40:29:79:a4:6e:7d:cd:3f:5d:9e:
         85:86:ba:1f:ec:b1:8e:36:39:1e:29:0a:84:69:f8:7a:e2:43:
         0f:48:ba:60:0e:04:7b:ad:c4:01:65:ee:25:59:08:62:db:2a:
         47:b6:c1:13:62:25:0b:85:47:a6:fc:37:1a:87:ba:8a:46:35:
         c6:70:2d:fa:cf:5a:93:eb:2c:a6:28:dd:7b:5d:56:76:bf:84:
         48:1a:46:e8:31:4b:a2:1e:4a:8a:0e:b7:3c:27:3b:37:6b:0d:
         e1:8a:f9:90:48:56:b7:96:22:09:d2:43:c8:52:93:bf:7c:60:
         d8:2d:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:22:57 2025 by rpki-client