Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135342e302f32332d3233203d3e20323633363431.roa
File:                     3137392e3132372e3135342e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          OG//zcH+XpLOYBhFSt8F1PpUIbKNhEY35Gs0mTvqeZE=
Subject key identifier:   93:69:8E:F7:1D:0D:4C:E2:62:67:32:9E:8F:AA:E4:46:F2:67:39:94
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       74B20C3C108D97F4788DE4496A09040338A28205
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135342e302f32332d3233203d3e20323633363431.roa
Signing time:             Mon 30 Jun 2025 01:10:20 +0000
ROA not before:           Mon 30 Jun 2025 01:05:20 +0000
ROA not after:            Mon 29 Jun 2026 01:10:20 +0000
asID:                     263641
IP address blocks:        179.127.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b2:0c:3c:10:8d:97:f4:78:8d:e4:49:6a:09:04:03:38:a2:82:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:20 2025 GMT
            Not After : Jun 29 01:10:20 2026 GMT
        Subject: CN=93698EF71D0D4CE26267329E8FAAE446F2673994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:84:78:c5:dd:82:52:3b:bb:e7:e0:3d:c0:
                    8a:b2:d5:8a:a4:b6:2e:07:94:1f:00:c5:88:df:df:
                    cc:68:84:00:93:8a:de:2d:9a:db:85:2b:ac:20:6b:
                    f0:fb:a8:24:15:59:c5:48:de:76:3e:b9:46:5b:08:
                    2d:f1:db:dd:79:b0:89:87:06:6a:df:41:2c:a2:64:
                    63:13:d7:4e:23:15:d3:12:66:ff:a9:5c:cf:09:b4:
                    81:9b:f7:0f:5c:9e:cb:04:65:98:0d:05:5a:88:73:
                    8a:8c:0a:55:b4:7a:9e:90:04:f5:54:08:ed:a5:25:
                    a7:c0:f7:95:61:9d:d4:de:ba:3a:a2:0b:27:de:e4:
                    a7:c3:b3:ad:be:38:1e:db:a9:17:a6:ce:3b:61:66:
                    14:71:fb:b1:62:5c:74:75:ca:48:63:30:3e:5d:7d:
                    d6:6f:94:76:e9:5d:d0:8f:5f:81:9c:2c:ce:32:f6:
                    bb:fe:9d:8d:34:81:b7:45:f6:db:0e:09:27:27:ca:
                    25:aa:ab:a6:37:26:af:89:16:22:83:9f:e0:f8:b9:
                    77:64:13:a9:a9:00:d0:8f:3f:33:24:0c:5a:12:4a:
                    08:5b:b8:be:26:a1:70:2d:17:1a:ea:88:0f:fc:a5:
                    d8:5c:eb:e5:36:49:07:72:12:e3:95:3e:f8:6e:56:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:69:8E:F7:1D:0D:4C:E2:62:67:32:9E:8F:AA:E4:46:F2:67:39:94
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135342e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:95:0d:b7:50:32:d4:02:f9:22:da:9a:4d:a6:b8:4e:69:9b:
         52:a8:39:b4:76:73:d9:92:02:5e:dc:98:50:23:ce:45:4f:31:
         1e:83:81:ec:d8:63:27:c5:7a:79:e6:60:3f:05:cf:70:36:72:
         fb:41:2f:06:fa:88:c9:63:a0:26:cf:cd:29:e8:8e:49:ea:68:
         67:ee:70:bd:d2:30:12:cd:f0:f8:49:ea:22:1c:1c:77:03:19:
         c5:97:a7:90:f5:30:2d:6f:09:1e:8f:d4:67:d1:3d:72:a0:2c:
         e2:ae:d8:5f:6f:32:fc:fa:b4:02:ba:43:22:07:11:a2:1d:23:
         be:b6:b3:33:b6:5e:83:12:b9:bc:f0:98:bf:ea:48:89:9a:ef:
         22:a0:04:14:35:6c:83:d1:5b:da:d0:38:b0:1f:76:f7:a9:73:
         e7:9c:66:8d:9b:61:1a:3b:6d:e7:17:f7:36:b7:09:4e:05:c4:
         0b:1f:29:ba:43:a8:b7:70:c0:86:4d:01:0c:6d:36:8f:c5:c9:
         23:1c:bb:7b:1e:27:fc:1e:57:fb:01:28:ef:4b:8c:50:2d:0a:
         4c:f6:f8:fb:00:60:c5:a8:1c:3f:2f:e5:81:52:7a:38:5a:b0:
         ca:a7:3a:3f:2b:0d:66:8f:af:50:77:87:fd:80:bc:a3:0f:e1:
         0d:6e:d4:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdLIMPBCNl/R4jeRJagkEAziiggUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB
MzY0NDYxRjAeFw0yNTA2MzAwMTA1MjBaFw0yNjA2MjkwMTEwMjBaMDMxMTAvBgNV
BAMTKDkzNjk4RUY3MUQwRDRDRTI2MjY3MzI5RThGQUFFNDQ2RjI2NzM5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/YR4xd2CUju75+A9wIqy1Yqk
ti4HlB8AxYjf38xohACTit4tmtuFK6wga/D7qCQVWcVI3nY+uUZbCC3x2915sImH
BmrfQSyiZGMT104jFdMSZv+pXM8JtIGb9w9cnssEZZgNBVqIc4qMClW0ep6QBPVU
CO2lJafA95VhndTeujqiCyfe5KfDs62+OB7bqRemzjthZhRx+7FiXHR1ykhjMD5d
fdZvlHbpXdCPX4GcLM4y9rv+nY00gbdF9tsOCScnyiWqq6Y3Jq+JFiKDn+D4uXdk
E6mpANCPPzMkDFoSSghbuL4moXAtFxrqiA/8pdhc6+U2SQdyEuOVPvhuVh0JAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUk2mO9x0NTOJiZzKej6rkRvJnOZQwHwYDVR0j
BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4
RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv
MzEzNzM5MmUzMTMyMzcyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbN/mjANBgkqhkiG9w0BAQsFAAOCAQEA5JUN
t1Ay1AL5ItqaTaa4TmmbUqg5tHZz2ZICXtyYUCPORU8xHoOB7NhjJ8V6eeZgPwXP
cDZy+0EvBvqIyWOgJs/NKeiOSepoZ+5wvdIwEs3w+EnqIhwcdwMZxZenkPUwLW8J
Ho/UZ9E9cqAs4q7YX28y/Pq0ArpDIgcRoh0jvrazM7ZegxK5vPCYv+pIiZrvIqAE
FDVsg9Fb2tA4sB9296lz55xmjZthGjtt5xf3NrcJTgXECx8pukOot3DAhk0BDG02
j8XJIxy7ex4n/B5X+wEo70uMUC0KTPb4+wBgxagcPy/lgVJ6OFqwyqc6PysNZo+v
UHeH/YC8ow/hDW7UYg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:21:14 2025 by rpki-client