Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          NvaITFEuLGQLLPb9RO2XDF+ESv7awERc5MIRo4oqcPc=
Subject key identifier:   68:F9:34:D9:5E:87:98:09:86:21:3D:37:BE:7A:EA:30:75:99:33:33
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       13D626772C979F656811C5FFA4CB586908BE35FE
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa
Signing time:             Mon 30 Jun 2025 01:10:20 +0000
ROA not before:           Mon 30 Jun 2025 01:05:20 +0000
ROA not after:            Mon 29 Jun 2026 01:10:20 +0000
asID:                     263641
IP address blocks:        179.127.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d6:26:77:2c:97:9f:65:68:11:c5:ff:a4:cb:58:69:08:be:35:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:20 2025 GMT
            Not After : Jun 29 01:10:20 2026 GMT
        Subject: CN=68F934D95E87980986213D37BE7AEA3075993333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:9d:bc:b8:01:f8:f1:df:8f:9d:3e:97:60:
                    ec:a5:87:ab:03:92:19:82:e1:d8:a3:27:ff:e6:2a:
                    0b:22:89:ce:3b:5a:79:73:9b:dd:20:20:23:68:f9:
                    ed:ba:9a:db:07:3d:67:c3:f5:40:2c:66:05:c3:5e:
                    43:e0:ad:07:ff:d2:9a:0e:43:81:36:bc:af:73:31:
                    19:7f:4d:7a:84:53:97:78:f3:85:be:80:f1:d3:db:
                    76:e0:df:ec:98:7f:9b:4e:57:cd:c6:7f:17:40:10:
                    6d:c9:ad:c8:e5:20:98:93:b4:c2:d6:09:5b:c9:66:
                    2d:5a:6a:59:7a:6d:8a:3e:70:bb:20:a4:90:c3:cd:
                    0b:4c:1f:64:d7:57:44:ba:74:6d:73:33:a4:a8:c7:
                    68:c7:ca:64:40:28:2c:25:1a:1e:b9:52:bc:6a:7e:
                    8a:81:d5:b4:aa:2f:25:cb:f3:82:72:22:67:59:ec:
                    a4:35:7a:d1:66:c0:3f:cb:5a:2c:d8:97:2a:ee:cc:
                    bc:fb:f6:7b:83:5b:00:66:4b:81:9b:92:6d:41:c7:
                    f6:68:ff:5d:69:ca:d5:e5:af:c7:6c:9a:43:ce:c4:
                    75:cf:6f:59:75:3d:f7:a7:7a:8d:d6:ea:12:0c:17:
                    fd:6d:54:b7:3d:e9:f8:d1:e4:2c:f8:c3:fc:01:8a:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:34:D9:5E:87:98:09:86:21:3D:37:BE:7A:EA:30:75:99:33:33
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135352e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:fd:72:b7:73:c3:0c:c0:aa:cd:8e:92:21:8b:89:32:95:9e:
         0f:2b:97:26:07:5c:e5:ee:d8:92:32:0d:82:bc:b7:c7:31:69:
         d0:c2:2f:3d:55:9e:73:d2:e5:4e:55:d9:2f:cb:b4:4d:b7:f5:
         53:82:12:ba:ed:2e:40:b0:41:76:70:3a:a5:14:54:ec:17:14:
         5d:79:77:52:4e:69:7f:7a:ca:ce:ae:17:b6:55:13:19:21:b7:
         48:f4:27:a3:a4:67:14:88:db:12:a9:b0:b2:47:4c:48:ec:4b:
         8d:e6:65:c1:c0:fd:bb:db:7e:4d:88:05:b9:ed:e6:aa:c0:a2:
         9f:0a:c0:2d:45:97:78:bd:c8:5d:fa:f9:27:1d:62:79:ed:e1:
         a6:4e:07:f5:93:18:42:c0:d0:71:29:a1:0e:3f:e0:ee:d5:d4:
         2e:ea:95:4e:7a:4f:34:0a:99:65:16:8e:bb:f5:2d:f0:aa:d7:
         1d:73:87:ff:bc:88:39:30:51:8c:c6:f7:da:71:9e:18:e0:86:
         7e:43:be:8d:e5:55:ff:d1:fe:c5:f9:eb:dd:7a:e9:cf:c7:43:
         38:1a:85:1d:f5:8e:10:36:7a:fa:1f:35:03:3b:7f:0b:3a:bf:
         d2:8a:de:c6:49:f4:b3:4e:ea:68:de:16:7c:a4:b8:37:a5:04:
         8c:b3:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:02:06 2025 by rpki-client