Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa
File:                     3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          j6A1AsiuEAFXq5j9NJUN8simTKMmtzznQtBY/Kt3aLs=
Subject key identifier:   A0:6B:3C:71:3E:D9:56:A9:44:8D:65:92:A6:EB:C0:A1:56:00:B8:1C
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       5C41747D7C4D45998309752AA91682A73BD82CA2
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa
Signing time:             Mon 30 Jun 2025 01:10:19 +0000
ROA not before:           Mon 30 Jun 2025 01:05:19 +0000
ROA not after:            Mon 29 Jun 2026 01:10:19 +0000
asID:                     263641
IP address blocks:        179.127.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:41:74:7d:7c:4d:45:99:83:09:75:2a:a9:16:82:a7:3b:d8:2c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:19 2025 GMT
            Not After : Jun 29 01:10:19 2026 GMT
        Subject: CN=A06B3C713ED956A9448D6592A6EBC0A15600B81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:eb:b1:97:4a:4b:1c:24:d8:65:6b:88:18:
                    bb:e9:d3:22:e9:02:cf:d5:92:92:56:95:4d:87:86:
                    c3:35:8e:2d:27:ea:57:e5:d7:65:5b:8d:f5:2a:be:
                    93:1e:bc:04:f3:a8:33:20:29:c2:07:d6:95:f6:35:
                    26:e4:94:e8:8b:d7:ad:66:b5:23:9e:c9:df:18:cc:
                    ad:e9:57:0f:9a:03:7c:8f:7c:b5:55:81:1c:28:11:
                    9d:57:96:3c:7f:c1:1b:93:5b:a0:f5:07:ed:87:a8:
                    42:ab:9e:88:56:3e:c1:40:4d:9c:0d:96:5a:e8:30:
                    0a:a7:86:bb:8d:82:14:60:3b:c8:e5:0a:0e:7d:ab:
                    0d:8c:77:62:77:d9:bc:be:32:ae:5a:32:1b:d0:5f:
                    bf:89:c2:0c:ba:08:77:f2:1d:0b:d8:51:55:4d:4c:
                    36:23:a0:5d:da:9a:d3:78:3b:85:7f:5b:88:c5:a1:
                    01:34:cd:fe:60:14:7f:c5:4c:5f:c5:92:34:b3:4c:
                    76:d3:a3:fd:7f:2b:53:7b:7f:db:1c:a2:ca:72:01:
                    1c:00:ff:80:10:d3:26:4f:ba:f0:ca:bc:e8:4c:27:
                    1c:e7:03:21:c0:cd:db:cb:d0:22:69:7a:f1:2b:e5:
                    18:a2:3c:31:5f:10:89:98:73:a2:7c:ed:51:b4:74:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6B:3C:71:3E:D9:56:A9:44:8D:65:92:A6:EB:C0:A1:56:00:B8:1C
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:98:26:a2:03:98:6c:4f:d7:8d:49:b3:ec:b2:05:d4:f2:31:
         dd:aa:69:ea:63:46:62:78:e4:79:67:1e:a5:56:6b:2a:aa:53:
         c0:42:f5:8d:c1:d3:e2:cd:f2:3a:bc:87:3f:ae:da:9a:9d:5b:
         47:8c:a7:1b:84:30:6e:f5:af:68:08:19:e6:16:ee:c9:18:8a:
         70:42:51:a5:b8:ce:73:ca:81:65:e6:63:80:77:af:72:e8:ae:
         7e:45:b7:50:41:67:77:37:d5:da:a9:dd:e6:fa:58:76:30:f8:
         3d:8a:75:c4:db:bc:af:06:14:d1:a6:06:8a:e8:9d:a8:5f:c6:
         b9:c3:63:46:10:aa:1f:31:e7:7b:ed:04:eb:3f:1c:79:47:1d:
         c1:93:8e:98:92:d4:4e:4f:6e:0b:30:d9:44:e1:92:f8:c4:db:
         ee:01:c7:d0:86:4a:40:13:4f:17:6b:f8:f0:c0:2f:97:ef:bc:
         74:82:2d:25:c1:9e:b3:f1:50:39:0f:2b:b2:8c:c8:44:25:8c:
         db:30:fd:53:d2:a9:b7:10:f9:65:af:e3:96:b1:95:9d:cc:c5:
         de:76:fa:f6:e1:86:e7:66:19:79:45:73:d2:d9:77:51:b9:2f:
         f2:14:79:ba:2e:b4:6e:c5:8d:67:25:2a:8f:5f:26:93:0a:0f:
         b0:c7:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:22:52 2025 by rpki-client