Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          UVwZ15IoiDIJ1OZ9/8QT+PCDHjoN+XvHwV9bPU7T0zg=
Subject key identifier:   64:D1:B5:86:DE:E2:37:89:B3:4F:71:EB:A9:85:7E:B1:75:5C:8F:43
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       02BEBEA12B72911CB97B77A2F11E262F5548EFBF
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa
Signing time:             Mon 30 Jun 2025 01:10:21 +0000
ROA not before:           Mon 30 Jun 2025 01:05:21 +0000
ROA not after:            Mon 29 Jun 2026 01:10:21 +0000
asID:                     263641
IP address blocks:        179.127.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:be:be:a1:2b:72:91:1c:b9:7b:77:a2:f1:1e:26:2f:55:48:ef:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:21 2025 GMT
            Not After : Jun 29 01:10:21 2026 GMT
        Subject: CN=64D1B586DEE23789B34F71EBA9857EB1755C8F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a3:b2:ca:c3:cd:45:3c:87:aa:cf:8c:3a:91:
                    eb:26:02:57:5c:10:71:fb:c7:9d:1d:f0:7a:dd:b8:
                    75:9c:10:84:1c:fa:a9:66:fa:0d:c3:82:1e:6c:f5:
                    a5:fc:64:36:e0:b8:5a:e3:3d:35:57:9c:1b:91:5a:
                    6d:29:2c:ba:27:1a:d9:fc:9e:ab:3d:39:d4:28:74:
                    6a:c9:23:33:94:df:16:7e:23:81:b7:ad:e5:d4:7f:
                    7b:0a:fb:0f:96:c8:83:e3:c4:85:ae:12:56:44:ae:
                    a3:0b:9f:7a:27:5a:9f:49:81:bc:b8:e4:d6:8d:6e:
                    4c:1e:83:97:e4:da:e2:54:a8:b6:96:bb:68:3b:82:
                    50:fb:85:0a:63:d4:1b:80:1d:91:d0:95:cf:a0:b3:
                    a7:46:84:e6:1c:14:bb:5b:3f:22:fb:a1:a2:60:a8:
                    bd:26:bc:02:87:37:84:2a:23:bc:fb:06:e8:e2:d6:
                    61:d6:a9:46:db:2c:9c:dd:74:fc:62:11:c8:2e:96:
                    ed:b5:32:f2:86:3d:82:47:65:91:54:cb:91:52:50:
                    4e:cf:ee:5e:5f:30:19:6e:c5:13:2f:9a:df:49:ea:
                    ab:15:ee:d6:d2:a5:e0:4e:fe:55:a0:9d:56:7d:12:
                    e5:49:79:53:10:51:67:c5:5f:23:9c:82:4f:ad:93:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D1:B5:86:DE:E2:37:89:B3:4F:71:EB:A9:85:7E:B1:75:5C:8F:43
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:c4:0c:c3:8c:34:d3:4e:70:e5:f8:b9:39:39:39:ad:1a:
         3a:6c:49:81:35:4b:b0:0d:3d:7d:52:c5:2d:b7:33:54:62:70:
         96:88:74:0a:10:cd:a7:53:21:cb:0c:db:a7:1b:ec:d9:63:37:
         ef:58:ce:44:88:3b:eb:19:a2:77:ce:06:68:ab:21:4a:e3:4f:
         f7:54:f1:6a:82:18:54:db:80:c9:79:a9:f0:af:48:57:8a:c3:
         12:ad:dc:02:fb:30:1d:e5:ab:07:48:03:4b:98:d3:5e:83:03:
         70:8b:e1:85:e1:bb:92:67:72:6e:7b:21:25:e3:5b:fd:f7:6b:
         e6:a0:06:a8:97:9b:0e:d2:5b:61:91:93:1b:b3:c6:e3:b0:74:
         36:84:f9:c2:29:c0:3b:4e:14:fb:cd:8e:14:8c:01:97:61:e1:
         4d:59:46:5f:42:c8:a2:66:b9:db:cc:29:6f:8d:6f:83:3c:48:
         c8:d8:bb:5b:59:5f:3f:86:12:0a:8c:1d:0e:85:eb:fb:d8:bf:
         b2:4c:9f:c7:4d:7f:57:de:4c:e0:b7:b1:1e:34:b0:b9:24:4c:
         22:f9:99:54:a3:98:4f:b6:49:29:ad:a3:0a:9c:2d:80:71:3d:
         d5:27:1b:b3:92:fe:29:1a:0b:1b:61:72:0b:22:f9:e8:ab:4c:
         e1:f5:d0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:06:16 2025 by rpki-client