Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/3137392e34322e3132302e302f32322d3232203d3e20323731313930.roa
File:                     3137392e34322e3132302e302f32322d3232203d3e20323731313930.roa (raw, json)
Hash identifier:          TfAMHSXwbY24vrtPxRXAwD74fc6KDbIbnLsDTfBZHJM=
Subject key identifier:   6C:78:79:D8:52:91:01:66:C2:DE:89:2D:D3:BE:D3:E2:03:C6:8C:6F
Certificate issuer:       /CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750
Certificate serial:       6D11B8F02D4B536B7B083549D87249447EFD4355
Authority key identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/3137392e34322e3132302e302f32322d3232203d3e20323731313930.roa
Signing time:             Tue 29 Apr 2025 04:36:03 +0000
ROA not before:           Tue 29 Apr 2025 04:31:03 +0000
ROA not after:            Tue 28 Apr 2026 04:36:03 +0000
asID:                     271190
IP address blocks:        179.42.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl
                          rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:b8:f0:2d:4b:53:6b:7b:08:35:49:d8:72:49:44:7e:fd:43:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750
        Validity
            Not Before: Apr 29 04:31:03 2025 GMT
            Not After : Apr 28 04:36:03 2026 GMT
        Subject: CN=6C7879D852910166C2DE892DD3BED3E203C68C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:9c:38:7e:f0:9b:17:33:58:67:92:be:9d:
                    ad:ca:cc:f0:ec:f1:69:1d:cf:88:0e:49:9b:63:99:
                    4e:2a:bc:08:f2:4e:b3:7b:a8:d8:66:51:59:b7:af:
                    3a:f8:30:5f:ae:be:55:2b:c9:1b:fe:7f:76:f5:57:
                    d2:ec:2e:65:99:15:0e:84:cc:99:4c:74:21:cc:b0:
                    3c:44:6e:c4:09:7e:bd:d6:a2:70:05:63:01:46:d1:
                    37:f4:7a:1f:4b:3e:e0:16:5b:e1:7c:29:17:97:90:
                    30:10:78:1a:11:2e:f2:9c:74:ee:a3:a8:d5:cb:db:
                    f1:c4:74:b9:f1:9c:a3:3d:77:10:89:ca:3b:15:72:
                    79:1c:02:be:7d:0b:d6:6a:61:75:74:1c:ed:ff:37:
                    ab:46:6a:fd:8a:11:dc:16:3e:d7:24:29:a7:3b:b4:
                    e2:56:77:cd:0e:aa:49:ba:b3:c4:a3:c5:0f:0d:3a:
                    d9:7c:d1:6d:52:91:c4:cb:7e:3c:b4:e0:13:cd:d2:
                    45:3a:5b:77:f1:90:e2:59:dd:ca:bc:ac:1f:56:d8:
                    89:82:b7:89:b5:12:a3:c6:85:8f:b8:db:f6:f0:f7:
                    5f:2a:59:44:b3:2d:89:4f:14:10:08:ff:68:38:c7:
                    e2:53:3e:e2:f3:49:7f:3f:a9:d3:b3:34:02:a1:14:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:78:79:D8:52:91:01:66:C2:DE:89:2D:D3:BE:D3:E2:03:C6:8C:6F
            X509v3 Authority Key Identifier:
                keyid:2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/3137392e34322e3132302e302f32322d3232203d3e20323731313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:e9:8f:a7:95:7f:e9:e8:82:64:6d:31:80:92:6e:c9:70:
         64:30:3d:b3:2c:be:b4:81:40:0b:aa:0b:e0:a9:62:73:f6:20:
         08:e6:80:bd:f5:87:9f:1c:bf:62:7d:4c:56:03:43:1c:05:4f:
         38:54:df:d6:82:0b:15:fa:40:79:ed:21:77:68:23:85:0e:c8:
         51:b5:0b:6c:d9:6f:3a:b0:08:a2:6d:bb:91:2d:a9:ab:50:d1:
         07:41:c3:e8:2a:ea:82:ab:54:bf:fd:8f:60:0d:50:f8:79:b3:
         75:07:82:58:d4:5d:b2:5c:73:d2:30:43:33:e2:e1:73:b7:0a:
         c2:60:65:07:8c:a1:25:e6:e2:a4:3d:f8:75:08:72:b6:a2:58:
         64:3b:14:5d:20:b1:57:6c:b9:5d:12:5e:ee:e9:cc:82:ad:81:
         d2:9b:1a:08:06:36:bd:b0:e1:3c:c0:46:e5:9e:ba:95:63:fb:
         87:4d:e8:41:da:5f:03:a6:4b:71:17:f0:a5:f8:b9:6b:6a:20:
         54:32:f4:91:bb:a2:9b:ca:70:a9:00:a7:b9:3d:e3:d7:ae:f9:
         12:9f:29:9e:a4:71:51:10:76:9a:4b:b6:74:a4:24:95:84:d5:
         43:da:01:cb:80:3e:9b:d6:26:22:cf:b2:e5:a6:f5:7f:f1:60:
         b3:af:11:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:18:57 2025 by rpki-client