Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/3137392e3138392e31362e302f32302d3332203d3e203532363330.roa
File:                     3137392e3138392e31362e302f32302d3332203d3e203532363330.roa (raw, json)
Hash identifier:          uQt9gwjEXTucYPphfDZSIWMz9AyvkfSCAUIqktbvyQQ=
Subject key identifier:   A4:7F:1D:E2:A1:80:38:D1:F5:9B:D2:43:82:47:3F:79:10:F9:51:45
Certificate issuer:       /CN=1B200E7AB6E3F7993DDE78A476E469885DFCE820
Certificate serial:       3186A95D86D1AAD1A017CB00CE47F70C224BA72E
Authority key identifier: 1B:20:0E:7A:B6:E3:F7:99:3D:DE:78:A4:76:E4:69:88:5D:FC:E8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/3137392e3138392e31362e302f32302d3332203d3e203532363330.roa
Signing time:             Fri 20 Jun 2025 20:42:44 +0000
ROA not before:           Fri 20 Jun 2025 20:37:44 +0000
ROA not after:            Fri 19 Jun 2026 20:42:44 +0000
asID:                     52630
IP address blocks:        179.189.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.crl
                          rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:86:a9:5d:86:d1:aa:d1:a0:17:cb:00:ce:47:f7:0c:22:4b:a7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B200E7AB6E3F7993DDE78A476E469885DFCE820
        Validity
            Not Before: Jun 20 20:37:44 2025 GMT
            Not After : Jun 19 20:42:44 2026 GMT
        Subject: CN=A47F1DE2A18038D1F59BD24382473F7910F95145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:c3:a1:f4:13:31:11:18:03:e2:6b:40:58:
                    01:53:81:34:59:24:1e:04:c6:b4:dd:45:95:cf:29:
                    2e:cd:d3:9f:a5:5f:6b:ff:01:49:09:c3:e6:ee:94:
                    51:54:7e:64:d5:1e:57:c3:d6:d7:a7:28:de:f0:32:
                    92:4c:cb:95:60:fb:4c:f6:0d:25:81:7b:46:b0:ab:
                    a0:8a:e1:36:b3:50:48:cb:3d:45:63:b7:8c:dd:72:
                    c4:c6:a6:97:15:cf:7f:af:74:0d:35:87:d8:30:0a:
                    1c:22:9e:2a:5a:3c:e8:7c:de:b2:7f:ac:65:9b:0e:
                    91:04:f5:e6:75:77:d1:23:6c:3f:87:f5:30:cc:8a:
                    33:6f:b6:eb:c3:13:6b:7a:96:d5:46:c8:4c:a6:20:
                    1e:84:12:d2:dd:f8:c4:68:c2:57:21:82:ec:6e:9d:
                    d0:34:bd:fc:34:75:56:a0:1d:35:e8:cf:0b:5c:bb:
                    21:e6:7d:37:1c:24:dc:aa:24:ce:9e:20:1c:66:b8:
                    59:fd:38:92:03:4c:71:93:bf:2e:79:de:d2:3b:7d:
                    d8:1a:2e:f6:32:65:60:01:2c:f4:d5:8a:7c:12:77:
                    02:c4:5b:e7:ca:7a:c6:ca:37:0d:f2:0e:a7:ee:8f:
                    9b:42:ab:a3:6a:d6:1b:20:a7:6b:d3:0b:d6:a2:83:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:1D:E2:A1:80:38:D1:F5:9B:D2:43:82:47:3F:79:10:F9:51:45
            X509v3 Authority Key Identifier:
                keyid:1B:20:0E:7A:B6:E3:F7:99:3D:DE:78:A4:76:E4:69:88:5D:FC:E8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/3137392e3138392e31362e302f32302d3332203d3e203532363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:86:4f:a6:76:28:5b:b0:69:a1:46:b5:6e:a1:5a:a3:ec:2e:
         66:93:bf:e2:5e:fb:25:ad:1d:73:fa:4b:e0:1a:72:1b:da:44:
         73:a6:0b:e4:0d:77:08:8b:fe:5c:a3:21:aa:50:b4:55:b8:9c:
         71:2f:88:d4:6c:b9:31:f6:02:d4:29:31:3b:d4:3c:9f:8f:da:
         be:1f:56:27:ff:60:dd:48:05:06:b6:47:55:27:72:93:d6:e4:
         a9:bf:36:44:47:a0:b1:8e:08:fd:72:d4:7a:21:c1:28:64:91:
         07:82:d0:71:ef:47:39:01:59:6f:bc:07:d8:7a:ec:96:ae:24:
         46:ba:ee:c4:87:d5:15:04:11:52:fb:da:89:3f:c0:1f:37:44:
         92:2f:f2:be:8a:da:16:87:7b:a1:f3:04:69:21:0b:02:ce:58:
         a2:19:3c:e2:69:67:04:31:16:9c:9c:82:b9:e6:fa:45:7b:ba:
         f7:bf:e0:9c:44:4d:d6:5d:34:1b:83:b3:03:75:e6:b1:9d:6b:
         69:ba:53:4a:88:d6:04:cd:54:7e:aa:2a:c5:89:7f:61:3c:49:
         75:1c:56:03:4a:82:86:a4:b6:15:54:05:4c:f3:67:44:e9:ce:
         d5:5c:ac:b2:8a:fe:3d:a6:d3:93:17:78:02:5a:4f:b4:11:a1:
         ff:ea:a5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:26:31 2025 by rpki-client