Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37382e302f32332d3233203d3e20323633323833.roa
File:                     3137392e3132372e37382e302f32332d3233203d3e20323633323833.roa (raw, json)
Hash identifier:          PIXGCLpbf9gtbCwpcPUcBLDJQMMQsl83IXXZVTwrJzA=
Subject key identifier:   47:DA:FB:C1:58:E1:43:46:F4:A0:7F:04:C1:11:6E:19:33:C9:BC:27
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       2519DA048573C67B71CA2A6D42B93A5C5CE5DEC3
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37382e302f32332d3233203d3e20323633323833.roa
Signing time:             Sat 28 Jun 2025 03:19:56 +0000
ROA not before:           Sat 28 Jun 2025 03:14:56 +0000
ROA not after:            Sat 27 Jun 2026 03:19:56 +0000
asID:                     263283
IP address blocks:        179.127.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 13:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:19:da:04:85:73:c6:7b:71:ca:2a:6d:42:b9:3a:5c:5c:e5:de:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Jun 28 03:14:56 2025 GMT
            Not After : Jun 27 03:19:56 2026 GMT
        Subject: CN=47DAFBC158E14346F4A07F04C1116E1933C9BC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:7c:cd:b7:d2:b9:3d:81:2f:8a:94:a2:e3:
                    2c:a4:9c:2d:2a:41:e2:fe:11:a2:ff:de:65:9c:90:
                    ca:28:23:74:cd:e0:76:27:5f:88:7e:b8:d0:80:51:
                    e1:c5:9f:01:00:fa:05:09:c2:91:02:7c:54:58:54:
                    26:29:60:38:0c:68:3e:57:ee:9d:c7:19:e9:87:4d:
                    ce:5c:e0:54:e9:d7:0a:f2:cc:c2:12:5e:61:fe:44:
                    c8:75:8b:11:0b:f8:e8:79:f5:8b:e8:e4:01:b9:a0:
                    ce:a7:37:e2:74:f0:f6:39:a8:b2:4f:2d:e8:91:f9:
                    55:b8:52:d6:6b:ae:f3:0f:4d:0f:d9:4e:36:10:94:
                    33:b9:d5:c9:3e:3f:a0:c7:79:3e:78:99:2c:17:97:
                    73:71:40:92:7e:1a:74:78:d0:e2:29:93:63:21:96:
                    1d:6e:ed:c8:4f:44:49:43:c0:41:83:f0:37:fe:39:
                    48:6f:ce:bf:f5:3f:4a:5a:21:d6:be:e4:31:92:10:
                    a5:17:14:91:96:d5:80:6a:af:c8:62:fc:f6:cc:f1:
                    47:b3:92:b9:b3:ee:ca:af:c9:35:ca:b6:7c:c9:d4:
                    9b:46:f6:ef:3a:d7:2c:62:c7:47:b1:5d:76:e7:1c:
                    80:b5:e4:15:f8:c0:99:75:90:b8:78:6f:16:7a:49:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DA:FB:C1:58:E1:43:46:F4:A0:7F:04:C1:11:6E:19:33:C9:BC:27
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37382e302f32332d3233203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:8c:62:19:d8:57:a4:bb:85:ea:76:a7:ac:1d:e5:d8:81:
         85:ae:82:5a:58:bf:30:35:32:6b:5e:37:85:61:c1:44:80:21:
         57:7b:2a:d6:cf:4f:ff:23:21:e5:b8:78:3f:9f:70:9f:d9:f7:
         b4:e1:4c:a4:0c:b4:a6:a8:70:ad:ca:80:e4:17:ce:7c:27:5e:
         2e:8b:6d:c8:da:dc:cc:d8:bc:2f:d4:ec:bc:0a:a6:b6:f2:e7:
         0f:2c:54:55:60:3c:78:b2:6c:c1:1a:fd:2b:a9:87:60:3e:00:
         38:f5:59:98:84:d8:e7:59:b0:f4:21:95:dc:0a:06:ba:45:2a:
         fa:9a:48:e7:55:8f:34:9a:fa:aa:f7:f7:ba:86:d4:23:e2:cc:
         1e:35:5a:b0:ff:fa:e8:15:a9:ce:0a:a4:99:03:06:33:ce:a4:
         b0:d9:64:b2:bd:07:01:20:dc:7f:7e:5f:ec:bf:2b:2d:c6:d8:
         d2:0d:25:22:91:86:f0:59:eb:83:fa:fc:db:25:bc:84:4a:79:
         1d:52:28:8e:86:86:ea:d4:f7:42:94:1d:0b:7f:15:37:5c:22:
         77:14:db:62:bc:fb:0e:ed:2a:4d:82:eb:26:a9:d5:38:85:3e:
         4a:fe:28:e7:6b:a6:2b:7a:87:31:88:69:a6:41:98:1a:a5:f2:
         b7:47:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:23:21 2025 by rpki-client