Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3234203d3e20323731353536.roa
File:                     3137392e36332e38302e302f32332d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          d6GDLAKD6499Tys8d3VxHufVYXmR2yZu6sfjSNKjpac=
Subject key identifier:   A0:73:E5:8B:BA:ED:17:E7:AA:FE:18:50:F9:3A:03:B2:D6:A6:73:3B
Certificate issuer:       /CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
Certificate serial:       227C18EA183375EDA0CDECE472AE60C85C145091
Authority key identifier: A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3234203d3e20323731353536.roa
Signing time:             Mon 14 Jul 2025 07:17:42 +0000
ROA not before:           Mon 14 Jul 2025 07:12:42 +0000
ROA not after:            Mon 13 Jul 2026 07:17:42 +0000
asID:                     271556
IP address blocks:        179.63.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7c:18:ea:18:33:75:ed:a0:cd:ec:e4:72:ae:60:c8:5c:14:50:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
        Validity
            Not Before: Jul 14 07:12:42 2025 GMT
            Not After : Jul 13 07:17:42 2026 GMT
        Subject: CN=A073E58BBAED17E7AAFE1850F93A03B2D6A6733B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:36:2d:7f:dc:62:0c:ad:33:94:fe:2a:ae:
                    10:a9:b0:52:6a:96:42:3f:94:f9:2f:f3:85:78:5a:
                    bc:f8:42:6b:94:44:77:1a:28:67:1f:1c:48:8a:51:
                    63:0e:d7:c2:c7:5b:e9:a1:cc:07:4e:9d:e2:97:e8:
                    3d:76:49:ba:6a:4a:f6:a9:d8:cc:9b:b7:a7:47:cb:
                    c2:eb:5b:21:df:51:12:49:3c:86:81:a7:d9:43:22:
                    12:1c:45:de:08:8c:4c:cc:72:b8:56:46:5e:66:f7:
                    fe:66:43:22:45:5a:56:67:44:be:e8:d8:58:a6:5a:
                    24:80:18:9f:e5:e5:93:3a:fa:6e:54:ed:77:d6:11:
                    eb:2e:0a:95:49:0c:87:68:5d:dd:ac:ba:06:1f:0a:
                    62:64:73:61:4f:85:ec:13:3a:3d:39:87:ad:16:94:
                    dd:f6:da:c7:ee:93:31:54:76:2c:4e:14:b7:81:c3:
                    0f:5f:91:8b:69:ec:2e:b7:dc:fb:e9:43:34:3a:3a:
                    8c:0e:04:13:4d:ff:08:e2:8e:cb:31:21:fa:b2:1f:
                    07:63:92:7f:7a:fc:56:fa:37:42:12:eb:44:a8:59:
                    3d:86:51:62:98:a3:e9:ab:c4:1f:c3:01:c7:d9:ba:
                    db:b3:5b:c8:ba:84:92:36:8a:f8:5b:a2:3f:f7:6a:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:73:E5:8B:BA:ED:17:E7:AA:FE:18:50:F9:3A:03:B2:D6:A6:73:3B
            X509v3 Authority Key Identifier:
                keyid:A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:b9:8a:df:e4:81:09:61:bc:30:5f:48:f7:02:8d:07:cc:05:
         e1:82:70:d2:93:f9:97:94:29:8a:be:9e:34:b2:59:f8:a5:ac:
         62:8a:8a:9c:c6:66:b2:d3:cb:b6:16:ae:7f:bf:6a:77:bf:1d:
         e0:8f:8b:56:93:4c:6f:b2:ac:16:dd:86:dd:fa:8e:84:f9:29:
         3b:4e:12:e2:72:03:4d:5f:12:4f:dd:80:c0:b5:b4:02:d0:4e:
         79:fd:94:af:ff:02:e8:fe:31:85:98:3f:0d:56:70:3f:fe:8e:
         28:50:10:24:a9:99:ed:49:97:92:7c:b5:8d:87:66:da:be:07:
         7d:6a:ec:c3:60:bb:52:2c:03:19:0b:19:35:42:ae:e4:6c:cc:
         0a:ef:f6:6b:bc:c6:86:99:af:4f:a7:eb:44:e0:dc:a1:43:2b:
         54:a1:05:f5:67:c0:c4:08:92:af:3a:bd:eb:c0:08:2e:2d:be:
         7b:91:b8:e6:35:2a:49:a8:b8:0e:42:78:90:63:ba:52:93:26:
         d5:7f:70:7d:dc:00:3a:a7:59:32:83:38:d7:66:cd:67:90:d1:
         5a:37:f3:cd:da:5e:aa:f3:6a:dd:a1:71:7d:91:93:5a:3c:9d:
         a1:bc:95:cf:4e:32:5d:4c:c1:15:ec:51:44:cc:0d:0c:b9:71:
         53:a5:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:15 2025 by rpki-client