Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32342d3234203d3e20323731313034.roa
File:                     3137392e34322e342e302f32342d3234203d3e20323731313034.roa (raw, json)
Hash identifier:          OyHFav+ObKN7JqAvndz8A2iMpwVugzvwIpehuw1FTkE=
Subject key identifier:   CF:5B:55:AC:79:18:E7:E9:B2:D3:7D:F8:25:33:AB:3F:5C:55:3D:B1
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       4F9296A5E5F25898118FDF5EBA5FDB2E7D895DBC
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32342d3234203d3e20323731313034.roa
Signing time:             Wed 16 Jul 2025 14:41:09 +0000
ROA not before:           Wed 16 Jul 2025 14:36:09 +0000
ROA not after:            Wed 15 Jul 2026 14:41:09 +0000
asID:                     271104
IP address blocks:        179.42.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl
                          rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:92:96:a5:e5:f2:58:98:11:8f:df:5e:ba:5f:db:2e:7d:89:5d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Jul 16 14:36:09 2025 GMT
            Not After : Jul 15 14:41:09 2026 GMT
        Subject: CN=CF5B55AC7918E7E9B2D37DF82533AB3F5C553DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:b9:0b:ac:e5:a2:b4:c4:c3:1c:4d:9b:6b:
                    b0:2d:64:75:54:57:6d:24:03:71:b9:10:a3:6a:ae:
                    8e:b3:7b:bc:0b:ed:6b:04:26:d2:1e:01:64:7f:b7:
                    1b:89:6d:d5:e3:77:3a:fa:f0:d6:ec:fa:d0:68:ba:
                    eb:5a:89:91:03:09:97:e5:f3:92:b0:7f:f0:9a:79:
                    51:05:f7:a5:68:48:9b:17:99:9c:af:10:fa:36:e2:
                    bf:ba:36:5e:e7:72:c3:f3:f3:98:6e:1e:ad:a1:d3:
                    74:a8:21:1c:69:c3:44:ed:20:7e:f6:f5:c6:16:af:
                    5e:f9:45:13:79:34:e1:17:6a:50:d0:15:c9:a2:20:
                    7e:83:5a:03:1c:ec:48:f2:c7:71:e5:c4:f5:01:0b:
                    50:0d:04:d1:d5:3b:90:8b:31:e9:14:2f:aa:aa:7a:
                    84:a1:39:be:3a:ff:41:37:69:7d:7d:32:da:43:5a:
                    d3:fd:0a:88:71:9a:76:60:58:6b:ce:92:3f:f1:7c:
                    dd:7f:07:30:d0:a0:c7:75:ad:fd:d5:ad:41:4f:2a:
                    58:09:31:26:92:df:3a:50:15:64:92:1b:13:0d:cd:
                    a0:41:76:a9:ee:98:f9:5d:f2:69:1e:c0:2b:c5:e3:
                    88:49:7a:2e:47:73:fa:00:37:50:e6:94:e2:8b:1e:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5B:55:AC:79:18:E7:E9:B2:D3:7D:F8:25:33:AB:3F:5C:55:3D:B1
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e342e302f32342d3234203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:7c:95:b2:29:91:dc:8c:2d:ee:19:2b:07:e4:e0:25:5a:fe:
         9c:5a:8f:dc:f9:38:34:51:0e:2b:b5:a9:f0:8a:90:bd:72:c7:
         84:70:52:be:40:ce:35:50:e1:bb:3e:2d:29:d3:22:b9:d5:aa:
         e3:2f:83:de:90:c1:27:17:bf:5b:98:69:41:db:c4:2c:30:9e:
         b4:d4:f9:6c:35:6f:5b:c9:a1:ee:d3:a1:a2:34:3e:fb:85:a0:
         83:92:d1:18:aa:e9:8b:de:54:0d:84:de:a3:5a:10:d7:cf:f4:
         a3:2d:5e:ef:b1:d0:1a:45:61:fd:ef:06:be:e1:f3:fb:a2:2d:
         92:77:83:2c:23:e6:42:3b:8f:ff:d2:ed:bd:0d:d2:a3:d7:66:
         9e:9d:fd:93:0d:12:9b:6a:61:37:4b:c6:41:ac:38:14:1a:a9:
         a1:e0:9d:b4:02:1c:2e:f1:58:5f:33:c7:c5:b2:45:b1:73:6a:
         65:d5:e5:8f:3a:26:81:43:5e:72:ea:27:df:a6:9c:ca:50:38:
         aa:bf:47:6c:67:d1:5f:bc:dc:d3:d0:07:8c:22:56:39:2c:ed:
         e5:c4:43:ee:05:3f:a6:a9:a5:29:76:3a:87:1b:80:94:33:a2:
         db:22:14:07:e8:da:69:a1:0b:96:f4:1f:dd:58:f5:de:46:71:
         29:de:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:10:40 2025 by rpki-client