Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e352e302f32342d3234203d3e20323731313034.roa
File:                     3137392e34322e352e302f32342d3234203d3e20323731313034.roa (raw, json)
Hash identifier:          NToC1t2N2qUdAStpMIm2V8W2Ns2M7teN/epDQ/14tb4=
Subject key identifier:   D4:8D:4C:1E:F1:AF:07:4D:CB:98:4F:48:95:D3:67:25:F6:EA:FE:5F
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       67A2DD56744F3E9A34D41F618C6F7F2009542549
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e352e302f32342d3234203d3e20323731313034.roa
Signing time:             Wed 16 Jul 2025 14:42:23 +0000
ROA not before:           Wed 16 Jul 2025 14:37:23 +0000
ROA not after:            Wed 15 Jul 2026 14:42:23 +0000
asID:                     271104
IP address blocks:        179.42.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl
                          rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a2:dd:56:74:4f:3e:9a:34:d4:1f:61:8c:6f:7f:20:09:54:25:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Jul 16 14:37:23 2025 GMT
            Not After : Jul 15 14:42:23 2026 GMT
        Subject: CN=D48D4C1EF1AF074DCB984F4895D36725F6EAFE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:55:77:e3:1a:96:2f:b4:a3:75:88:6f:dd:
                    e1:20:20:80:43:40:5f:f2:b8:a1:21:3f:75:ac:17:
                    aa:1f:a0:64:5f:be:de:a8:86:80:65:c1:71:fa:af:
                    18:8c:80:61:68:e7:72:1c:e8:34:87:82:35:ab:07:
                    97:37:37:ba:74:2c:2a:2f:a2:07:cd:4d:5b:29:8c:
                    00:97:88:3b:ba:05:64:4b:34:1a:e4:da:e8:e0:68:
                    3e:9b:33:59:60:0e:87:09:3d:a4:74:45:66:3a:f2:
                    45:78:b6:cc:aa:af:ab:93:42:21:a6:9f:37:3a:e7:
                    0f:7d:bc:5d:9a:51:ec:6e:da:a3:21:ab:82:0e:17:
                    f1:16:4c:05:46:1e:95:f3:64:3e:58:de:3e:dd:7d:
                    41:16:35:4b:7e:75:e4:a5:d0:d7:1b:f3:53:ed:bc:
                    9b:13:23:56:18:bf:73:37:b7:53:54:ca:29:bc:8f:
                    87:9c:64:53:c9:f9:ec:64:fe:7d:8f:d2:6f:c4:1f:
                    91:a3:20:76:3c:ca:f2:7f:c0:28:6e:54:70:0c:35:
                    63:c3:d4:a2:9a:af:55:85:67:8f:17:68:99:1c:91:
                    8a:d0:de:16:ea:15:b9:37:38:f8:c7:05:cb:55:ff:
                    65:de:57:0e:d6:fc:45:be:b5:4b:81:ce:92:2c:05:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8D:4C:1E:F1:AF:07:4D:CB:98:4F:48:95:D3:67:25:F6:EA:FE:5F
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/3137392e34322e352e302f32342d3234203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:9c:79:7a:05:8b:05:12:20:df:5d:99:17:a0:2d:b9:c3:ed:
         18:f2:2e:f5:1f:0c:aa:c3:6e:af:7e:2e:d3:29:de:69:c7:6c:
         b1:f3:f2:70:6e:d7:b4:34:91:b9:70:0a:c9:b5:1d:f8:0b:52:
         41:fc:89:68:5b:c0:96:a4:7d:ca:d4:39:72:f3:0a:db:66:9d:
         a9:f7:1b:f7:2a:f9:44:e4:55:06:e7:16:d2:32:3c:7f:7a:6a:
         21:03:44:0a:09:bb:bd:28:87:51:4c:64:20:c0:cf:c0:b1:8e:
         f3:dd:05:a2:f6:7a:9d:a6:a8:26:ae:7a:41:d1:25:2c:d0:44:
         5c:47:5f:2f:dd:ef:46:eb:d9:87:6d:25:46:06:61:52:b4:8a:
         77:18:82:5c:85:e5:38:8f:31:b9:39:dd:af:65:75:4d:ad:53:
         3a:6f:eb:c7:61:89:6b:31:c5:e2:6c:5e:a2:5a:b1:03:a3:d8:
         9f:4d:d6:ce:81:9a:d4:b3:1b:8f:cd:42:28:f5:8b:98:0a:78:
         bd:9f:1f:31:73:02:4e:ed:62:a3:0d:7b:01:78:69:c0:03:65:
         b7:06:f6:ff:61:f8:0e:23:0f:fa:b9:56:08:07:69:d2:bd:ae:
         af:99:f2:51:a3:38:a0:79:1d:fa:79:04:b9:66:88:ae:51:30:
         95:3d:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:53:33 2025 by rpki-client