Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa
File:                     3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (raw, json)
Hash identifier:          T2C6JO37uu1Wed9fw/h/i4fvBlLzw0CaTwVkAF2Ypz8=
Subject key identifier:   6E:05:28:9D:A9:0F:71:A7:13:D2:6C:B3:90:72:8B:2E:A8:E2:CA:81
Certificate issuer:       /CN=834325D3983126D2D723BBC6EC0C6196882A6196
Certificate serial:       527410BF9FD1EBF598A15BEE9B00AE3A8770A7C0
Authority key identifier: 83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa
Signing time:             Fri 18 Jul 2025 14:04:09 +0000
ROA not before:           Fri 18 Jul 2025 13:59:09 +0000
ROA not after:            Fri 17 Jul 2026 14:04:09 +0000
asID:                     271047
IP address blocks:        179.48.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
                          rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:74:10:bf:9f:d1:eb:f5:98:a1:5b:ee:9b:00:ae:3a:87:70:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834325D3983126D2D723BBC6EC0C6196882A6196
        Validity
            Not Before: Jul 18 13:59:09 2025 GMT
            Not After : Jul 17 14:04:09 2026 GMT
        Subject: CN=6E05289DA90F71A713D26CB390728B2EA8E2CA81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:98:6f:4d:2a:02:bc:a9:1b:07:e3:c4:cb:
                    ca:27:f3:69:a1:f3:1e:26:a6:8b:4e:7e:ef:ac:97:
                    54:2f:85:6e:32:54:47:97:14:46:d5:d1:35:37:1b:
                    7f:83:bd:ed:12:1a:e2:f0:cc:f2:ba:b1:07:5d:0b:
                    e3:3e:c8:64:03:1a:3c:f4:b5:19:2d:f1:45:f3:63:
                    6f:e9:e2:7e:2f:f8:1d:49:6f:25:0a:dd:91:41:55:
                    f8:c0:f7:2a:40:66:ca:f9:02:b6:a9:b4:cc:4a:f7:
                    cd:24:b6:1d:10:bf:70:8d:7a:95:86:96:23:cd:09:
                    10:a5:2d:df:72:67:85:19:4c:f2:c5:32:a9:e8:bf:
                    93:f4:0f:69:69:a6:e2:94:02:bc:b4:59:9c:9b:94:
                    83:36:46:bc:e8:a3:e7:80:7c:d0:c4:92:fb:a7:1f:
                    a0:4b:a0:c0:49:6c:18:ab:d7:86:fb:ca:cc:29:73:
                    d7:89:16:cb:72:6e:1a:55:bf:40:12:5c:b1:65:23:
                    70:9a:c5:f4:9e:47:5f:5f:16:5c:30:b9:16:4d:41:
                    1c:40:d8:b7:83:57:bd:3e:82:b8:ff:bd:cb:20:3f:
                    2d:0e:99:43:40:87:48:99:fd:ad:bb:2d:4b:40:fd:
                    f8:4d:6f:e9:a7:f3:a0:9f:46:64:18:b6:86:cb:b4:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:28:9D:A9:0F:71:A7:13:D2:6C:B3:90:72:8B:2E:A8:E2:CA:81
            X509v3 Authority Key Identifier:
                keyid:83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f3:6b:92:4f:c4:4b:5b:87:a4:07:97:bd:f4:fc:89:8c:69:
         c9:a7:35:4a:76:20:08:d1:8f:f3:79:b0:ad:0c:6b:ef:7a:11:
         8d:48:cd:0f:b9:be:d3:24:0f:74:df:7a:52:9b:e6:ba:89:e2:
         20:8e:42:44:19:52:8a:a3:4b:06:36:1d:c0:17:48:d0:bc:1d:
         6b:e1:0f:98:37:36:31:8c:b7:52:fa:80:d9:77:c9:9c:93:93:
         66:c1:53:8a:c7:8b:6b:70:ad:9a:6a:e8:67:cd:bd:a9:61:48:
         2a:98:3d:00:bf:58:14:69:59:ca:13:67:2f:cc:c9:1a:d4:4d:
         d2:a8:a1:4b:28:4e:41:42:bd:0c:24:eb:40:25:f4:c9:26:d1:
         03:0c:77:be:ba:20:5a:89:8e:51:a9:e0:04:53:57:09:7a:50:
         00:e4:2f:74:6e:e3:4d:0c:50:bd:92:96:c4:91:b1:8c:e9:a1:
         95:3e:0f:06:82:a1:0c:c7:44:c4:af:dd:e8:39:28:5f:fa:85:
         86:07:37:66:ba:43:64:08:88:57:13:90:0b:06:76:3d:45:8f:
         2a:68:d4:ed:e1:dc:4a:ec:38:20:c8:fc:7f:44:ed:49:7b:93:
         5e:53:4b:76:d9:e2:3a:95:07:ae:1b:0b:70:0d:5a:4b:94:2e:
         1d:11:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:25:04 2025 by rpki-client