Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/3138372e34392e3136302e302f32342d3234203d3e20323730343639.roa
File:                     3138372e34392e3136302e302f32342d3234203d3e20323730343639.roa (raw, json)
Hash identifier:          5Jhu1R8rK48gGaELDslLkhWeBn+fOtsXjd65yNADEV0=
Subject key identifier:   5E:88:0E:D3:38:60:9B:33:4C:9D:6C:10:D9:23:F8:68:44:E9:98:D1
Certificate issuer:       /CN=BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B
Certificate serial:       20515B8FE3A4BE5DFE2CB8A68AC4B1B18E7B7EF7
Authority key identifier: BC:6B:7E:4B:33:BE:67:CD:AB:CC:AB:2A:5C:7F:6F:F7:E0:77:21:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/3138372e34392e3136302e302f32342d3234203d3e20323730343639.roa
Signing time:             Thu 24 Jul 2025 00:00:00 +0000
ROA not before:           Wed 23 Jul 2025 23:55:00 +0000
ROA not after:            Thu 23 Jul 2026 00:00:00 +0000
asID:                     270469
IP address blocks:        187.49.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.crl
                          rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 01:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:51:5b:8f:e3:a4:be:5d:fe:2c:b8:a6:8a:c4:b1:b1:8e:7b:7e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B
        Validity
            Not Before: Jul 23 23:55:00 2025 GMT
            Not After : Jul 23 00:00:00 2026 GMT
        Subject: CN=5E880ED338609B334C9D6C10D923F86844E998D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:14:0f:42:9c:7a:f4:99:0e:a5:22:8c:62:
                    4f:28:9b:98:bc:a4:c7:81:25:79:37:7d:df:f0:10:
                    37:ea:4f:f4:5a:c4:66:f2:f8:a4:52:6e:b6:ca:01:
                    fc:c6:96:7c:f1:a3:5c:df:e2:cb:b5:8c:94:85:45:
                    73:9f:ef:45:f3:22:34:b1:14:25:55:dc:0d:bd:db:
                    b5:19:82:d1:77:8b:d0:f8:c0:38:94:16:e2:3c:98:
                    29:52:a2:67:11:a7:19:c2:23:d1:09:3d:ec:f4:fc:
                    33:c0:9d:74:ee:73:14:01:b5:40:6b:9b:1c:02:b3:
                    0f:9b:32:a9:9a:80:77:55:ec:e1:a0:15:a4:ae:15:
                    f9:ef:6b:c2:58:d3:8a:93:9b:90:59:df:33:ee:cc:
                    0a:ce:28:34:dd:d1:6a:31:51:aa:d4:11:84:75:84:
                    9c:34:d7:38:c4:01:58:ae:c3:c7:71:90:f3:d2:fe:
                    43:e7:56:b8:2d:47:9e:a4:06:a0:ad:8b:24:2f:9d:
                    21:e2:8c:84:68:01:11:51:0f:91:6d:56:34:4c:63:
                    34:c4:fa:32:e1:26:9a:7c:6d:ba:54:ee:09:ef:06:
                    9f:4e:57:b5:11:ef:88:fa:1e:35:ae:61:e5:59:f4:
                    19:7e:de:c7:6c:18:0f:96:f7:90:7e:c3:8b:2f:73:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:88:0E:D3:38:60:9B:33:4C:9D:6C:10:D9:23:F8:68:44:E9:98:D1
            X509v3 Authority Key Identifier:
                keyid:BC:6B:7E:4B:33:BE:67:CD:AB:CC:AB:2A:5C:7F:6F:F7:E0:77:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/3138372e34392e3136302e302f32342d3234203d3e20323730343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:53:cd:04:9e:dd:68:cf:8a:aa:c7:70:e9:e8:ec:64:34:05:
         6c:c2:46:24:b5:89:af:1e:08:98:09:c9:3a:b9:c6:e3:8e:41:
         23:ea:fa:f9:3c:af:54:1a:8e:ec:0e:a1:8b:b2:8b:6c:12:2b:
         54:f8:c2:ac:52:96:11:37:7b:27:4f:2a:a2:cb:8d:f4:1e:06:
         f5:de:2f:ba:ce:31:ca:4e:43:41:9d:48:72:a0:15:07:4d:59:
         e6:89:90:95:66:f3:2b:59:13:12:f8:8c:ac:5d:dd:95:e3:b4:
         75:f0:98:7b:68:9e:1c:8f:04:79:71:cc:08:b0:f8:d0:d3:b5:
         bf:ce:2d:87:01:c4:63:8c:73:a8:87:10:b0:e1:c9:0d:1e:ce:
         d5:ee:ea:75:91:17:2c:65:5a:db:09:2d:86:8e:5b:99:bd:83:
         fc:10:18:f1:f0:a0:00:11:c6:c1:97:6c:6a:74:b2:fb:f1:a2:
         9d:00:2a:f9:8b:24:3c:56:49:20:da:8b:32:61:ef:a4:d4:8f:
         98:7a:c7:8e:9a:d6:e9:61:02:d7:83:f8:49:31:52:65:4f:ac:
         ac:bc:63:4f:81:93:98:0a:89:3f:5a:10:f9:74:5e:6d:65:ae:
         a7:24:53:0a:33:26:b2:42:cf:95:a5:96:e1:32:61:fc:d6:37:
         dc:24:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:23 2025 by rpki-client