Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/3138372e34392e3136312e302f32342d3234203d3e20323730343639.roa
File:                     3138372e34392e3136312e302f32342d3234203d3e20323730343639.roa (raw, json)
Hash identifier:          0XDMtqDVqxJlsrAZHn7fFKrj/QHFlnm7uIopa/1cbNI=
Subject key identifier:   70:29:AF:E1:8F:41:70:DA:BD:DE:0C:8E:A2:9B:5F:0F:B4:0D:AB:33
Certificate issuer:       /CN=BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B
Certificate serial:       6334B0289899951D9CC92E40038801DF1708A20E
Authority key identifier: BC:6B:7E:4B:33:BE:67:CD:AB:CC:AB:2A:5C:7F:6F:F7:E0:77:21:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/3138372e34392e3136312e302f32342d3234203d3e20323730343639.roa
Signing time:             Thu 24 Jul 2025 00:00:23 +0000
ROA not before:           Wed 23 Jul 2025 23:55:23 +0000
ROA not after:            Thu 23 Jul 2026 00:00:23 +0000
asID:                     270469
IP address blocks:        187.49.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.crl
                          rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 01:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:34:b0:28:98:99:95:1d:9c:c9:2e:40:03:88:01:df:17:08:a2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B
        Validity
            Not Before: Jul 23 23:55:23 2025 GMT
            Not After : Jul 23 00:00:23 2026 GMT
        Subject: CN=7029AFE18F4170DABDDE0C8EA29B5F0FB40DAB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:89:1d:13:ae:fa:9d:27:a0:bb:b5:47:14:
                    cb:5e:7d:8a:c7:43:d7:97:80:e8:f0:53:88:96:b3:
                    a7:66:92:ce:13:12:7b:e9:71:b7:c8:0a:24:6b:41:
                    a1:e9:2f:12:33:c1:fa:32:c6:4f:41:98:73:f8:03:
                    34:9e:2c:84:e1:85:95:69:ca:e2:0a:d0:20:98:b9:
                    9a:37:cf:82:14:d0:d6:b5:82:0a:ef:f7:17:fa:db:
                    ce:79:39:be:02:14:e6:c1:43:59:63:a5:9a:a0:b2:
                    44:b1:4d:2a:0f:31:ce:f8:7e:cd:a7:81:f6:76:34:
                    6b:80:b7:94:1e:f9:42:bb:cb:2d:ae:ea:44:f8:05:
                    1f:78:8b:f4:2a:f1:8a:3b:d4:73:57:b6:0d:7d:f9:
                    be:2a:22:f0:18:0f:10:15:cb:f2:1d:98:4d:af:24:
                    53:47:b3:9d:28:8b:b1:11:08:02:50:73:b3:cf:aa:
                    f6:b6:b9:bd:e6:59:00:5e:dd:71:ec:dc:d6:8b:ed:
                    da:41:32:26:97:92:ed:68:1f:45:c0:16:47:42:50:
                    0e:df:f8:2c:59:e1:c4:ee:fd:e9:22:6b:30:83:a6:
                    d7:24:ee:77:7c:a0:ba:a6:f4:3d:1a:5e:34:6c:85:
                    fd:12:7d:ff:d1:5b:fb:cb:14:28:19:28:39:71:80:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:29:AF:E1:8F:41:70:DA:BD:DE:0C:8E:A2:9B:5F:0F:B4:0D:AB:33
            X509v3 Authority Key Identifier:
                keyid:BC:6B:7E:4B:33:BE:67:CD:AB:CC:AB:2A:5C:7F:6F:F7:E0:77:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/3138372e34392e3136312e302f32342d3234203d3e20323730343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:fb:61:e3:8c:99:30:ea:b6:04:5d:65:40:f0:cd:aa:47:
         92:0b:df:e2:0d:31:50:8c:cc:de:5a:f9:5c:6c:cb:14:46:1c:
         ea:bd:83:da:a0:60:a9:f3:8c:36:20:01:8b:df:59:b8:6c:18:
         a9:46:fa:3b:87:a1:e3:1d:1a:88:f6:94:12:d8:bc:b7:f8:b8:
         1f:0e:1a:8d:53:0b:a7:f9:a8:0b:ec:6c:76:a4:7b:f1:68:e2:
         50:13:53:e8:5d:f4:3b:d4:7a:f5:b8:dc:3b:de:e9:e8:65:e4:
         30:63:9e:37:f5:6b:36:8f:05:c0:d1:f8:c3:bd:2a:c8:35:76:
         a1:c6:fd:b0:7a:3d:09:33:92:b5:69:4d:73:72:05:0c:1c:1b:
         ad:4d:0f:43:4f:3a:53:67:e1:b1:f5:d7:1b:6b:47:78:a2:15:
         45:b7:07:59:4a:0a:84:47:52:d3:1c:c8:64:ee:a3:16:bd:2d:
         39:dc:63:34:3e:3a:a9:a3:7b:04:9c:e6:57:9b:19:9c:4d:c1:
         32:51:4b:99:23:63:0c:05:75:81:17:ab:4a:9f:99:b3:a0:49:
         2b:26:f0:a0:54:07:b3:d4:b0:53:94:2c:c4:f5:88:e2:5e:52:
         56:1e:95:96:c8:26:23:09:a8:95:96:0f:8d:0c:d7:f9:c5:44:
         58:de:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:39:30 2025 by rpki-client