Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32362e302f32342d3234203d3e20323732353534.roa
File:                     3137392e36332e32362e302f32342d3234203d3e20323732353534.roa (raw, json)
Hash identifier:          N8a1UDO7VDQENuA3p0zI8APV3bJRhKMGPfB1N6syJP0=
Subject key identifier:   A9:A1:5A:B8:5D:3D:CA:84:99:3D:74:36:CE:D0:93:20:B2:EE:CC:DC
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       4FDE1B76FAEB72F7859002CD5FBCD8CB322D0316
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32362e302f32342d3234203d3e20323732353534.roa
Signing time:             Thu 06 Mar 2025 05:29:28 +0000
ROA not before:           Thu 06 Mar 2025 05:24:28 +0000
ROA not after:            Thu 05 Mar 2026 05:29:28 +0000
asID:                     272554
IP address blocks:        179.63.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl
                          rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:de:1b:76:fa:eb:72:f7:85:90:02:cd:5f:bc:d8:cb:32:2d:03:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Mar  6 05:24:28 2025 GMT
            Not After : Mar  5 05:29:28 2026 GMT
        Subject: CN=A9A15AB85D3DCA84993D7436CED09320B2EECCDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:cd:5e:e0:b9:eb:69:1a:9c:39:76:29:d8:
                    52:56:0a:38:01:e1:4d:9e:fe:53:ed:86:e6:9d:8b:
                    33:af:70:a6:28:e0:5a:66:5f:60:a6:83:20:ab:bc:
                    a0:96:b5:1c:80:ec:b3:51:fd:6f:5d:19:eb:5f:2d:
                    39:79:33:00:d5:2d:30:f3:b3:c7:ac:64:ca:43:16:
                    0f:8c:50:b3:3d:c4:e0:1c:cb:28:1b:8c:a3:7b:1d:
                    42:11:c2:a2:2a:d8:0f:bb:38:7e:4c:9a:db:04:48:
                    21:6a:7e:a0:05:73:41:3a:95:58:39:99:56:27:5b:
                    63:7a:db:1b:93:16:31:51:01:c6:29:e2:60:95:6b:
                    49:5e:59:bf:a9:6e:31:94:8f:d7:ef:61:a7:96:63:
                    ea:ee:8a:d8:fd:29:4f:60:28:83:8b:44:5e:a0:b4:
                    b6:88:93:ab:be:61:b0:b8:3a:1f:86:1e:6e:1d:f7:
                    e5:74:13:e3:13:a2:a2:08:ac:07:d2:53:a3:05:3d:
                    bb:ad:72:c3:ae:e8:6c:f4:d4:91:e9:dc:0c:5b:a3:
                    63:39:40:96:09:e6:94:ff:14:cd:8d:89:3c:10:46:
                    b2:23:6a:2a:0f:99:50:9a:40:b2:11:24:29:10:2c:
                    4f:bd:bc:d1:42:74:c0:d3:db:45:9f:3a:43:81:98:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A1:5A:B8:5D:3D:CA:84:99:3D:74:36:CE:D0:93:20:B2:EE:CC:DC
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32362e302f32342d3234203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:b1:63:71:66:6a:c4:fd:c8:3e:c0:3c:56:51:89:6f:42:54:
         93:ad:3c:0b:e5:bd:72:73:4b:0a:75:b3:19:ab:68:52:1f:54:
         66:e0:08:0d:54:b0:b7:ec:04:91:0b:06:23:23:36:ea:46:9c:
         13:6c:01:2c:cf:b0:2e:03:96:28:34:12:58:e3:26:cd:0a:e9:
         66:44:60:34:34:ee:5e:3e:71:2a:0f:d5:38:72:e0:cb:98:a2:
         27:05:07:a3:78:01:da:0a:ad:a3:ec:b0:76:7b:19:c8:35:be:
         6f:2d:d0:33:db:a3:ca:50:e1:46:8a:8c:f9:62:f9:c9:af:d4:
         cf:f7:16:0a:79:10:bf:3f:fd:b0:97:47:8a:0b:3a:4f:7c:08:
         00:32:36:c6:2b:4b:f3:81:2e:c9:76:e8:25:dc:ff:df:01:81:
         79:53:ab:24:98:55:58:a2:24:56:bf:96:63:6e:19:85:ed:c9:
         18:57:9c:f9:62:6b:2b:c3:3e:5e:a2:48:06:19:cd:73:ea:27:
         40:2c:26:d4:1d:4d:26:87:f9:04:5f:fd:98:76:60:41:72:79:
         1b:82:ca:07:fd:4b:ad:d9:f1:35:49:5f:d0:28:92:85:3c:eb:
         43:b4:0f:ed:4d:ce:73:a7:5d:4b:0a:4f:37:e2:6a:37:05:d1:
         c2:d0:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:28 2025 by rpki-client