Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38362e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          pv8uGn8LrrkiDHRUYYjBcI4mbf6DGk0WV0wqC8WtV2A=
Subject key identifier:   D1:7F:17:51:4D:12:52:9A:6C:F9:27:B5:DA:2C:67:76:D7:18:48:E9
Certificate issuer:       /CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
Certificate serial:       254AD4DCAAB133BF03A0DE8364BAEF0A3CD35B18
Authority key identifier: 82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa
Signing time:             Fri 24 Jan 2025 23:57:34 +0000
ROA not before:           Fri 24 Jan 2025 23:52:34 +0000
ROA not after:            Fri 23 Jan 2026 23:57:34 +0000
asID:                     272677
IP address blocks:        179.63.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 10:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4a:d4:dc:aa:b1:33:bf:03:a0:de:83:64:ba:ef:0a:3c:d3:5b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
        Validity
            Not Before: Jan 24 23:52:34 2025 GMT
            Not After : Jan 23 23:57:34 2026 GMT
        Subject: CN=D17F17514D12529A6CF927B5DA2C6776D71848E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:58:d5:48:6f:c5:aa:d9:5e:8e:2e:2c:ff:
                    5f:02:ec:7c:87:e7:dd:e7:48:8b:3b:be:5e:8c:f2:
                    97:17:6f:01:5f:95:98:46:b5:28:bf:04:e7:d1:44:
                    ee:e7:39:c2:7d:38:6c:ef:8d:8c:ca:e0:c4:bb:ad:
                    a5:e5:85:e9:6e:d2:3e:d7:50:ca:b4:e9:b0:13:d6:
                    00:f0:f6:93:ff:29:18:fe:78:47:ea:5b:2b:0b:4c:
                    cb:40:00:84:d6:21:d0:6b:1e:4a:d7:9c:26:bf:37:
                    b6:8b:cd:30:82:ac:94:c5:67:66:28:20:4c:81:fa:
                    61:82:a1:36:09:82:70:a3:03:6e:23:03:a3:13:84:
                    9e:dd:4e:f7:41:4d:e0:2a:0b:b5:0c:53:44:d6:5c:
                    1d:af:da:6c:6c:c7:0a:56:c4:8c:77:77:10:10:29:
                    1f:41:e8:af:49:89:75:39:35:20:96:33:44:c1:06:
                    af:4b:01:9a:7a:4e:01:90:e8:10:71:5f:9c:b4:7d:
                    4f:ab:d6:6d:b8:4a:d0:d4:3a:92:6e:c9:f3:7b:6c:
                    a7:8c:44:5b:e8:63:a2:a8:8b:0b:75:eb:dc:7d:26:
                    e2:dc:ef:a5:12:96:64:a4:9a:c4:ec:e7:b3:ad:65:
                    84:33:7c:d4:e5:fe:bc:5d:0a:a2:b6:e9:b0:78:04:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7F:17:51:4D:12:52:9A:6C:F9:27:B5:DA:2C:67:76:D7:18:48:E9
            X509v3 Authority Key Identifier:
                keyid:82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:6b:96:60:9f:a5:b0:97:5b:52:e2:91:ba:0e:a3:d8:26:6c:
         52:e7:35:58:52:21:db:d9:bd:03:1b:64:c1:5b:50:3e:d9:f3:
         72:55:de:ca:38:16:76:af:f0:c1:83:2f:fb:1a:3f:27:37:ae:
         c8:71:0c:d6:3a:b2:d8:8e:b1:68:b3:c4:77:d2:4d:52:13:2f:
         36:d2:f8:bc:b9:b2:0a:02:48:4f:8d:5a:68:37:f3:2a:a6:7d:
         bc:27:15:37:2f:49:37:df:bb:32:a5:cf:43:90:63:fb:c9:f9:
         b4:37:20:dd:67:93:cd:bd:4d:5d:ee:67:c6:65:0c:fa:a4:5c:
         7c:e0:26:4a:d9:45:5e:72:f6:0d:fa:e3:fd:29:57:52:cd:22:
         2f:48:fd:b0:27:33:c9:38:59:58:16:ba:7e:cc:36:c3:57:e6:
         47:a6:66:9a:81:0d:b1:f2:eb:72:9d:44:c3:8c:ad:93:fc:6b:
         6f:bc:5a:ad:f1:db:11:0c:a7:d8:bd:ab:56:a0:f2:66:f1:81:
         10:e3:14:f9:d1:2e:6e:44:71:d8:d1:d8:45:23:5f:25:92:bc:
         82:5f:da:0c:eb:04:49:06:69:de:b1:59:24:c3:78:41:fa:6c:
         84:e8:61:cb:dc:4a:92:e5:eb:77:6d:c3:e3:a1:d3:c5:d8:61:
         8a:88:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:03:52 2025 by rpki-client