Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3137392e302e3137362e302f32342d3234203d3e20323730353634.roa
File:                     3137392e302e3137362e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          NMbXwuMwhtT0ATTZ8U3lu3ihN4eGbajLgaaN0aFWB30=
Subject key identifier:   C1:69:A5:59:3E:A7:68:28:F8:C6:48:DE:E7:97:A1:74:C6:9D:45:53
Certificate issuer:       /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial:       3FF8AC36AFA23AA5E421D1FB28DC08AD169664FB
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3137392e302e3137362e302f32342d3234203d3e20323730353634.roa
Signing time:             Mon 26 May 2025 03:12:26 +0000
ROA not before:           Mon 26 May 2025 03:07:26 +0000
ROA not after:            Mon 25 May 2026 03:12:26 +0000
asID:                     270564
IP address blocks:        179.0.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 13:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f8:ac:36:af:a2:3a:a5:e4:21:d1:fb:28:dc:08:ad:16:96:64:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Validity
            Not Before: May 26 03:07:26 2025 GMT
            Not After : May 25 03:12:26 2026 GMT
        Subject: CN=C169A5593EA76828F8C648DEE797A174C69D4553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:44:db:41:3f:40:cc:d5:d9:de:ef:62:19:
                    31:d1:e6:5e:e5:bd:a7:0c:b2:5c:62:24:11:08:b4:
                    79:f5:f2:0f:65:9e:18:a6:01:70:58:6c:86:9e:bd:
                    c0:14:95:94:2d:80:fd:78:da:88:d1:3b:d3:c9:24:
                    a0:99:4a:69:3e:7e:c0:50:5e:fd:0f:66:db:2a:93:
                    9e:41:fe:f5:b3:8d:6a:ca:40:4d:09:f8:cb:53:7a:
                    69:ea:0c:0c:c8:68:14:8f:2a:a5:ea:91:36:f5:50:
                    98:99:cf:d3:c1:2f:0d:6c:b2:da:8a:8c:d2:33:a5:
                    2e:c3:f6:92:c4:9c:8b:3a:49:03:f7:48:5e:1d:92:
                    d4:1c:37:ba:b3:21:fe:f7:38:2c:1a:f5:82:4b:31:
                    71:39:14:96:33:de:e0:96:3a:a6:85:d5:a4:f7:bd:
                    ad:6b:d1:2d:4b:ca:e5:d6:c4:47:b6:7d:d1:6d:dc:
                    fc:56:15:25:bb:b7:19:bd:12:35:c2:05:90:02:27:
                    64:81:f0:56:40:8d:70:5b:ef:70:8e:a4:ce:87:24:
                    ac:73:60:09:f0:0d:bc:fe:34:a0:8d:66:a6:1c:32:
                    d3:9e:9e:bb:1d:8d:e3:46:f9:57:4b:ed:90:57:1e:
                    29:5c:84:32:3c:13:93:ec:82:55:8d:c5:31:1a:2d:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:69:A5:59:3E:A7:68:28:F8:C6:48:DE:E7:97:A1:74:C6:9D:45:53
            X509v3 Authority Key Identifier:
                keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3137392e302e3137362e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:38:4c:46:38:9e:87:0b:ab:ca:81:05:2f:be:66:4a:90:
         cd:61:32:81:b4:1d:c0:68:6b:17:90:13:e8:6a:9e:65:d3:5c:
         26:ff:32:0e:1a:6a:ad:04:9b:88:d8:9d:fd:1c:46:ff:e8:66:
         47:9f:69:f3:00:0c:e8:6f:a1:95:af:61:4e:3a:c2:66:ed:41:
         d2:9c:b1:95:cd:c5:18:00:96:09:42:64:0d:94:f0:c0:e9:f3:
         b5:6c:ea:62:59:e4:2c:c3:f3:f2:ee:b1:8c:db:1e:03:e6:c5:
         04:9e:04:a4:79:25:19:a9:b2:fa:43:15:7f:42:a6:fd:c5:ed:
         a8:f1:db:a4:91:0b:eb:8a:38:b4:d0:17:f8:59:b6:4d:9e:be:
         91:e4:95:2b:32:cc:f1:d1:41:47:76:f6:ae:59:09:ce:88:69:
         97:b1:f5:c1:58:f6:ac:63:67:c9:88:91:d4:6a:59:62:42:c8:
         c9:58:e1:2e:c8:91:36:7f:16:fe:59:4f:f6:fb:72:3b:bf:fa:
         12:52:98:e0:4e:45:e4:f2:71:b1:05:7c:da:d0:20:8b:8c:bd:
         df:0d:a9:f8:2f:41:a4:b0:9d:b7:d4:9a:d5:20:98:6b:7f:fb:
         34:18:64:ae:2a:51:fb:ad:ab:d3:a2:6a:4b:26:06:e6:69:d9:
         d0:70:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:35:13 2025 by rpki-client