Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa
File:                     3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa (raw, json)
Hash identifier:          zsxR9VgQqwy55CrZQrl/xVkvXP5AfrQp+bxdufKz3ao=
Subject key identifier:   B5:E0:26:AA:DA:72:82:BF:37:D5:AA:9A:E4:99:0D:A4:1C:C7:98:3D
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       31494775B3E4D251AEDF69073DC9B1080E895A6B
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa
Signing time:             Fri 07 Mar 2025 01:31:26 +0000
ROA not before:           Fri 07 Mar 2025 01:26:26 +0000
ROA not after:            Fri 06 Mar 2026 01:31:26 +0000
asID:                     262441
IP address blocks:        179.190.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:49:47:75:b3:e4:d2:51:ae:df:69:07:3d:c9:b1:08:0e:89:5a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Mar  7 01:26:26 2025 GMT
            Not After : Mar  6 01:31:26 2026 GMT
        Subject: CN=B5E026AADA7282BF37D5AA9AE4990DA41CC7983D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:6b:fe:d5:39:2c:89:82:8b:09:e3:0f:6d:
                    e1:d4:0d:4a:57:01:dd:b2:da:73:52:42:66:f7:ee:
                    41:05:9a:62:0c:1d:62:bb:b9:08:71:55:b2:01:72:
                    2d:2c:c5:50:c5:59:3b:18:af:8e:5f:7e:66:a2:4f:
                    70:ac:ee:63:06:13:2a:1c:ab:08:95:26:85:f0:2b:
                    28:0b:6f:e7:c9:e9:12:51:e7:7e:8a:a8:64:6f:b3:
                    e4:46:10:33:71:e5:21:0f:9a:49:12:c0:9c:52:20:
                    22:0c:3a:07:e5:19:49:76:fd:76:41:60:ce:16:de:
                    8f:be:07:61:43:69:fd:0b:44:0b:10:a1:24:ca:0a:
                    6c:d5:f1:79:b1:36:5d:ad:c5:59:48:34:51:92:d2:
                    36:e2:2f:d8:fd:30:25:1a:10:70:99:0d:ed:5d:21:
                    f6:df:47:e9:aa:5c:e6:a1:ce:f1:e8:d9:bb:ca:8a:
                    6f:1d:00:57:a7:d3:0c:f8:06:19:9e:ec:5b:36:d0:
                    db:e4:d6:af:22:aa:4c:7b:13:d8:f9:91:81:03:b7:
                    f4:1c:cb:36:71:9c:3b:b7:43:81:5c:0b:5a:58:a8:
                    fb:0b:0d:a9:63:ad:5b:ed:00:17:82:3a:b0:28:a3:
                    da:6c:14:81:d2:f1:d9:d0:04:25:95:82:91:08:e3:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:26:AA:DA:72:82:BF:37:D5:AA:9A:E4:99:0D:A4:1C:C7:98:3D
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.190.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:ef:f0:7a:ef:20:5f:78:0b:ea:d5:6c:93:d1:1d:ff:94:
         96:b0:06:93:46:1a:dd:d1:81:85:36:6a:84:42:17:22:b1:5c:
         90:a9:d7:3d:ce:0b:f2:d4:78:6b:b6:ce:7c:58:d9:70:01:5b:
         c0:49:8f:8d:6f:b1:ec:aa:6d:8e:33:da:d2:27:af:b9:2a:fa:
         b4:95:ad:bc:c3:36:38:dc:10:c1:f1:1b:74:70:0b:dd:f5:d5:
         77:18:17:2c:d4:0f:61:96:06:c0:33:df:4d:50:da:bc:1c:20:
         83:2a:29:b7:a6:a2:76:8d:cb:d6:71:a1:0e:e4:6b:cc:56:c8:
         a1:ec:cf:48:e5:bb:70:ac:1d:1c:86:7f:38:4d:61:62:5a:7f:
         7d:d6:56:d6:1e:eb:d4:77:01:93:ee:6e:7e:5f:4f:ea:08:68:
         ed:0a:89:25:21:3c:31:35:0e:27:fd:02:1b:fe:b6:a3:9b:50:
         86:4a:7b:ab:e5:77:9d:2c:5a:1a:c6:cc:c1:20:3c:69:9e:37:
         03:e3:a5:9d:49:7b:1f:ed:5f:0f:2b:23:1a:ad:d8:06:b1:e5:
         ec:a8:82:8e:1b:74:26:ca:f1:f9:f1:c3:51:c1:c2:2b:ae:63:
         46:1e:f2:05:a5:76:71:96:03:c1:8e:01:d1:73:5e:28:0e:0b:
         53:06:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:16 2025 by rpki-client