Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32322d3332203d3e20323632343934.roa
File:                     3137392e3132352e3132342e302f32322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          EcZzvFBEeIL8PSvBsqPp8Tu0jFB5AZBnJhojY9f/8eY=
Subject key identifier:   26:0A:B1:96:62:9E:02:86:31:6A:75:CC:73:57:BF:E0:1D:EA:CA:DF
Certificate issuer:       /CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
Certificate serial:       03C56A77375BC9648A5376023B86962BA42B9080
Authority key identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32322d3332203d3e20323632343934.roa
Signing time:             Mon 04 Aug 2025 20:22:01 +0000
ROA not before:           Mon 04 Aug 2025 20:17:01 +0000
ROA not after:            Mon 03 Aug 2026 20:22:01 +0000
asID:                     262494
IP address blocks:        179.125.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:6a:77:37:5b:c9:64:8a:53:76:02:3b:86:96:2b:a4:2b:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
        Validity
            Not Before: Aug  4 20:17:01 2025 GMT
            Not After : Aug  3 20:22:01 2026 GMT
        Subject: CN=260AB196629E0286316A75CC7357BFE01DEACADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:00:90:ee:2f:81:f6:94:6b:53:33:8d:12:3d:
                    62:23:a0:80:9c:3a:67:0a:b7:d2:b4:45:18:5a:8d:
                    6b:d8:3a:f9:29:94:57:b7:25:ca:42:cd:ce:ae:be:
                    a3:58:03:94:43:bc:29:f8:dc:89:b4:5c:34:ce:8c:
                    f7:0d:40:c8:b7:2a:15:d7:fb:3d:ee:d1:1e:85:67:
                    75:36:b4:e8:27:db:c8:9e:01:30:60:5a:5a:36:fe:
                    b4:1f:3a:5c:7e:9f:07:e7:69:f4:09:e9:2d:73:11:
                    f4:38:0c:94:bb:5f:dc:02:07:40:26:75:29:db:0a:
                    1b:ec:46:62:87:48:4b:1e:fa:62:0c:f8:34:f3:a9:
                    83:3b:e8:5a:6a:22:b4:37:62:33:c3:a5:12:24:7e:
                    02:08:2e:04:55:75:9f:fa:70:b4:cc:e5:07:3f:29:
                    d5:c8:f5:08:15:80:ae:fa:8f:70:37:2f:3b:32:e2:
                    8b:4d:eb:9f:d0:ff:b4:6b:12:59:f4:70:c3:0a:df:
                    7f:f8:06:2f:0f:e0:ca:20:4e:35:69:14:07:3f:03:
                    e2:c0:31:19:0f:9d:77:44:fd:18:21:85:8d:1e:c1:
                    4e:86:0f:cb:5b:af:4c:2b:cf:4a:4d:e8:69:91:3f:
                    c7:95:2b:6f:22:e1:8d:9e:33:93:56:b7:d3:69:67:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:B1:96:62:9E:02:86:31:6A:75:CC:73:57:BF:E0:1D:EA:CA:DF
            X509v3 Authority Key Identifier:
                keyid:A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137392e3132352e3132342e302f32322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:f5:f7:2a:e3:ee:64:d6:34:59:96:00:cd:b1:ad:e2:ea:a4:
         01:56:de:63:95:d0:54:45:2f:a3:ce:3c:a3:56:ee:00:4e:f5:
         f8:3a:5f:bb:06:47:47:65:c9:5d:55:c2:93:25:7a:95:34:07:
         08:e3:dd:aa:73:8e:1c:d8:a3:ea:a3:5f:8f:3e:ae:5e:f0:b5:
         bc:c5:2e:85:3a:cf:e1:a4:fe:f8:b8:4d:14:18:02:44:be:1d:
         02:2e:4f:c0:1a:3a:14:5d:db:95:f7:19:d9:51:ae:5a:9f:72:
         4e:f4:69:f6:bd:bf:50:f0:15:18:87:55:18:31:ac:81:51:52:
         5d:89:ba:b3:87:53:6b:ef:e7:c2:ed:aa:41:69:a9:ae:85:01:
         37:8f:9b:6b:22:07:d3:3c:be:9b:47:3c:26:e6:1d:d3:1d:2a:
         2f:62:87:28:d6:71:cc:94:4a:59:2c:6f:e7:39:0e:4d:ef:93:
         8c:fd:7a:69:2f:37:d5:19:14:a4:cb:d4:e5:76:55:bb:03:6f:
         9c:76:da:fa:c3:c0:25:28:2b:b3:aa:38:4f:c7:26:53:93:ba:
         4b:f0:6b:e4:0d:68:35:a4:cd:69:df:d4:73:f2:9a:c5:83:12:
         4f:63:58:ee:8a:37:61:83:4a:9d:dd:db:3f:63:13:dc:b9:a0:
         b5:c3:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:03:54 2025 by rpki-client