Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gENJRRoikCJhS7X2VwdSey9uZcfQhtRk63cDpnySiJc/0/3137392e34392e3138342e302f32322d3234203d3e20323731323031.roa
File:                     3137392e34392e3138342e302f32322d3234203d3e20323731323031.roa (raw, json)
Hash identifier:          +GUKEsD5UMzyvadpgm8i5XxSvq/2iyqHciHZDdPY1yA=
Subject key identifier:   C6:A7:95:91:1A:5D:1C:42:06:55:C5:C8:C4:6B:42:CE:E3:12:A1:E4
Certificate issuer:       /CN=7F27E2E1D34E53862AA6D93D36FB46741480E4AC
Certificate serial:       7588781515229C929A6105B804C6B479AD8ADB73
Authority key identifier: 7F:27:E2:E1:D3:4E:53:86:2A:A6:D9:3D:36:FB:46:74:14:80:E4:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F27E2E1D34E53862AA6D93D36FB46741480E4AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gENJRRoikCJhS7X2VwdSey9uZcfQhtRk63cDpnySiJc/0/3137392e34392e3138342e302f32322d3234203d3e20323731323031.roa
Signing time:             Fri 03 Jan 2025 20:58:03 +0000
ROA not before:           Fri 03 Jan 2025 20:53:03 +0000
ROA not after:            Fri 02 Jan 2026 20:58:03 +0000
asID:                     271201
IP address blocks:        179.49.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gENJRRoikCJhS7X2VwdSey9uZcfQhtRk63cDpnySiJc/0/7F27E2E1D34E53862AA6D93D36FB46741480E4AC.crl
                          rsync://rpki-repo.registro.br/repo/4gENJRRoikCJhS7X2VwdSey9uZcfQhtRk63cDpnySiJc/0/7F27E2E1D34E53862AA6D93D36FB46741480E4AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F27E2E1D34E53862AA6D93D36FB46741480E4AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:88:78:15:15:22:9c:92:9a:61:05:b8:04:c6:b4:79:ad:8a:db:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F27E2E1D34E53862AA6D93D36FB46741480E4AC
        Validity
            Not Before: Jan  3 20:53:03 2025 GMT
            Not After : Jan  2 20:58:03 2026 GMT
        Subject: CN=C6A795911A5D1C420655C5C8C46B42CEE312A1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:34:ed:b8:41:4f:da:c6:f6:b0:a4:1f:31:
                    c7:dc:0b:d8:c5:51:99:69:a8:0d:d4:71:3b:9e:ad:
                    9e:09:7f:0b:b0:8b:c2:20:4d:cf:34:05:73:a9:a6:
                    34:d5:78:6c:1e:ae:f8:8a:58:a4:92:da:c4:1f:c9:
                    bb:5d:1f:36:c9:1c:b3:03:b9:55:74:46:be:71:6b:
                    1c:ab:2c:b8:e1:3f:7c:42:94:b9:98:e6:9b:dd:e8:
                    0d:92:ba:d6:b3:f9:db:d6:4a:df:0c:48:de:ce:c3:
                    51:72:d2:1a:85:63:fe:e3:c7:f7:f6:fe:c8:a9:22:
                    76:0e:4b:4e:f6:05:9a:c7:ad:55:c7:21:30:e7:c4:
                    e8:c6:f1:02:da:55:07:bc:d3:67:8b:4a:55:b4:81:
                    30:c8:c1:3e:1c:d3:09:75:2c:3b:88:ee:0f:6f:93:
                    0a:2b:d0:4e:d6:2b:4c:96:81:a4:2c:a4:6c:eb:0b:
                    76:b6:4e:9d:a7:97:4e:e1:81:e8:5d:21:0a:ab:19:
                    02:8d:4f:4c:3f:d1:7f:d5:99:8a:db:8d:94:ad:1b:
                    80:07:7f:3d:a2:05:01:0e:b4:ee:98:90:c9:09:9f:
                    b4:bd:32:d4:b5:73:30:55:a4:15:79:41:b9:3a:b2:
                    72:16:7e:b7:61:68:37:99:ec:e6:c7:e0:d0:c3:6a:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:95:91:1A:5D:1C:42:06:55:C5:C8:C4:6B:42:CE:E3:12:A1:E4
            X509v3 Authority Key Identifier:
                keyid:7F:27:E2:E1:D3:4E:53:86:2A:A6:D9:3D:36:FB:46:74:14:80:E4:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gENJRRoikCJhS7X2VwdSey9uZcfQhtRk63cDpnySiJc/0/7F27E2E1D34E53862AA6D93D36FB46741480E4AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F27E2E1D34E53862AA6D93D36FB46741480E4AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gENJRRoikCJhS7X2VwdSey9uZcfQhtRk63cDpnySiJc/0/3137392e34392e3138342e302f32322d3234203d3e20323731323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:5d:05:b2:6b:80:ad:4e:51:56:7b:9f:f0:43:c0:ac:d8:86:
         94:b9:90:c8:62:9a:c9:a2:99:4f:f2:40:e9:9d:77:72:a4:c8:
         a1:d8:78:f3:f5:66:fc:e9:f6:ca:bf:8a:98:df:64:bf:e7:90:
         d9:48:90:d2:04:64:08:a1:e0:85:14:23:74:13:a5:1e:b4:d2:
         12:46:5c:25:b0:f2:c5:e2:89:38:bd:77:3e:b8:47:cc:16:16:
         54:62:e1:58:de:c6:41:92:f9:f9:e5:08:34:ac:dc:36:ea:23:
         64:10:a1:07:34:d4:a7:3c:f3:3c:9e:5e:15:37:86:fb:ad:81:
         34:5a:b1:7a:8c:9d:db:5e:16:36:cb:76:58:f4:85:4e:e6:dc:
         bd:47:00:ea:5c:a8:ff:45:80:7d:30:a6:9c:00:bd:4e:78:c6:
         90:20:a1:63:4f:48:57:23:a6:97:88:2c:c8:c4:67:68:ab:28:
         af:58:19:68:45:cb:a0:5c:a6:17:38:d7:92:5c:a8:5e:93:af:
         02:a8:36:83:9d:66:00:b8:88:4e:f8:a3:8e:04:49:b5:e0:17:
         1f:b5:73:2c:75:f2:d8:c6:a8:e5:eb:a2:50:3b:72:4c:79:16:
         f0:e1:b2:c1:f1:fc:e1:7a:9e:84:68:e7:d7:af:5f:a3:19:76:
         56:65:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:06 2025 by rpki-client