Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa
File:                     3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          lzjC1hheFkYJVNyfvqGsGZ+W1ptUMadyDdpp0lGa5T8=
Subject key identifier:   4C:0E:A1:66:13:40:6C:9F:0C:B2:99:97:97:00:16:17:BF:6F:1A:74
Certificate issuer:       /CN=8E3C33F2D30541B141B2CD21C0A59216233A08BD
Certificate serial:       6EB2CC7C3397DE10F597F0B824739F6E15690964
Authority key identifier: 8E:3C:33:F2:D3:05:41:B1:41:B2:CD:21:C0:A5:92:16:23:3A:08:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E3C33F2D30541B141B2CD21C0A59216233A08BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa
Signing time:             Mon 21 Jul 2025 13:39:05 +0000
ROA not before:           Mon 21 Jul 2025 13:34:05 +0000
ROA not after:            Mon 20 Jul 2026 13:39:05 +0000
asID:                     262988
IP address blocks:        179.125.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/8E3C33F2D30541B141B2CD21C0A59216233A08BD.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/8E3C33F2D30541B141B2CD21C0A59216233A08BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E3C33F2D30541B141B2CD21C0A59216233A08BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b2:cc:7c:33:97:de:10:f5:97:f0:b8:24:73:9f:6e:15:69:09:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3C33F2D30541B141B2CD21C0A59216233A08BD
        Validity
            Not Before: Jul 21 13:34:05 2025 GMT
            Not After : Jul 20 13:39:05 2026 GMT
        Subject: CN=4C0EA16613406C9F0CB2999797001617BF6F1A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:24:fa:37:3b:32:fd:d3:af:37:87:f7:e2:
                    b6:4e:d1:a2:71:ee:2d:ce:de:4b:b8:9b:a1:e4:ed:
                    ce:82:ab:c1:54:74:82:99:86:d7:91:ad:11:e2:02:
                    c7:59:eb:b5:5e:86:66:f0:f8:51:08:74:75:83:2f:
                    6b:ec:9b:38:e0:aa:e0:eb:25:91:bd:42:b1:27:2b:
                    43:d2:15:64:38:9d:b0:d4:6f:19:83:a4:ab:ab:9e:
                    f8:d6:26:21:35:11:af:2a:05:af:79:c6:17:0f:1c:
                    ee:2b:63:0e:a7:da:48:fb:6e:c8:cb:14:fa:2b:87:
                    9c:1b:a1:73:f4:8d:29:bd:8c:1f:f6:22:86:b7:e3:
                    66:1f:75:e6:25:3e:97:fa:c1:21:3e:e7:94:b4:b7:
                    90:da:ac:88:77:d0:bb:61:09:86:56:b7:9f:ed:f8:
                    8c:52:73:06:f4:3a:14:4a:45:20:b6:83:48:ec:78:
                    bc:6a:e4:eb:1f:5b:bf:e1:57:15:83:8d:93:21:ea:
                    b5:69:69:b1:ad:8f:4a:eb:e5:c2:b0:cf:cd:75:30:
                    ce:3d:2b:82:68:f8:e6:96:91:11:25:44:99:7c:48:
                    48:e3:da:67:fd:ed:10:e6:fd:b5:51:65:67:50:9e:
                    c1:66:a0:54:56:1a:de:2c:0e:fc:59:72:09:eb:8d:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0E:A1:66:13:40:6C:9F:0C:B2:99:97:97:00:16:17:BF:6F:1A:74
            X509v3 Authority Key Identifier:
                keyid:8E:3C:33:F2:D3:05:41:B1:41:B2:CD:21:C0:A5:92:16:23:3A:08:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/8E3C33F2D30541B141B2CD21C0A59216233A08BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E3C33F2D30541B141B2CD21C0A59216233A08BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:4e:8d:75:80:f5:b5:da:56:3d:fd:b7:84:df:8d:8f:84:
         6a:b4:7e:83:52:d5:12:1f:2f:e7:b8:78:32:26:25:db:17:88:
         8d:f2:af:e8:8e:3a:08:79:4a:d9:10:ae:56:d5:ff:c9:69:a6:
         8f:5f:ba:50:fb:4e:c9:2a:5b:93:65:f1:4f:ca:64:6e:ce:00:
         ad:1d:42:6a:9f:51:8a:d8:77:cf:d3:a7:11:5b:11:ae:68:49:
         09:f1:ab:8a:a1:db:5b:30:01:e9:24:81:46:70:2d:97:f6:33:
         99:03:73:8a:78:66:ad:21:1a:90:e4:ec:20:ed:9b:0d:69:16:
         9c:87:ab:60:11:f2:98:f5:f4:0f:ac:5f:d7:f6:96:cb:4b:62:
         4c:e3:4f:55:9c:bb:30:2a:05:ab:33:5d:89:c9:11:af:b0:39:
         fa:26:f8:bd:4e:be:b8:33:54:1c:41:42:a2:a9:bf:78:96:37:
         a0:48:07:25:94:0b:2f:05:7b:09:91:5c:a6:da:a7:63:91:b3:
         52:e9:d5:52:b6:46:24:b7:22:77:73:05:52:a1:7f:bd:7b:f0:
         e6:23:1d:ea:74:bb:c9:cf:93:7c:57:db:94:5b:1c:ff:da:d9:
         c2:08:59:87:b0:02:9f:fe:b8:7b:8a:a1:ba:ca:b7:c6:65:43:
         ec:da:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:44:20 2025 by rpki-client