Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa
File:                     3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          GwC9jcd9iZUmztE7MQpSFxiDIkIRUtSfZCr3Y7uIkrQ=
Subject key identifier:   30:68:7B:73:00:EE:04:63:EF:07:5B:3D:1E:BC:0E:A6:07:A0:B0:64
Certificate issuer:       /CN=AED1979DFB6DB533BA277327FFBF031F521D7D84
Certificate serial:       770C0C686B18DFC5A69C18404115663925AAF6F6
Authority key identifier: AE:D1:97:9D:FB:6D:B5:33:BA:27:73:27:FF:BF:03:1F:52:1D:7D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED1979DFB6DB533BA277327FFBF031F521D7D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa
Signing time:             Thu 04 Sep 2025 14:23:06 +0000
ROA not before:           Thu 04 Sep 2025 14:18:06 +0000
ROA not after:            Thu 03 Sep 2026 14:23:06 +0000
asID:                     262988
IP address blocks:        179.125.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/AED1979DFB6DB533BA277327FFBF031F521D7D84.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/AED1979DFB6DB533BA277327FFBF031F521D7D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED1979DFB6DB533BA277327FFBF031F521D7D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0c:0c:68:6b:18:df:c5:a6:9c:18:40:41:15:66:39:25:aa:f6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED1979DFB6DB533BA277327FFBF031F521D7D84
        Validity
            Not Before: Sep  4 14:18:06 2025 GMT
            Not After : Sep  3 14:23:06 2026 GMT
        Subject: CN=30687B7300EE0463EF075B3D1EBC0EA607A0B064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:71:29:35:43:d1:28:c0:3b:d0:34:91:58:
                    ba:03:d2:20:37:fb:ad:58:2e:a5:16:f5:6f:8d:07:
                    0b:04:b0:73:00:41:e6:78:e9:72:cf:80:69:9b:b3:
                    f3:ec:65:f0:e7:99:4e:0b:9a:92:26:e0:0d:d2:18:
                    ed:29:3b:c5:68:ff:8f:47:7a:db:95:83:0b:45:46:
                    2e:39:7d:6d:7b:5a:e0:f0:20:69:33:4f:ea:34:fd:
                    f1:a5:7f:f7:e8:c8:aa:9e:ec:b2:0c:c0:61:d3:7c:
                    8d:ba:fa:7f:52:a4:ce:a4:c5:ba:27:59:8a:1b:aa:
                    dc:4e:c5:0a:10:b0:4c:c6:fa:cc:9e:63:d7:86:dc:
                    59:b2:7f:c1:3d:5c:ae:cc:dd:61:62:26:f1:c7:56:
                    36:e8:09:71:e4:33:c4:71:4c:20:79:bb:0d:e8:3a:
                    76:5d:29:45:14:95:44:2d:5a:ba:fd:a5:f5:f8:af:
                    d4:0d:29:a1:61:f8:43:05:48:c2:14:1f:da:d0:48:
                    3f:24:54:49:22:2f:73:9e:27:4b:b4:be:e5:60:d3:
                    b2:ee:ef:90:5f:bc:56:3f:4e:3e:0b:97:93:32:10:
                    11:bc:7b:47:01:96:aa:1b:ff:f5:4a:7c:82:a4:82:
                    e2:57:aa:9c:9c:6b:5a:b6:3e:82:47:b6:81:2d:e3:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:68:7B:73:00:EE:04:63:EF:07:5B:3D:1E:BC:0E:A6:07:A0:B0:64
            X509v3 Authority Key Identifier:
                keyid:AE:D1:97:9D:FB:6D:B5:33:BA:27:73:27:FF:BF:03:1F:52:1D:7D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/AED1979DFB6DB533BA277327FFBF031F521D7D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED1979DFB6DB533BA277327FFBF031F521D7D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:46:17:6a:19:a2:fc:bb:7a:ec:86:7a:88:02:b9:65:3c:03:
         93:76:8f:c6:df:b8:c3:b9:18:af:bf:ea:85:e8:f2:db:5a:91:
         f9:02:09:6f:fb:5d:9d:14:d5:29:be:a5:42:2d:20:7a:08:b7:
         e6:2a:a5:78:5b:41:f6:73:ee:43:42:2f:bd:11:91:61:07:91:
         19:33:2f:47:cb:68:da:b1:73:ce:d4:a4:40:e6:a9:c2:88:67:
         f1:31:1a:ad:64:15:a2:09:c6:83:5c:a3:82:4f:61:c2:aa:f7:
         07:bd:86:8c:ad:69:13:6a:e4:2b:13:77:f1:b4:59:84:b6:bd:
         38:ab:ba:a3:72:c1:26:ec:8f:29:d6:3a:d4:0e:30:00:63:73:
         bb:95:6f:c7:24:46:42:f4:8c:5b:44:7f:28:e6:f8:87:08:ba:
         af:ed:28:4b:36:64:13:f4:46:8e:8d:a0:05:14:5c:cc:0a:be:
         c3:46:0f:af:92:60:68:11:b7:9c:0c:c9:fe:75:eb:35:b5:90:
         81:52:84:4a:93:3d:c2:3a:7e:de:cc:97:87:05:dd:88:59:4e:
         f4:83:ae:da:f9:f0:79:64:9a:fc:5d:1f:4f:aa:e6:c3:96:c3:
         0d:2b:28:13:16:7d:cc:dd:97:12:10:5b:09:b7:94:83:6a:c0:
         f3:91:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:07:06 2025 by rpki-client