Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa
File:                     3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa (raw, json)
Hash identifier:          8xDas0C+Pn+vOQxSwyhuZWRm/oKF/ItZugzJfLCi8KE=
Subject key identifier:   E9:A4:4C:05:9B:56:50:EB:3F:37:78:C4:C0:84:B0:E7:53:CB:B3:E3
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       47F791968F95FEB362A2454FC7EE358D086AAC4E
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:48 +0000
ROA not before:           Fri 16 May 2025 13:12:48 +0000
ROA not after:            Fri 15 May 2026 13:17:48 +0000
asID:                     270760
IP address blocks:        179.109.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f7:91:96:8f:95:fe:b3:62:a2:45:4f:c7:ee:35:8d:08:6a:ac:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:48 2025 GMT
            Not After : May 15 13:17:48 2026 GMT
        Subject: CN=E9A44C059B5650EB3F3778C4C084B0E753CBB3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:b3:fa:5e:ae:6b:b8:1a:38:e5:2b:69:ce:
                    68:e7:11:cc:bd:f1:86:95:dd:4a:84:36:de:8a:a9:
                    0e:11:7c:e7:1c:4e:dd:9a:84:f9:76:6b:69:37:ba:
                    02:31:7d:82:2b:8f:01:06:08:06:17:5f:0a:36:7d:
                    20:81:71:c9:03:c3:20:a9:48:b9:83:f8:1b:91:19:
                    e8:eb:86:8f:e9:31:4d:7d:d6:45:f8:23:d0:a3:e9:
                    6b:96:e5:13:36:1f:63:65:8d:c0:2d:d3:66:82:85:
                    7b:81:fa:1e:92:0d:4d:ec:fe:ed:f4:d2:0a:b0:1c:
                    10:fd:04:d5:be:ed:e1:62:95:2d:86:8b:5c:9a:d0:
                    fe:ac:f8:5a:dd:81:f4:06:36:07:10:da:10:ef:75:
                    61:e0:0f:5e:eb:1f:db:18:87:06:52:49:4c:dd:c0:
                    3b:b6:65:63:f0:8a:47:a8:c9:48:bb:22:0e:ae:73:
                    cf:8c:00:b0:24:f6:9a:2a:b9:50:b6:17:bb:e4:89:
                    88:c4:15:e1:66:0d:f5:d9:7d:0a:f4:13:2c:00:a2:
                    92:10:db:40:13:b3:07:b7:db:bc:32:48:a7:ce:48:
                    d2:1c:37:db:44:78:c7:3e:c8:c3:89:2d:bb:23:12:
                    e7:80:a9:c6:1b:7f:8a:59:be:32:b7:0c:00:c8:b1:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A4:4C:05:9B:56:50:EB:3F:37:78:C4:C0:84:B0:E7:53:CB:B3:E3
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:75:98:8e:67:c7:c6:21:7b:fe:74:0a:eb:24:28:2d:72:a1:
         43:1c:32:11:54:f7:e8:e0:bf:a5:2a:c0:89:d0:dc:23:84:25:
         5d:d8:fe:37:a0:23:f0:b9:14:3e:8c:8a:bd:54:ee:4d:4c:f3:
         f1:1d:49:b3:4e:3d:2a:c7:e5:94:8f:9a:58:7d:a4:61:53:2a:
         fe:2d:fa:6a:19:70:26:9e:2f:d9:ec:bf:6c:7b:dd:3d:4e:87:
         70:0e:c7:16:1a:cd:9c:c5:ed:25:17:86:95:17:9d:0c:cb:0b:
         c1:fc:04:70:0b:7e:a4:fa:d2:2a:74:00:9d:1b:2d:b7:77:da:
         12:98:44:00:c7:98:cc:ca:2e:77:87:e1:bf:50:b5:53:9a:24:
         a1:b7:84:a6:ab:49:67:c8:1f:61:49:e6:77:49:39:c0:99:2a:
         82:bc:76:b3:d2:fc:0b:8b:4a:f9:c0:03:41:ee:68:81:c4:21:
         a7:88:77:2c:cc:19:c4:78:be:cd:65:3e:f2:65:e7:58:86:3b:
         c3:7a:12:7b:a6:65:3b:a4:da:45:ec:91:41:a7:a2:65:d1:b6:
         d8:cf:1b:f0:58:8d:84:c2:b6:38:91:c6:0c:10:3f:ad:5a:c8:
         ad:43:30:7a:67:67:b2:05:ab:f8:e0:92:72:7a:b8:ad:18:d3:
         02:70:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:48:29 2025 by rpki-client