Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/3137392e36332e31322e302f32322d3234203d3e20323731353937.roa
File:                     3137392e36332e31322e302f32322d3234203d3e20323731353937.roa (raw, json)
Hash identifier:          JbhPYzAhMbSu/DqMDBflxknK8ZV9yGsj0JmCrNCd04g=
Subject key identifier:   A0:D5:BD:BF:8E:28:82:4F:31:57:1E:3B:C8:0D:FA:7C:3C:6E:B4:D9
Certificate issuer:       /CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Certificate serial:       204BFAB1EF359E0CE0DAA48DFD0CD5FEF3F612EB
Authority key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/3137392e36332e31322e302f32322d3234203d3e20323731353937.roa
Signing time:             Tue 20 May 2025 22:25:08 +0000
ROA not before:           Tue 20 May 2025 22:20:08 +0000
ROA not after:            Tue 19 May 2026 22:25:08 +0000
asID:                     271597
IP address blocks:        179.63.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl
                          rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 13:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4b:fa:b1:ef:35:9e:0c:e0:da:a4:8d:fd:0c:d5:fe:f3:f6:12:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
        Validity
            Not Before: May 20 22:20:08 2025 GMT
            Not After : May 19 22:25:08 2026 GMT
        Subject: CN=A0D5BDBF8E28824F31571E3BC80DFA7C3C6EB4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:2b:95:35:b7:eb:f8:80:97:12:74:38:17:
                    8d:78:70:aa:5c:ee:47:1a:f6:f5:78:a3:d7:4f:f8:
                    f7:95:25:6f:c1:b3:24:07:30:77:c2:8a:17:9c:92:
                    6b:9c:0d:3f:79:a1:12:b1:48:75:98:33:0a:ee:be:
                    45:21:6a:18:c0:fc:b2:55:e4:f6:38:5d:10:53:a7:
                    71:dc:90:71:22:54:84:6e:c2:f1:0e:44:a4:12:f7:
                    38:7e:89:c1:aa:3f:75:74:18:fb:d7:1b:9b:c4:37:
                    50:e0:22:30:f9:bd:90:47:d6:62:ad:b8:be:22:bc:
                    a8:b3:15:92:ef:68:b4:f8:af:81:81:6b:84:02:79:
                    99:bb:5b:37:ac:b8:22:c6:9d:ce:6c:26:d6:be:df:
                    27:bc:50:80:67:38:46:9e:a3:00:21:fc:be:94:f5:
                    9a:ac:56:5d:a7:f2:45:84:bf:8a:88:13:5c:4d:c1:
                    d6:3b:7e:22:fa:22:4c:7f:91:27:f8:94:2e:b0:22:
                    46:c7:a4:f6:71:75:61:c4:fc:25:2c:fc:40:80:d1:
                    4a:0f:eb:d9:1f:b2:d3:62:0e:c7:41:4f:5c:be:3a:
                    91:09:0f:d2:c3:fe:08:06:7c:d7:3f:ac:5c:9f:f2:
                    10:e3:45:f6:8b:a4:44:89:e3:e0:f1:db:1c:d1:d9:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D5:BD:BF:8E:28:82:4F:31:57:1E:3B:C8:0D:FA:7C:3C:6E:B4:D9
            X509v3 Authority Key Identifier:
                keyid:B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/3137392e36332e31322e302f32322d3234203d3e20323731353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:d6:a4:d4:c9:83:75:cd:22:2c:8b:36:57:20:9b:12:b0:f2:
         32:ee:aa:6e:5b:d4:36:3d:4b:2f:4f:f6:ad:df:90:a2:05:33:
         5e:62:ca:f4:26:5e:9d:6e:ec:4c:67:b2:5e:9e:32:16:5d:01:
         4c:20:59:9a:52:28:3d:b2:37:ca:53:53:74:0b:7a:81:6d:4e:
         02:03:5d:ca:68:67:81:81:9a:76:aa:eb:35:43:36:a0:4b:a2:
         24:23:69:fe:66:50:66:29:1f:7b:c8:0b:d8:94:53:e4:52:b7:
         8f:a3:83:d4:39:56:a1:61:f2:85:97:90:31:ac:37:8b:57:82:
         d6:8d:c5:c2:6f:09:ea:7e:f7:df:23:0b:18:5d:8a:0b:ae:7f:
         73:98:5d:ae:a8:f2:fd:eb:37:af:92:63:0c:15:20:cf:fd:9e:
         d1:59:d4:76:ea:25:13:a4:54:9c:77:db:d0:62:6e:86:75:14:
         01:f2:3b:c3:b5:83:74:39:4a:0d:6b:0a:89:45:c3:5f:7d:69:
         21:a4:fd:6d:12:31:81:d5:69:d8:01:3b:4c:b8:a6:4b:a5:ec:
         83:cb:a5:bf:b7:e3:79:da:a4:63:40:d4:d7:19:16:65:7d:78:
         a6:13:d9:e0:8c:32:2b:5c:4a:74:54:a0:3d:be:e2:e5:a7:d8:
         8a:c9:27:7a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIEv6se81ngzg2qSN/QzV/vP2EuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5MURGMjIwQkM2MkRCNkE1MjVDOUE0RDZBMDlGNzYy
RjgwNkQ0NTAeFw0yNTA1MjAyMjIwMDhaFw0yNjA1MTkyMjI1MDhaMDMxMTAvBgNV
BAMTKEEwRDVCREJGOEUyODgyNEYzMTU3MUUzQkM4MERGQTdDM0M2RUI0RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpyuVNbfr+ICXEnQ4F414cKpc
7kca9vV4o9dP+PeVJW/BsyQHMHfCiheckmucDT95oRKxSHWYMwruvkUhahjA/LJV
5PY4XRBTp3HckHEiVIRuwvEORKQS9zh+icGqP3V0GPvXG5vEN1DgIjD5vZBH1mKt
uL4ivKizFZLvaLT4r4GBa4QCeZm7WzesuCLGnc5sJta+3ye8UIBnOEaeowAh/L6U
9ZqsVl2n8kWEv4qIE1xNwdY7fiL6Ikx/kSf4lC6wIkbHpPZxdWHE/CUs/ECA0UoP
69kfstNiDsdBT1y+OpEJD9LD/ggGfNc/rFyf8hDjRfaLpESJ4+Dx2xzR2e7TAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoNW9v44ogk8xVx47yA36fDxutNkwHwYDVR0j
BBgwFoAUsZHfIgvGLbalJcmk1qCfdi+AbUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkd3N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdM
eHUvMS9CMTkxREYyMjBCQzYyREI2QTUyNUM5QTRENkEwOUY3NjJGODA2RDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxOTFERjIyMEJDNjJEQjZB
NTI1QzlBNEQ2QTA5Rjc2MkY4MDZENDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZHdzdmTTNwaWtNNmFUUUpnTFk5Qlg1eTJDdmp3eHdEZ1IzcFFMVFlXTHh1LzEv
MzEzNzM5MmUzNjMzMmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsz8MMA0GCSqGSIb3DQEBCwUAA4IBAQAX1qTUyYN1
zSIsizZXIJsSsPIy7qpuW9Q2PUsvT/at35CiBTNeYsr0Jl6dbuxMZ7JenjIWXQFM
IFmaUig9sjfKU1N0C3qBbU4CA13KaGeBgZp2qus1QzagS6IkI2n+ZlBmKR97yAvY
lFPkUrePo4PUOVahYfKFl5AxrDeLV4LWjcXCbwnqfvffIwsYXYoLrn9zmF2uqPL9
6zevkmMMFSDP/Z7RWdR26iUTpFScd9vQYm6GdRQB8jvDtYN0OUoNawqJRcNffWkh
pP1tEjGB1WnYATtMuKZLpeyDy6W/t+N52qRjQNTXGRZlfXimE9ngjDIrXEp0VKA9
vuLlp9iKySd6
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:49:19 2025 by rpki-client