Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa
File:                     3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (raw, json)
Hash identifier:          IS0tA9ntjO/6YSwSpKoc+6y0GOXtntg0W8Yvm4DBaSU=
Subject key identifier:   19:7D:70:01:16:59:7E:B1:65:9E:E2:B2:52:75:C2:BA:00:29:19:F7
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       3BB16F2AFA8BEDD483B034E12B12F6F22A16A49A
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa
Signing time:             Thu 06 Mar 2025 16:46:49 +0000
ROA not before:           Thu 06 Mar 2025 16:41:49 +0000
ROA not after:            Thu 05 Mar 2026 16:46:49 +0000
asID:                     263280
IP address blocks:        179.109.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b1:6f:2a:fa:8b:ed:d4:83:b0:34:e1:2b:12:f6:f2:2a:16:a4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Mar  6 16:41:49 2025 GMT
            Not After : Mar  5 16:46:49 2026 GMT
        Subject: CN=197D700116597EB1659EE2B25275C2BA002919F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:35:77:62:da:b8:0a:49:81:81:d7:4c:c4:
                    51:39:86:68:09:43:c9:f2:2c:ba:a2:c6:40:e2:88:
                    be:1b:a1:c5:de:11:19:45:3e:2b:c5:ef:13:f4:4b:
                    43:fa:40:bb:a8:e5:8d:e1:86:58:64:d8:c1:76:67:
                    13:3c:b2:d0:07:d8:99:cb:ca:da:46:85:9c:1e:4c:
                    31:79:71:5f:72:9f:94:28:d8:09:97:4f:5b:5e:fe:
                    1c:0f:ac:a2:07:63:db:43:17:bc:e4:f3:76:2d:e4:
                    ad:4f:b0:34:fe:3b:77:7b:50:36:ba:8e:3c:0b:b3:
                    d9:ad:11:33:92:ce:8a:8f:53:f2:6d:f7:c1:eb:f6:
                    7a:68:62:ff:3e:54:a2:c2:0c:e6:45:e2:e0:1f:da:
                    0d:84:8a:a0:1f:ed:24:20:dd:8f:e8:b8:2a:c9:39:
                    01:7a:0f:7f:55:c9:bf:f5:bc:ef:50:28:a4:f2:9b:
                    60:f1:f7:e7:63:e5:ae:98:f9:b0:87:db:1a:5d:29:
                    ee:a0:ff:b4:93:9a:da:55:fe:36:7f:10:dc:dd:b0:
                    3e:e9:bc:07:bd:e4:ae:4e:ee:92:cb:e5:51:4a:68:
                    6b:56:93:c9:4d:84:47:23:e5:be:b8:f8:d1:59:19:
                    52:d1:08:14:d4:f8:84:e3:73:ec:db:52:78:33:c3:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:70:01:16:59:7E:B1:65:9E:E2:B2:52:75:C2:BA:00:29:19:F7
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:fe:03:b8:4c:16:58:37:7f:11:0d:a1:53:64:bb:c2:4f:de:
         d8:b1:74:73:c3:d6:77:65:bf:1a:38:72:91:c9:70:21:39:f2:
         07:44:f4:88:c7:51:56:1e:67:1a:25:05:49:34:9c:15:1d:e6:
         31:53:ee:82:01:d1:fe:a6:3d:41:85:b2:53:0e:35:c4:71:4f:
         cc:18:e7:8a:60:b7:c7:cf:3f:54:3e:e2:9c:33:7a:da:cd:df:
         2f:55:7e:4b:88:82:57:16:38:8b:47:ea:ba:ee:1c:bb:c1:d9:
         18:58:7b:41:ec:59:e2:fb:53:1e:d9:0c:fc:f4:f1:90:d1:4a:
         4c:7f:5d:dc:c7:e7:cb:13:bc:f5:5e:ed:0f:db:ec:77:63:14:
         72:06:14:30:83:32:1e:d7:e7:0c:31:30:10:ef:89:91:4c:07:
         1f:76:be:a1:98:b6:46:7e:8f:02:6f:62:e3:84:1c:1d:45:1b:
         e6:e1:49:3b:10:ca:08:bd:33:9b:2b:5d:09:da:f5:78:44:22:
         6f:03:21:d9:71:46:71:50:69:66:0a:20:3e:15:78:85:19:69:
         35:d5:8f:d5:6e:bb:08:65:04:bb:d8:36:56:5e:42:a9:99:f5:
         4d:b2:7e:4e:9a:68:3f:52:9f:9b:5b:c4:a7:e9:90:99:a4:7d:
         76:5c:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:23:00 2025 by rpki-client