Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32342d3234203d3e20323731353536.roa
File:                     3137392e36332e38322e302f32342d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          D33sbtSifzt35U8fd8lNMlD48VizEuHtf/DgG/pEioc=
Subject key identifier:   66:6A:F3:01:E1:C5:03:0A:46:88:76:68:40:90:6A:AA:69:77:11:6F
Certificate issuer:       /CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
Certificate serial:       18B333DB24508CF6B92718470F0BED10C3D30624
Authority key identifier: A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32342d3234203d3e20323731353536.roa
Signing time:             Tue 01 Apr 2025 08:57:29 +0000
ROA not before:           Tue 01 Apr 2025 08:52:29 +0000
ROA not after:            Tue 31 Mar 2026 08:57:29 +0000
asID:                     271556
IP address blocks:        179.63.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 16:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b3:33:db:24:50:8c:f6:b9:27:18:47:0f:0b:ed:10:c3:d3:06:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E
        Validity
            Not Before: Apr  1 08:52:29 2025 GMT
            Not After : Mar 31 08:57:29 2026 GMT
        Subject: CN=666AF301E1C5030A4688766840906AAA6977116F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:bf:f4:6a:57:9f:2e:a5:2b:b9:7b:a1:e0:
                    12:aa:75:c9:3e:f6:56:9c:5c:1c:37:2d:a0:99:33:
                    c5:62:16:56:d4:78:59:21:19:e8:3f:40:74:ed:8a:
                    a4:c4:f9:39:ab:8f:53:c3:31:10:26:ea:70:b6:0e:
                    2c:4d:53:d8:5b:d8:97:79:9a:67:8a:02:94:6b:c4:
                    51:c1:d6:d8:be:aa:c1:f5:b8:48:1e:99:3d:45:95:
                    0e:65:88:6c:94:90:c0:1f:92:b4:94:cc:ed:ab:ca:
                    40:27:bc:b3:c8:27:fa:0d:df:36:e5:b1:06:f4:82:
                    f5:1c:d2:89:21:dc:52:b5:80:3a:4a:31:a2:8f:49:
                    37:cf:61:19:2d:f6:e8:a0:5d:71:00:d2:2d:ea:27:
                    f0:cc:5a:ae:07:ae:0f:af:f5:7b:ef:d3:72:97:fe:
                    41:c2:ac:f1:15:da:50:2a:3e:5e:27:a9:f3:52:eb:
                    8a:8f:54:90:02:a5:a2:9f:eb:f6:12:ee:ef:2d:61:
                    a0:36:49:28:36:ff:ec:85:c5:33:98:9a:98:1b:7d:
                    38:7d:87:5c:69:82:59:c2:44:1a:32:68:65:fc:0d:
                    fa:98:8c:b4:9b:a4:96:08:0d:8d:79:3e:e2:1b:c1:
                    83:b3:c2:42:c9:83:04:39:52:60:85:fe:04:cb:dd:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:F3:01:E1:C5:03:0A:46:88:76:68:40:90:6A:AA:69:77:11:6F
            X509v3 Authority Key Identifier:
                keyid:A4:90:6D:8D:9B:4F:5E:AC:4B:73:A9:A0:51:BE:91:9D:8D:86:D3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4906D8D9B4F5EAC4B73A9A051BE919D8D86D31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32342d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:8c:90:c7:34:4c:52:7c:88:82:f2:74:5e:95:12:63:84:
         4b:95:4d:c5:4b:63:cd:b8:14:da:b9:c7:fd:ef:b9:59:71:71:
         be:3f:c4:71:f6:95:03:4e:29:ce:e7:91:ba:24:30:02:51:63:
         25:23:d4:a2:4b:57:90:df:ad:13:c6:f1:f9:0a:38:6a:11:e0:
         61:bd:bb:35:03:86:a3:d0:8c:36:60:71:fb:f5:1c:69:72:bf:
         a8:26:de:00:18:d4:61:8c:fb:e2:62:7e:99:5c:26:60:99:5f:
         88:65:5c:78:77:71:f0:62:88:e1:d8:10:c7:93:ba:10:5f:d6:
         44:d1:10:1a:99:b8:5d:e4:2c:d9:1d:37:e9:1b:a9:40:97:dc:
         41:2d:75:a0:0a:f1:c7:45:d5:90:50:bb:09:87:e9:08:94:54:
         5d:0a:03:09:80:42:9e:c6:42:13:5a:b4:07:49:8d:0f:cd:b6:
         59:4f:03:01:cc:b6:0f:a5:04:0d:7c:49:29:39:85:4f:bc:f6:
         2e:b9:eb:82:61:f0:96:96:d0:89:33:fe:f3:44:2e:df:35:7b:
         a0:94:ab:1c:68:fa:0f:c8:53:d4:ec:84:8a:fd:be:d3:09:b3:
         5a:22:e5:fe:fd:26:3c:0c:8f:c3:6e:00:43:b7:f4:53:a7:79:
         8b:c2:9e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:37:52 2025 by rpki-client