Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa (raw, json)
Hash identifier:          yqq3osrKqy93MAMnfH5zX4AqjHbAE1/73Gdr+W5I4Ag=
Subject key identifier:   60:FE:8D:28:84:B6:C8:02:DD:CB:4F:1E:1F:A0:5F:AE:A1:8A:9B:C8
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       01E2AC2364DCF0C52711F3D2FE4A5BFB96FD2DA0
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     28210
IP address blocks:        179.109.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e2:ac:23:64:dc:f0:c5:27:11:f3:d2:fe:4a:5b:fb:96:fd:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100AFDDD6159BC2CD70F5C8B284FA6C2BFC6F8496EB0A96FF83A6BC2BFB708034D1A25933CD17910B7254BC4993CEC3584415CF99985DC22BBAB5921F704EDEDD7D23772A9D8AA3C3613C3BFDFEB466BA3FD9CD8113F541F4C51020C9742B14B80B85BC67EA765E214FD02201F3EC91FADBED41ECFCE5FFB880327C13BD76C699B5B735AD287FD6A8BE45416D966916DFA53CC8501CFDE99B5FAEE79110E2008EFEFA998A13064A7AAFDD6DE2112FF4CF8822D6ECADD5C6B5E79FE7929490A9A0D2DB69CC2BACB17BF1194E777E37434469F5A1E763905E60B2BDFE359891ED749D78958FB01DBF1BEFC2096E8A68FC87097E775B34D2FBCFCF00590DA70E99204F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:d6:15:9b:c2:cd:70:f5:c8:b2:84:fa:6c:
                    2b:fc:6f:84:96:eb:0a:96:ff:83:a6:bc:2b:fb:70:
                    80:34:d1:a2:59:33:cd:17:91:0b:72:54:bc:49:93:
                    ce:c3:58:44:15:cf:99:98:5d:c2:2b:ba:b5:92:1f:
                    70:4e:de:dd:7d:23:77:2a:9d:8a:a3:c3:61:3c:3b:
                    fd:fe:b4:66:ba:3f:d9:cd:81:13:f5:41:f4:c5:10:
                    20:c9:74:2b:14:b8:0b:85:bc:67:ea:76:5e:21:4f:
                    d0:22:01:f3:ec:91:fa:db:ed:41:ec:fc:e5:ff:b8:
                    80:32:7c:13:bd:76:c6:99:b5:b7:35:ad:28:7f:d6:
                    a8:be:45:41:6d:96:69:16:df:a5:3c:c8:50:1c:fd:
                    e9:9b:5f:ae:e7:91:10:e2:00:8e:fe:fa:99:8a:13:
                    06:4a:7a:af:dd:6d:e2:11:2f:f4:cf:88:22:d6:ec:
                    ad:d5:c6:b5:e7:9f:e7:92:94:90:a9:a0:d2:db:69:
                    cc:2b:ac:b1:7b:f1:19:4e:77:7e:37:43:44:69:f5:
                    a1:e7:63:90:5e:60:b2:bd:fe:35:98:91:ed:74:9d:
                    78:95:8f:b0:1d:bf:1b:ef:c2:09:6e:8a:68:fc:87:
                    09:7e:77:5b:34:d2:fb:cf:cf:00:59:0d:a7:0e:99:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:8D:28:84:B6:C8:02:DD:CB:4F:1E:1F:A0:5F:AE:A1:8A:9B:C8
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:a8:67:6b:1d:4b:e1:f2:d4:04:9f:03:20:80:d5:c1:f1:97:
         d4:bd:be:a8:ee:3a:d6:c1:f7:9d:ec:7e:60:2e:5b:a6:d1:0e:
         70:b6:3f:23:9a:4f:8b:f8:92:e4:6c:99:5e:18:bd:8c:a5:f7:
         7f:9f:54:c9:ad:46:5f:e4:86:b0:91:51:0e:7a:59:65:66:44:
         95:0a:37:50:b5:b4:30:42:5f:60:b8:75:7a:b0:a6:80:ec:5b:
         8b:98:fa:94:9f:ff:f9:8d:dd:3d:ed:14:8f:9d:50:de:e9:b0:
         4c:34:d6:f8:84:9a:61:18:48:d3:2d:6f:22:dc:6e:e9:0e:a0:
         3a:6b:69:cf:a1:d7:14:d6:ca:ab:55:98:f7:1a:75:3b:d5:bf:
         af:8c:55:10:4a:03:e1:89:1a:09:3b:10:ed:17:3a:d5:36:b6:
         eb:f6:79:57:45:73:df:4c:26:08:fc:c8:74:82:b1:ad:64:37:
         5d:25:f0:2b:be:f7:40:cd:c9:cd:09:b1:4c:9a:79:91:bb:57:
         fd:22:04:71:0a:df:ae:f9:49:35:9e:07:c4:01:a4:39:26:d1:
         4f:bd:ae:0d:ff:9a:d3:5b:8b:54:f1:8b:76:94:0c:d1:d3:5f:
         72:6d:aa:1a:ad:1f:14:a1:24:45:6c:09:c5:21:46:68:29:42:
         39:f8:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:13:38 2025 by rpki-client