Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/3137392e34382e3232382e302f32322d3234203d3e20323731303537.roa
File:                     3137392e34382e3232382e302f32322d3234203d3e20323731303537.roa (raw, json)
Hash identifier:          d4EHR6bOqBJQrxkTJLCja78IEQYwuY0zEPR0GntQgmo=
Subject key identifier:   2F:89:C3:E3:C7:79:1A:CC:56:26:CD:DF:EA:11:05:DB:49:EA:FC:B5
Certificate issuer:       /CN=6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC
Certificate serial:       18D9C43D5CF9974CB16F9C7AD366F31B745CED4A
Authority key identifier: 6B:2E:EB:1D:41:16:F5:E9:C2:00:9B:49:AF:67:42:F0:97:01:CD:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/3137392e34382e3232382e302f32322d3234203d3e20323731303537.roa
Signing time:             Thu 06 Mar 2025 18:01:26 +0000
ROA not before:           Thu 06 Mar 2025 17:56:26 +0000
ROA not after:            Thu 05 Mar 2026 18:01:26 +0000
asID:                     271057
IP address blocks:        179.48.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.crl
                          rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d9:c4:3d:5c:f9:97:4c:b1:6f:9c:7a:d3:66:f3:1b:74:5c:ed:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC
        Validity
            Not Before: Mar  6 17:56:26 2025 GMT
            Not After : Mar  5 18:01:26 2026 GMT
        Subject: CN=2F89C3E3C7791ACC5626CDDFEA1105DB49EAFCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:01:29:b9:7a:22:92:11:ee:41:9a:00:38:
                    95:a0:98:44:17:20:d7:11:31:65:5d:bb:24:27:e7:
                    3e:dc:95:d9:e0:5e:b5:e2:a6:90:4f:42:c0:91:43:
                    2f:14:aa:82:5f:70:f1:f0:e9:b0:93:1e:ac:0a:de:
                    26:06:65:46:15:48:9a:0e:08:86:23:2c:e3:97:d7:
                    2f:ce:a9:74:76:ee:79:b2:79:e4:c8:64:13:af:bc:
                    12:f2:b0:02:5b:f2:45:c9:58:41:ef:2e:6c:da:4b:
                    75:1d:90:ec:c8:14:7a:af:af:35:bc:8d:83:ad:b0:
                    4f:f5:88:d8:4d:a9:05:b4:0d:f3:8f:3e:f6:22:17:
                    30:28:d5:01:f1:b7:44:5f:e8:f5:97:96:7d:61:ab:
                    7a:65:46:08:7d:64:d5:d1:36:d6:fd:61:4c:eb:01:
                    f4:4a:1a:11:3d:48:4c:b9:70:23:f1:d6:8d:41:35:
                    87:7a:bd:82:45:73:7f:15:4e:34:95:fe:89:78:e5:
                    de:46:97:c1:29:eb:f2:f2:d0:d7:6e:3c:b2:20:fd:
                    c5:99:60:30:a0:77:75:ab:61:c5:f9:97:ab:5a:fa:
                    e4:6b:ee:10:f0:6f:c3:9b:76:e8:0e:77:01:38:4b:
                    28:fd:ce:30:c3:ba:3b:ad:1f:cf:f3:94:70:a2:ce:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:89:C3:E3:C7:79:1A:CC:56:26:CD:DF:EA:11:05:DB:49:EA:FC:B5
            X509v3 Authority Key Identifier:
                keyid:6B:2E:EB:1D:41:16:F5:E9:C2:00:9B:49:AF:67:42:F0:97:01:CD:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B2EEB1D4116F5E9C2009B49AF6742F09701CDAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/1/3137392e34382e3232382e302f32322d3234203d3e20323731303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:4d:2d:a4:07:93:a8:56:71:12:82:3b:9f:93:c6:ed:86:6f:
         3d:91:ab:79:7c:03:4e:cf:07:99:31:8b:86:2a:07:90:ef:2d:
         7a:7d:66:67:b3:72:01:f5:4a:69:8e:6d:90:fe:3f:fe:88:58:
         8f:a3:9f:ff:61:54:a4:85:c1:cc:04:91:1d:8a:71:de:f3:3a:
         c2:88:87:42:22:f5:a5:00:5d:7f:12:a1:9c:3f:e4:cf:15:f3:
         b8:f3:6c:b5:0f:c2:13:0b:47:c0:14:20:1d:6e:f7:b9:63:00:
         71:93:f6:54:d5:bf:eb:6f:5d:70:19:84:aa:dc:02:ad:60:92:
         69:c2:dd:88:b2:dc:f9:7c:3b:c0:9c:c6:d1:f8:ec:8c:13:6f:
         e8:40:02:2c:bf:09:01:66:e2:8a:e2:66:b5:03:89:45:1c:d5:
         db:01:00:85:72:77:cd:61:18:d9:c4:ce:0b:fe:ab:47:0d:5e:
         43:4b:c1:47:0f:b6:25:61:e7:17:03:66:8c:36:7c:fe:b3:30:
         fa:c3:70:b3:bd:be:fd:f5:61:97:4c:9c:53:b0:25:d5:6e:d1:
         47:00:b1:83:76:e8:bf:43:e3:8a:10:19:0c:9b:ee:56:a5:6c:
         d3:ee:c4:50:d3:38:c5:18:83:a4:9f:9c:10:41:62:23:15:89:
         27:52:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:01:43 2025 by rpki-client