Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa
File:                     3137392e3138392e39362e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          1/ZT4KWBGo0AFJWfmbv6bVu7vv4GNLRGD6CG2NuCsb8=
Subject key identifier:   7C:8A:1D:85:6D:DA:9D:38:AC:F9:74:6F:33:72:02:28:B5:22:DC:C1
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       5FAFC0219CD36B352CD2FED9E1A7D8D8578B09BC
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 12 Mar 2025 12:33:13 +0000
ROA not before:           Wed 12 Mar 2025 12:28:13 +0000
ROA not after:            Wed 11 Mar 2026 12:33:13 +0000
asID:                     28201
IP address blocks:        179.189.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:af:c0:21:9c:d3:6b:35:2c:d2:fe:d9:e1:a7:d8:d8:57:8b:09:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Mar 12 12:28:13 2025 GMT
            Not After : Mar 11 12:33:13 2026 GMT
        Subject: CN=7C8A1D856DDA9D38ACF9746F33720228B522DCC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4b:97:b9:86:ef:b5:5c:58:a5:76:2a:63:4d:
                    61:da:03:0e:06:dd:4d:a4:46:7f:cb:20:18:20:9e:
                    2d:2a:60:9f:37:2b:aa:e0:0e:ab:25:88:cd:80:11:
                    5e:3f:45:1e:11:c4:27:ed:03:22:fa:89:d0:27:74:
                    24:6e:61:70:b5:e7:cf:c6:6e:2e:7a:85:b3:13:4b:
                    78:6a:56:1f:9d:36:04:0f:5c:1a:93:56:40:fa:df:
                    d9:7a:e9:6a:ea:06:54:f9:a9:35:c6:fe:63:6e:ac:
                    20:e7:e0:39:11:0b:c3:b1:4f:72:4a:23:80:47:5d:
                    23:66:1c:2d:12:90:f0:fe:7f:57:46:54:ec:6d:3d:
                    2a:a5:5e:ac:c4:5c:6d:80:ce:91:81:b5:a0:04:36:
                    6d:40:4c:47:24:53:ca:d8:60:e2:fc:7d:38:91:67:
                    dc:59:1d:bc:87:23:c6:21:d2:b2:be:42:2c:40:c7:
                    fd:6f:a0:bb:80:ad:fd:24:94:4b:cd:1f:a8:61:14:
                    68:2c:6c:7e:ec:12:b0:a4:52:5f:52:39:09:fe:d0:
                    d0:26:08:bf:4a:8b:44:6f:0b:0b:61:41:7f:8e:59:
                    36:da:eb:61:61:5a:d1:14:47:dd:99:8e:a7:2f:36:
                    13:8c:07:97:78:7b:37:cb:6e:0f:7b:52:49:df:7e:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8A:1D:85:6D:DA:9D:38:AC:F9:74:6F:33:72:02:28:B5:22:DC:C1
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:ce:f1:f3:9a:85:85:37:87:e1:57:b8:d2:8d:42:13:25:c5:
         5b:1b:f7:4f:1d:62:1f:68:cc:73:07:de:5a:bc:89:42:c0:07:
         86:dd:5d:a9:19:8b:2d:41:be:5d:77:1d:f6:be:52:2b:8e:f4:
         fd:f0:58:d5:66:7f:52:63:4f:a2:c2:56:99:5f:62:c1:d7:1e:
         44:fe:9b:90:62:db:c5:dd:52:ec:e6:73:e7:6a:22:ec:cb:10:
         b3:c4:89:15:f5:ed:2a:8b:bb:e3:20:e4:1c:fc:cb:9d:b6:2a:
         8e:be:e6:5e:2e:54:46:ba:4f:e0:b6:b7:a5:07:89:d9:fa:08:
         6e:ed:e8:9b:ce:78:58:82:ab:12:a3:bb:5f:b3:58:ed:80:e6:
         f7:5d:2e:75:c3:1c:ab:c7:37:ae:98:2e:a0:4f:50:af:20:78:
         0f:0a:9f:40:21:98:ab:49:ff:f0:de:67:5a:c3:df:97:eb:25:
         96:55:70:02:c7:ac:e7:7f:00:58:71:5b:fa:62:2a:60:1d:14:
         57:62:02:ca:6e:d1:e1:5b:f1:05:a6:6b:00:fb:04:ae:8c:0e:
         db:88:b5:94:8f:29:d5:d3:36:09:0f:8a:86:d9:13:c8:87:5f:
         b7:df:8b:ea:de:66:1b:10:1b:43:95:4e:1e:c3:1d:48:92:d6:
         bb:64:80:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:48:52 2025 by rpki-client