Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa
File:                     3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa (raw, json)
Hash identifier:          jX3fDmCulNxvWn3quI9sCWFLUIq6RwIVLJgUkdySqPA=
Subject key identifier:   15:6D:3C:F4:92:FE:31:21:7F:62:6F:49:6F:2B:46:3C:A5:72:5A:08
Certificate issuer:       /CN=AD2A9EAA0D8113E73A6CFCE555B59055FBE53065
Certificate serial:       565CD1E877C3F82B51994FC2F537503406C7287E
Authority key identifier: AD:2A:9E:AA:0D:81:13:E7:3A:6C:FC:E5:55:B5:90:55:FB:E5:30:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa
Signing time:             Wed 09 Apr 2025 23:59:30 +0000
ROA not before:           Wed 09 Apr 2025 23:54:30 +0000
ROA not after:            Wed 08 Apr 2026 23:59:30 +0000
asID:                     28300
IP address blocks:        179.107.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.crl
                          rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5c:d1:e8:77:c3:f8:2b:51:99:4f:c2:f5:37:50:34:06:c7:28:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2A9EAA0D8113E73A6CFCE555B59055FBE53065
        Validity
            Not Before: Apr  9 23:54:30 2025 GMT
            Not After : Apr  8 23:59:30 2026 GMT
        Subject: CN=156D3CF492FE31217F626F496F2B463CA5725A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:d7:64:d9:6a:8c:f5:bc:48:bd:ad:d2:c1:
                    91:7f:e9:2e:53:87:b2:9d:99:49:d0:ae:d4:f1:aa:
                    d9:c2:c6:1e:63:4e:b1:8c:80:22:dd:84:e8:26:be:
                    d0:d6:57:3f:da:d8:3a:b7:93:dd:fe:a3:0b:f6:cf:
                    c4:0a:8a:ea:d1:da:71:5b:51:d8:c5:37:9e:2e:dd:
                    bc:9a:0f:d0:50:23:38:50:53:23:f1:66:ca:cc:fa:
                    97:da:d6:60:ab:19:21:d7:e0:60:7e:1b:67:be:d9:
                    55:05:10:ba:4e:c7:03:22:67:86:d7:08:6f:4a:50:
                    5d:80:67:0c:af:dd:c6:0e:1d:8a:1d:03:0d:24:ae:
                    58:77:b5:19:f4:6a:b8:29:a1:d1:9f:59:12:28:34:
                    22:24:2f:2e:8d:a9:f4:e0:8e:d9:09:38:8b:c7:82:
                    23:b1:0f:9d:84:f4:84:64:da:ba:02:33:0c:b2:a2:
                    c4:17:6a:54:8e:26:93:cf:4e:f3:52:89:a2:5b:9d:
                    d6:fa:c3:6f:93:09:cf:2b:d9:6b:a6:12:dc:f5:8a:
                    35:00:4e:0d:e2:59:eb:ef:66:49:2c:34:2a:11:aa:
                    d8:af:b1:36:49:42:56:60:bc:bb:bb:b0:b5:d5:b1:
                    c0:fb:ec:12:bd:05:68:04:76:9e:d0:1f:8a:bc:7f:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6D:3C:F4:92:FE:31:21:7F:62:6F:49:6F:2B:46:3C:A5:72:5A:08
            X509v3 Authority Key Identifier:
                keyid:AD:2A:9E:AA:0D:81:13:E7:3A:6C:FC:E5:55:B5:90:55:FB:E5:30:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:ad:38:e2:a0:f1:a9:e2:3b:5d:12:ab:4e:0e:e5:7f:f0:
         69:fc:fd:3e:12:3e:5b:b0:0a:0d:76:af:46:5f:58:53:06:9d:
         94:9b:58:2d:ee:f2:8b:89:f2:cd:55:fd:12:58:5a:21:88:21:
         61:79:04:0d:53:77:e8:ce:db:70:4d:d9:18:86:1e:40:5b:98:
         79:c3:dc:1d:d5:ae:f9:03:a5:b8:b3:25:3d:a1:7a:44:76:67:
         a0:a1:d2:ac:c7:58:d6:0d:a1:6c:d3:be:40:3f:2c:dd:fc:d2:
         c1:f1:c5:e1:2b:ae:ae:81:2f:77:bd:c5:b3:b5:c0:28:bd:fd:
         ba:a6:83:9f:52:dd:ce:db:83:8d:cf:aa:6f:24:d1:65:9d:6d:
         97:f2:c4:66:16:d1:3e:31:c2:28:95:79:6e:d5:c1:7f:80:cd:
         8f:b3:b9:6d:06:81:8f:5a:31:7f:59:3b:c0:7a:ff:f0:05:12:
         1f:e6:e2:56:4d:63:a1:ec:fb:a8:57:61:53:82:6e:17:92:53:
         e0:6d:09:9e:94:b4:c6:57:72:79:85:8b:11:63:51:8f:4e:b8:
         b4:20:0e:31:39:5f:37:e0:28:51:ef:d2:d3:89:9d:d5:de:8e:
         10:fa:2b:f0:76:24:52:3c:89:24:b5:af:ea:34:87:71:24:6d:
         21:1d:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:38 2025 by rpki-client