Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3138382e302f32322d3332203d3e20323730383538.roa
File:                     3137392e302e3138382e302f32322d3332203d3e20323730383538.roa (raw, json)
Hash identifier:          hrzIxk3JLRctutErHMR0P03oOujK4uAEpaPTyEq2pck=
Subject key identifier:   CF:3E:68:5E:74:00:50:BA:07:70:D0:3E:54:C3:A7:AD:B0:F0:D5:63
Certificate issuer:       /CN=7C19C5BF1E5EB4CA4AD0605269272004B17BAE72
Certificate serial:       75C07680C2636FCDBE2639353AAAC7AFB5C88188
Authority key identifier: 7C:19:C5:BF:1E:5E:B4:CA:4A:D0:60:52:69:27:20:04:B1:7B:AE:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3138382e302f32322d3332203d3e20323730383538.roa
Signing time:             Wed 25 Jun 2025 17:01:41 +0000
ROA not before:           Wed 25 Jun 2025 16:56:41 +0000
ROA not after:            Wed 24 Jun 2026 17:01:41 +0000
asID:                     270858
IP address blocks:        179.0.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.crl
                          rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 18:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c0:76:80:c2:63:6f:cd:be:26:39:35:3a:aa:c7:af:b5:c8:81:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C19C5BF1E5EB4CA4AD0605269272004B17BAE72
        Validity
            Not Before: Jun 25 16:56:41 2025 GMT
            Not After : Jun 24 17:01:41 2026 GMT
        Subject: CN=CF3E685E740050BA0770D03E54C3A7ADB0F0D563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:37:3d:1b:88:b3:d2:14:92:fa:d2:3e:22:
                    f7:84:c7:ca:dd:1a:51:ac:88:0a:6e:3f:22:5c:66:
                    ed:01:30:e2:61:f0:13:c8:48:fe:f3:7c:c5:bc:cf:
                    6a:81:7a:c7:d0:6f:f0:b2:b5:70:6d:3e:9f:06:db:
                    58:03:10:4f:50:3e:87:31:ee:95:d4:14:c0:55:40:
                    a7:ab:e0:da:af:44:1f:af:01:2b:93:12:e8:61:9a:
                    b6:ce:d0:63:dc:74:e4:d0:db:eb:e6:14:b5:6d:5d:
                    bf:2b:bf:62:d6:9a:70:e6:f6:5d:7a:41:1a:ff:7a:
                    74:5f:05:3d:6a:a7:37:2b:80:06:a6:76:86:ee:68:
                    68:77:50:fb:55:8b:29:91:b4:b4:64:0b:12:8f:e2:
                    73:6a:9e:a3:34:48:1b:bd:ef:3c:fc:cd:9e:08:92:
                    bb:91:df:e4:f9:e3:96:2c:6f:fb:fe:e3:fd:b6:1e:
                    c0:df:f9:e9:22:8b:03:e3:eb:90:ce:90:98:52:52:
                    58:33:44:af:f5:40:83:bc:81:3a:d1:0d:6f:20:9b:
                    89:e2:fc:6d:f6:83:c9:b9:45:eb:d9:0b:51:35:7f:
                    af:ec:b2:7f:6f:f4:49:98:8a:e8:1b:5d:39:bc:1b:
                    07:aa:d7:c7:09:21:49:0b:0b:83:60:3b:7b:17:08:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3E:68:5E:74:00:50:BA:07:70:D0:3E:54:C3:A7:AD:B0:F0:D5:63
            X509v3 Authority Key Identifier:
                keyid:7C:19:C5:BF:1E:5E:B4:CA:4A:D0:60:52:69:27:20:04:B1:7B:AE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3138382e302f32322d3332203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:19:72:4f:c4:18:ee:34:45:32:ae:be:65:7f:e2:fd:69:
         6c:bc:7d:11:9b:16:44:6c:ab:1f:af:2c:2d:57:1b:36:58:ab:
         e5:04:b9:4a:2a:35:a6:98:b3:49:22:83:6c:e4:37:62:e7:55:
         77:5c:a3:c3:38:ab:40:55:17:8d:80:88:99:f4:88:60:25:cc:
         d9:75:c9:dc:b4:ee:1d:a5:84:45:f3:6e:7e:22:93:7c:ff:77:
         29:0f:e4:ac:f4:43:91:44:d7:3c:6c:e2:4e:9f:da:09:c1:12:
         76:b0:64:1d:c3:ab:eb:a3:62:71:06:95:f8:37:92:3f:df:16:
         3a:a3:35:d7:ca:3a:fe:a8:06:1b:1e:22:7b:66:46:7b:49:7b:
         ca:45:29:fc:ea:f2:aa:ef:c1:b2:b9:80:51:7e:11:35:44:0f:
         54:bf:ba:38:97:23:df:ed:04:c2:0e:4e:52:82:57:73:f3:ca:
         30:e7:50:16:10:e8:ab:ab:22:dc:64:be:85:48:32:dd:d7:ca:
         f3:00:cc:02:5a:32:d4:9d:be:cb:55:8f:9c:0c:4c:84:10:8c:
         12:8f:65:8f:ea:d7:34:cf:9c:38:ab:24:73:82:52:a7:9f:9f:
         d9:9b:0a:b5:d8:37:69:4b:16:1a:ff:e4:40:41:4b:c8:51:36:
         b3:5f:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:13:18 2025 by rpki-client