Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231322e302f32322d3332203d3e20323731323234.roa
File:                     3137392e34392e3231322e302f32322d3332203d3e20323731323234.roa (raw, json)
Hash identifier:          xkLblMY9Ik6ttqwiRd2EviEZ9nwQgInpYvkyQwCtfq0=
Subject key identifier:   9B:2B:B7:A1:43:42:5F:FF:DC:1D:B4:33:B8:3D:44:B8:6F:99:96:33
Certificate issuer:       /CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B
Certificate serial:       71DBCCD59268188350F2859EA0849A825614BE
Authority key identifier: 6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231322e302f32322d3332203d3e20323731323234.roa
Signing time:             Mon 12 May 2025 14:40:55 +0000
ROA not before:           Mon 12 May 2025 14:35:55 +0000
ROA not after:            Mon 11 May 2026 14:40:55 +0000
asID:                     271224
IP address blocks:        179.49.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl
                          rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 12:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:db:cc:d5:92:68:18:83:50:f2:85:9e:a0:84:9a:82:56:14:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B
        Validity
            Not Before: May 12 14:35:55 2025 GMT
            Not After : May 11 14:40:55 2026 GMT
        Subject: CN=9B2BB7A143425FFFDC1DB433B83D44B86F999633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9c:e4:f4:b1:07:a3:97:04:9a:35:d0:09:a6:
                    ec:9e:db:5a:0c:ff:a1:d8:48:8a:ed:9c:41:b2:80:
                    52:a6:99:f3:e2:c6:88:c0:73:75:4f:fd:88:4f:18:
                    92:a1:42:b0:19:e2:89:7d:25:25:80:df:b1:14:6e:
                    ef:ff:7c:df:8f:49:eb:07:7b:d6:e4:61:54:b0:aa:
                    38:98:91:db:03:b8:78:cf:58:1e:3f:5f:da:1c:84:
                    31:5c:49:72:c0:07:e7:04:9f:d1:73:7b:cc:68:e7:
                    ad:41:41:21:33:b1:55:81:cd:2f:50:22:7e:98:7c:
                    7a:3f:c1:b0:16:58:36:3f:a4:5f:8f:67:c9:c0:80:
                    5d:19:b7:df:6e:3c:49:54:53:ae:23:87:3b:ab:e9:
                    10:14:56:67:4c:ac:30:bf:f3:0a:75:a4:33:c1:e6:
                    29:fc:a8:11:d0:9d:64:a6:e9:04:07:0f:89:21:bd:
                    47:13:a2:45:2c:3a:d7:04:1c:6a:54:c6:24:77:33:
                    9e:5c:2b:14:92:63:e5:33:b4:25:70:cf:da:db:0f:
                    73:96:b6:a2:d9:af:ef:0f:dc:8c:8c:47:9a:92:81:
                    8b:61:4b:02:0a:64:88:af:26:93:b4:97:89:58:ce:
                    6c:36:4e:79:3e:99:d1:51:f5:c6:18:15:f3:d7:b2:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2B:B7:A1:43:42:5F:FF:DC:1D:B4:33:B8:3D:44:B8:6F:99:96:33
            X509v3 Authority Key Identifier:
                keyid:6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/3137392e34392e3231322e302f32322d3332203d3e20323731323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:c8:33:88:24:11:5a:a2:59:ad:11:d4:4e:04:d2:d7:d7:
         52:60:e8:bb:8c:d5:81:1d:8d:5c:ec:50:0f:4d:e8:da:e2:85:
         33:e0:b3:1f:c5:54:76:13:98:f2:d6:b6:a8:08:ac:bf:a8:70:
         1a:7b:0e:ec:ce:62:40:33:f4:0e:f8:3e:6e:f4:4e:1f:8f:a1:
         18:77:e0:43:b7:81:4a:04:14:7d:d1:0a:86:cc:e5:59:de:cf:
         8d:27:75:f3:9a:15:6e:15:fb:9c:b2:9c:98:d4:54:b2:ad:a9:
         fe:70:03:4e:8c:70:43:4f:ec:47:c8:67:e6:51:45:17:35:6c:
         c5:fe:30:e4:0b:b7:13:de:93:d1:28:81:4c:cb:59:fb:f6:3a:
         42:5b:f6:64:73:86:af:6e:8b:2c:4a:11:4b:9d:bb:5e:2b:06:
         66:50:90:42:e5:8e:59:9f:69:e4:55:d7:6e:fc:38:78:29:b4:
         5a:3c:ea:57:36:bd:76:e0:96:ee:77:4e:82:2f:2a:e7:bc:01:
         c6:0d:2c:56:21:9e:1f:cb:f0:3b:75:fd:0c:fb:9b:7f:b1:21:
         4b:97:5a:62:76:d5:33:75:f0:88:f9:57:66:f0:eb:88:4a:21:
         3d:29:be:94:b1:12:4a:03:b5:44:29:a0:b4:01:b8:91:79:2e:
         66:8e:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:25:09 2025 by rpki-client