Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa
File:                     3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa (raw, json)
Hash identifier:          VBK3lL9NwtxgT9NUVwMlLv/5i85q+uXl9XaPM3I7+YE=
Subject key identifier:   AA:EB:5C:79:B3:EE:91:C3:18:D8:1E:65:48:EA:C4:69:71:97:10:45
Certificate issuer:       /CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Certificate serial:       76986E34AC26EF2DB24914E8D125ABB04A80DCA9
Authority key identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa
Signing time:             Wed 28 May 2025 13:47:52 +0000
ROA not before:           Wed 28 May 2025 13:42:52 +0000
ROA not after:            Wed 27 May 2026 13:47:52 +0000
asID:                     271204
IP address blocks:        179.49.188.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
                          rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 23:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:98:6e:34:ac:26:ef:2d:b2:49:14:e8:d1:25:ab:b0:4a:80:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072772F63E62DC06EAED9A555C2C793CEFF59262
        Validity
            Not Before: May 28 13:42:52 2025 GMT
            Not After : May 27 13:47:52 2026 GMT
        Subject: CN=AAEB5C79B3EE91C318D81E6548EAC46971971045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:07:4c:e8:42:6d:08:48:b6:c6:b4:5e:41:
                    8c:bf:61:fc:e7:20:3b:25:91:59:84:b9:ef:6a:e1:
                    3e:c5:18:cf:5f:3f:31:86:ca:94:9f:2d:3d:09:dc:
                    34:dc:c9:c7:b1:d0:a1:22:8f:73:b1:73:75:93:11:
                    eb:72:ea:ba:33:5a:09:3b:64:e0:db:a2:78:29:78:
                    4b:a5:5e:32:53:14:ec:79:82:79:a3:37:37:13:b3:
                    c2:54:de:3e:73:b3:e5:99:c3:10:76:c7:5d:3f:2e:
                    31:f3:7c:57:42:6e:7b:36:a0:5f:72:6f:be:66:26:
                    3a:c3:e9:13:59:2c:f7:83:20:63:6c:34:81:54:4e:
                    e5:9a:6c:65:cd:01:6f:63:58:87:f4:b0:54:6e:b0:
                    af:bd:d4:7d:17:47:5c:0f:41:0b:33:8e:03:b4:c8:
                    f1:c9:41:60:3c:05:bf:c3:4d:45:4c:5c:e6:8c:b3:
                    d9:1b:81:29:b7:0e:70:48:3a:41:52:6f:59:48:94:
                    c5:ca:1e:7a:12:4e:20:fa:c4:38:05:a0:c6:fc:e0:
                    af:65:2e:11:62:1f:42:3e:b0:6c:51:ca:da:c7:ec:
                    a6:f9:d7:c6:04:d1:dc:b7:5f:7e:6d:8e:a2:dd:7e:
                    e1:93:99:e8:a9:db:15:9c:6b:09:f6:ba:73:20:84:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EB:5C:79:B3:EE:91:C3:18:D8:1E:65:48:EA:C4:69:71:97:10:45
            X509v3 Authority Key Identifier:
                keyid:07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:8d:59:e1:8c:41:f7:82:40:66:3d:b4:7c:d9:a1:ee:d1:28:
         56:75:7d:a7:89:42:b4:91:f9:24:64:08:c5:af:fa:3d:8e:ac:
         07:70:d9:06:c7:36:58:29:73:34:db:a9:8d:c0:62:2e:d5:4b:
         a8:6c:9d:ac:6c:48:4d:58:02:55:22:63:d1:71:86:e7:eb:67:
         cb:fc:41:e4:ef:69:ba:fa:78:1a:0e:d5:5c:05:de:2d:c7:13:
         e0:9e:d0:c4:20:f6:eb:74:3e:8d:3d:3a:45:6d:0e:c8:47:e9:
         cd:67:49:97:cc:50:d6:64:9e:a1:6c:4a:ce:11:1e:91:89:54:
         41:e8:f3:29:0f:c2:8e:39:03:7d:61:f9:eb:a8:f2:ee:d6:c3:
         88:66:40:43:5f:b1:39:34:f1:88:eb:36:6d:0c:de:7a:be:c8:
         b2:d9:d4:f9:94:b0:8d:37:0d:00:67:fb:e8:26:3c:a7:93:4a:
         3c:e1:3d:91:64:37:33:85:72:84:60:1c:ef:f0:2c:5e:56:31:
         70:f7:ad:2e:56:f9:17:b2:6d:4f:ad:c4:dd:63:4d:be:03:61:
         b2:1b:57:86:69:59:0d:91:63:5d:e5:a3:bc:86:88:78:01:0b:
         e5:b3:94:14:2a:49:2a:8d:1a:93:d5:07:9d:11:94:e1:9d:cb:
         20:12:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:25:57 2025 by rpki-client