Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32322d3232203d3e20323635323037.roa
File:                     3137392e302e36382e302f32322d3232203d3e20323635323037.roa (raw, json)
Hash identifier:          xIptaV1f7q3VZ8j+zenW06zf7N3jqm7IAJfKPwHcwEs=
Subject key identifier:   4A:F7:4F:F3:EB:5B:23:01:00:8A:38:3E:BD:3C:04:0B:FC:3C:80:5F
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       2798EAD4785BBB7BA37F2E61E03258BDFB8ABBB9
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32322d3232203d3e20323635323037.roa
Signing time:             Tue 25 Mar 2025 13:25:32 +0000
ROA not before:           Tue 25 Mar 2025 13:20:32 +0000
ROA not after:            Tue 24 Mar 2026 13:25:32 +0000
asID:                     265207
IP address blocks:        179.0.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 05:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:98:ea:d4:78:5b:bb:7b:a3:7f:2e:61:e0:32:58:bd:fb:8a:bb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Mar 25 13:20:32 2025 GMT
            Not After : Mar 24 13:25:32 2026 GMT
        Subject: CN=4AF74FF3EB5B2301008A383EBD3C040BFC3C805F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:e2:79:e7:da:c4:91:26:f0:ee:e9:4c:c3:
                    de:08:99:10:a2:38:31:20:9d:96:f4:a3:2f:bb:73:
                    22:9f:1b:1a:8d:fc:4b:96:7e:64:7b:82:38:60:a7:
                    7e:19:04:6c:72:b5:d3:74:5f:05:2c:95:12:5a:74:
                    90:28:ad:16:95:8f:57:b9:bb:e2:a0:af:9c:1f:96:
                    db:b0:7d:60:ce:dd:28:ab:1a:4a:e0:cf:62:74:77:
                    1a:76:91:4e:f0:3e:25:72:06:e0:36:31:92:8b:2c:
                    55:e2:f9:3a:b9:30:81:8a:3b:5d:46:24:62:db:3d:
                    47:ca:7c:8f:7b:de:03:74:a8:da:3e:07:e5:b1:ab:
                    11:71:43:27:0f:c7:77:57:52:94:68:2f:06:7f:8b:
                    d4:3e:9e:e9:e5:6e:ad:d7:cb:55:dd:fa:1b:79:b4:
                    04:ea:ce:8a:dc:7e:23:ca:a3:88:94:fe:01:90:35:
                    ac:ea:6c:aa:ee:f0:57:0a:b9:0c:b8:53:f6:c3:90:
                    76:dc:80:a0:90:dd:6d:71:dd:8d:6c:45:03:e2:69:
                    cf:8d:08:f5:d5:47:0d:41:50:3a:19:f0:4e:f0:d2:
                    6f:a9:9c:76:3b:be:ac:1f:d0:fb:09:ad:80:e2:0f:
                    2d:f3:b8:03:c4:49:85:4a:27:35:ae:90:a3:e2:1c:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F7:4F:F3:EB:5B:23:01:00:8A:38:3E:BD:3C:04:0B:FC:3C:80:5F
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32322d3232203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:ce:b0:a0:7a:67:51:f7:fb:fb:bf:05:d5:b7:68:10:b5:
         5f:5b:a8:43:2f:93:1b:b9:96:e5:11:2d:ec:32:09:76:ad:1e:
         89:52:f0:a2:b8:2e:b7:b9:4a:44:80:9b:92:ac:11:56:6d:76:
         fc:fa:24:6b:26:35:19:c2:7b:b9:79:c8:82:7b:62:dc:a1:62:
         1c:e6:ef:82:ff:cc:6e:e2:2b:bf:d4:fa:2c:e1:af:bb:72:03:
         3d:f4:b6:07:2b:7c:c1:b0:57:20:2a:9b:de:fe:fe:c0:e6:fe:
         c7:05:e6:6b:10:bf:c9:5b:05:cd:21:1b:78:bc:59:9a:98:8b:
         98:0e:96:a2:05:4f:0b:2a:f3:f1:74:39:55:59:09:35:85:32:
         7b:f6:43:99:db:7a:bd:f5:89:5e:8b:e9:56:b9:1d:33:fc:0b:
         ee:10:e4:9d:4f:ab:a3:2d:e3:90:95:6f:5c:5a:8a:40:4c:ff:
         a8:51:16:8b:a9:2d:60:e6:a9:44:bf:b7:e3:0f:cd:1e:73:e4:
         a2:e2:1c:41:2a:d9:02:f1:9f:24:da:04:87:91:3b:55:8a:e0:
         5b:ba:5c:20:3e:21:97:53:38:94:05:1f:ad:7b:e9:05:68:70:
         65:74:93:40:3b:3b:e6:32:7f:09:8c:1c:2c:69:63:e8:dc:7f:
         4c:17:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:51:59 2025 by rpki-client