Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e37312e302f32342d3234203d3e20323635323037.roa
File:                     3137392e302e37312e302f32342d3234203d3e20323635323037.roa (raw, json)
Hash identifier:          Ih9PdivLOXSdN/7v5efUx9SQvw8/61mKqvcNqZyklks=
Subject key identifier:   FB:9C:7A:4C:D1:82:70:4F:12:33:13:26:C5:4B:53:51:CF:57:84:83
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       5BA75C7E492EE23B7902B2AA4570E7E01AA18353
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e37312e302f32342d3234203d3e20323635323037.roa
Signing time:             Thu 06 Mar 2025 07:25:21 +0000
ROA not before:           Thu 06 Mar 2025 07:20:21 +0000
ROA not after:            Thu 05 Mar 2026 07:25:21 +0000
asID:                     265207
IP address blocks:        179.0.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a7:5c:7e:49:2e:e2:3b:79:02:b2:aa:45:70:e7:e0:1a:a1:83:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Mar  6 07:20:21 2025 GMT
            Not After : Mar  5 07:25:21 2026 GMT
        Subject: CN=FB9C7A4CD182704F12331326C54B5351CF578483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:7c:23:27:f6:42:47:50:e5:a7:f8:0b:c5:
                    d0:68:06:c4:4e:21:ed:40:65:e5:70:a0:6f:40:cc:
                    c0:11:cb:66:f5:e9:a9:a2:ff:bc:ba:ab:91:25:32:
                    df:1e:94:0a:c8:25:18:e6:8b:1f:1c:8c:b9:c9:b4:
                    f0:3f:7a:89:9f:8f:36:b3:af:1e:6f:18:5a:3c:4d:
                    e5:06:80:d7:fe:8c:9c:65:66:e9:b2:d9:d0:d1:eb:
                    da:21:36:82:03:39:21:8d:fd:e9:e0:02:a6:77:89:
                    93:ad:64:94:3d:b8:e2:cb:12:2a:44:d6:5f:9a:e0:
                    c9:e4:69:03:f5:16:55:99:28:e3:03:3a:1d:4e:54:
                    7b:6d:bc:e3:21:0f:f5:ab:b5:f1:7c:58:1a:35:39:
                    2e:f8:6f:6e:99:55:60:40:9a:4f:a1:7b:66:35:5c:
                    35:b8:b8:8a:8a:34:b0:59:1f:b4:05:14:92:be:d3:
                    5a:c2:8d:e3:0b:95:4e:80:ca:f0:ba:d0:dd:e0:03:
                    c4:08:bc:41:f3:42:64:d2:34:e6:61:c3:de:8f:b1:
                    83:df:e0:cd:c1:a9:a1:9f:06:a1:5b:4a:ba:d9:d2:
                    5a:4e:62:31:23:04:c5:6b:47:bc:f4:5c:18:a6:16:
                    48:83:fe:7f:dc:86:df:19:af:61:03:6d:41:0c:6b:
                    a8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9C:7A:4C:D1:82:70:4F:12:33:13:26:C5:4B:53:51:CF:57:84:83
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e37312e302f32342d3234203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:5b:33:de:2a:ea:7f:6e:f2:73:47:38:69:51:70:6f:0e:
         33:44:43:ce:58:71:90:4c:d7:7b:b4:26:bc:d7:41:65:32:dd:
         d8:3c:e3:b1:9b:81:e2:0c:c7:95:1a:22:70:ff:eb:71:7c:13:
         02:da:e3:a9:df:03:e2:10:31:bf:e5:bd:76:1d:80:e2:7c:ef:
         7c:04:b0:91:35:37:9b:c0:66:df:d9:f5:5a:fa:ec:16:dc:f1:
         16:47:6c:96:ad:4f:d1:d7:a9:85:3e:c6:92:bf:f9:95:fc:e5:
         c9:27:f7:72:b5:66:16:db:38:c9:52:9e:2f:cd:a0:18:d7:36:
         55:45:da:16:41:61:c1:dd:5b:91:52:b0:6b:b3:66:07:40:d9:
         75:67:c8:6d:8a:ac:5a:04:06:12:2f:f4:5b:4e:ad:bd:1f:39:
         62:06:fa:cb:42:58:19:6d:ab:04:64:0b:4a:60:a9:58:8f:79:
         5b:a1:5e:53:64:3e:b0:75:47:10:07:60:06:7d:e8:49:61:c2:
         24:bc:43:55:33:c1:43:93:02:9b:8b:c0:10:aa:7f:ea:0a:23:
         65:d2:5a:25:ae:e5:3c:79:fb:56:8b:47:0f:58:b7:12:6f:70:
         bd:9a:b7:12:66:50:cb:0b:e7:af:71:36:e9:12:8a:b2:80:60:
         5f:d2:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:08 2025 by rpki-client