Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa
File:                     3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa (raw, json)
Hash identifier:          OQMFVFlCBQaJcmX3OLiFQVykH4rikTK3R7sYQdJq3KI=
Subject key identifier:   57:9D:EA:85:BF:FF:31:D0:C4:7C:D7:33:46:06:5B:53:BC:64:AA:C4
Certificate issuer:       /CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
Certificate serial:       6CBC7898D84E80CBDB2119776AC1D6B4D367161B
Authority key identifier: E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa
Signing time:             Tue 20 May 2025 14:13:51 +0000
ROA not before:           Tue 20 May 2025 14:08:51 +0000
ROA not after:            Tue 19 May 2026 14:13:51 +0000
asID:                     271566
IP address blocks:        179.63.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl
                          rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bc:78:98:d8:4e:80:cb:db:21:19:77:6a:c1:d6:b4:d3:67:16:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
        Validity
            Not Before: May 20 14:08:51 2025 GMT
            Not After : May 19 14:13:51 2026 GMT
        Subject: CN=579DEA85BFFF31D0C47CD73346065B53BC64AAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:d4:66:c7:c1:8c:12:6c:3c:9e:15:55:1f:
                    45:de:82:e3:f1:fe:1d:12:79:49:b2:45:1c:3a:7a:
                    ee:cc:f1:0b:5b:9e:b0:fc:ea:8b:db:b7:26:f7:13:
                    1e:cb:c8:d2:65:2a:3a:b4:1f:85:27:9b:30:56:4f:
                    67:60:76:90:cc:a8:78:4e:4a:c1:c1:5d:11:8d:83:
                    26:c7:a0:50:9a:f1:1a:d5:23:a6:1f:7d:1b:a1:6d:
                    66:62:e8:a6:f8:cd:a9:8b:1c:80:82:7b:50:22:28:
                    04:2c:86:c6:ed:fe:b0:6f:3e:4c:67:a7:23:3e:d0:
                    75:5a:7d:8d:79:25:97:a6:6b:13:74:f7:d5:85:3d:
                    dd:4b:b6:77:0a:98:b6:22:bf:bd:e6:07:34:fa:f8:
                    c9:0c:d8:a9:25:39:ee:83:6b:2d:6e:3d:4c:c6:68:
                    1c:dc:28:bc:04:4e:7e:db:53:b8:ca:e4:b1:4e:11:
                    64:92:d6:07:20:dc:7a:ef:5a:86:d4:3d:71:ad:65:
                    b2:17:36:c9:8c:ff:e8:4e:0d:1d:90:47:fc:1c:93:
                    0d:90:5c:e8:f7:15:5b:7d:8b:90:6c:dd:02:6a:c8:
                    7d:be:0c:2c:d0:2e:08:1e:3b:b8:3c:17:92:bf:51:
                    d9:a3:6c:28:35:cd:27:eb:8c:79:b3:21:80:48:35:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:EA:85:BF:FF:31:D0:C4:7C:D7:33:46:06:5B:53:BC:64:AA:C4
            X509v3 Authority Key Identifier:
                keyid:E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9c:a0:12:69:d2:66:7f:56:10:63:f6:7c:05:c0:f2:c0:a5:
         06:2e:be:e4:91:23:13:c3:fb:cf:c3:57:ab:fd:7a:cc:03:93:
         35:9a:fe:fd:5e:86:1d:02:ee:8f:e0:40:14:12:e6:92:46:8c:
         6c:c1:59:9e:39:36:10:23:21:b7:3d:95:fb:aa:a5:6f:03:b2:
         40:b3:b8:22:01:4a:d1:1d:d2:71:8c:1a:ce:79:e2:fb:1e:f5:
         16:0e:4e:c9:e0:45:c5:0c:70:57:40:8c:ba:2d:80:b3:da:46:
         ed:7b:a6:cf:34:58:3d:4e:52:89:31:8e:6e:ef:d7:2d:94:dc:
         b2:55:7b:65:0a:dd:9f:6b:68:7d:03:66:98:60:1b:f1:3a:1f:
         a5:ba:91:dc:ec:47:a7:f1:37:a3:2e:95:fd:e9:4d:ac:7b:2a:
         02:cd:cc:fa:d1:3e:6a:a7:53:52:a5:e9:15:ba:a1:86:b4:0c:
         1a:29:44:9e:3e:3f:7c:f2:23:cc:4d:c9:42:77:c8:74:b0:f9:
         5a:57:8f:ec:70:70:d5:be:a0:57:f3:85:68:c0:54:0c:95:2c:
         c6:61:26:92:8a:f6:af:0b:50:d9:b1:a4:54:89:31:89:55:20:
         00:96:71:79:3f:4f:d8:08:58:36:c5:b9:56:4b:2c:b1:9f:6a:
         14:74:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:36:52 2025 by rpki-client