Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3137392e39362e3134342e302f32302d3332203d3e203238363334.roa
File:                     3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (raw, json)
Hash identifier:          rSPI8oEusC7WuxESqvOdBN/aubwtRxI6CeNya94CYSg=
Subject key identifier:   9F:77:91:60:E1:08:DD:DD:50:2D:A2:B9:02:35:3A:8D:29:82:15:47
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       234E0486D7084B34E47BF0895BD850079B5E648C
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3137392e39362e3134342e302f32302d3332203d3e203238363334.roa
Signing time:             Thu 06 Mar 2025 08:18:50 +0000
ROA not before:           Thu 06 Mar 2025 08:13:50 +0000
ROA not after:            Thu 05 Mar 2026 08:18:50 +0000
asID:                     28634
IP address blocks:        179.96.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4e:04:86:d7:08:4b:34:e4:7b:f0:89:5b:d8:50:07:9b:5e:64:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Mar  6 08:13:50 2025 GMT
            Not After : Mar  5 08:18:50 2026 GMT
        Subject: CN=9F779160E108DDDD502DA2B902353A8D29821547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:a9:ed:6c:f1:34:90:6b:24:08:d2:19:32:
                    a6:f1:41:a1:60:27:be:25:99:2a:1b:39:94:e4:58:
                    33:ca:5a:96:6b:bc:68:d0:2b:f8:86:36:63:41:cd:
                    ca:98:31:4f:9f:a8:72:13:57:94:6f:2b:9e:3c:c3:
                    9a:3f:29:3f:c2:25:63:43:93:e8:ed:a4:32:ef:88:
                    fb:b8:cf:de:8b:7c:b9:0c:d2:70:73:4b:0f:2c:e9:
                    f2:20:71:2f:a2:d2:ff:38:36:1e:12:22:8e:a1:7f:
                    0e:58:a8:5c:fe:94:14:52:82:9b:3d:07:34:b4:ec:
                    d7:6d:aa:88:10:d7:f5:1c:ca:0e:ba:d1:d8:cf:56:
                    27:41:0a:bf:c7:fd:15:f5:13:f2:fd:ed:7c:b0:a6:
                    21:29:57:5f:46:d6:3f:ef:04:83:7b:b3:f8:03:7a:
                    60:f1:95:7a:24:98:cd:bd:0d:4a:6e:e0:49:46:e4:
                    f5:9f:b7:3a:e4:3b:92:c5:15:24:76:ce:af:99:12:
                    de:f3:d0:df:6f:c9:68:e6:25:fd:db:92:98:19:11:
                    61:96:1d:94:d3:c5:63:7a:4a:78:4c:78:ff:42:9d:
                    ce:74:04:5e:4d:a0:62:8b:41:42:ff:7b:49:6c:60:
                    ec:07:35:a9:93:32:8e:9e:63:29:02:74:99:99:a8:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:77:91:60:E1:08:DD:DD:50:2D:A2:B9:02:35:3A:8D:29:82:15:47
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3137392e39362e3134342e302f32302d3332203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:6b:cc:15:46:28:be:f1:11:51:d4:f2:43:9f:27:bd:d5:
         9a:89:a3:76:9d:65:16:1e:17:99:c2:37:2c:34:f8:52:d0:91:
         f9:d9:b9:26:cf:3e:bb:32:d8:7e:e7:61:b4:03:b6:67:66:83:
         71:36:45:3b:99:64:f5:47:c3:1e:e6:53:3d:a1:75:37:fd:8b:
         ea:2c:be:aa:85:0b:b7:78:88:0a:7e:3a:bf:08:56:cb:cd:67:
         72:41:b1:8b:63:03:fe:84:25:b8:89:26:d2:df:fc:55:43:9b:
         94:8a:5a:da:67:8a:1e:59:94:c3:3b:74:ce:35:98:0f:fc:93:
         2c:38:ac:41:9c:91:ec:50:55:71:bf:74:9b:9d:7d:f4:b1:bc:
         06:f1:33:5b:d8:d2:5f:db:14:67:78:5a:75:41:05:06:29:ec:
         3b:33:7b:c9:ae:0c:e7:51:3e:49:0f:38:de:c5:43:50:32:79:
         19:b6:4d:41:20:cc:20:c5:eb:6c:63:ed:49:93:65:c2:5c:1f:
         c0:4f:c6:7d:8b:35:cf:4b:ce:d8:7d:de:9a:eb:dd:f0:4a:0f:
         8a:2d:18:e1:26:95:e5:0e:b9:56:17:07:fb:8a:8f:15:c8:f9:
         82:27:9f:fd:81:ba:bc:12:6e:af:4a:ec:2a:a5:85:3d:bd:d1:
         a0:45:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:28:33 2025 by rpki-client