Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3233203d3e20323731373337.roa
File:                     3137392e3132352e31322e302f32322d3233203d3e20323731373337.roa (raw, json)
Hash identifier:          kRCKEkpJBTLHNfqHINcK+/Ec5hm4W6i8J1ILIeBjnXI=
Subject key identifier:   D3:83:4F:4D:F6:1C:04:B7:23:56:A9:E1:18:85:E7:14:3A:0D:0A:F4
Certificate issuer:       /CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
Certificate serial:       755622A8FD3D4C6EEF5E2A242218AC29935ED821
Authority key identifier: 92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3233203d3e20323731373337.roa
Signing time:             Fri 16 May 2025 12:09:49 +0000
ROA not before:           Fri 16 May 2025 12:04:49 +0000
ROA not after:            Fri 15 May 2026 12:09:49 +0000
asID:                     271737
IP address blocks:        179.125.12.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl
                          rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:56:22:a8:fd:3d:4c:6e:ef:5e:2a:24:22:18:ac:29:93:5e:d8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
        Validity
            Not Before: May 16 12:04:49 2025 GMT
            Not After : May 15 12:09:49 2026 GMT
        Subject: CN=D3834F4DF61C04B72356A9E11885E7143A0D0AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:18:0b:49:80:30:c4:3f:87:7b:fb:5a:b7:
                    64:7a:c9:21:dd:ee:ab:11:d0:01:73:ce:76:06:55:
                    e8:03:21:c3:99:9e:1a:82:d4:e0:52:ce:d0:16:69:
                    ff:21:b9:00:53:98:5c:69:98:93:e9:f5:e6:76:6b:
                    89:0f:1f:52:32:f6:43:14:e7:f2:fa:3d:e7:43:98:
                    46:eb:df:e8:bb:37:a9:24:3e:dc:32:60:69:ff:e2:
                    bd:da:fe:66:ab:7d:65:b5:29:91:14:1e:ab:fc:9f:
                    bd:78:fd:3c:f0:b9:66:b4:ce:53:50:bb:49:b0:ef:
                    8f:84:cf:30:70:21:72:b5:01:a3:fa:45:bb:d7:0d:
                    28:82:b7:bd:68:04:fb:88:05:9d:0b:4c:6f:ec:25:
                    78:47:d1:25:b5:f4:d0:64:b6:12:29:d5:1b:a2:b6:
                    ae:28:ba:e6:af:df:9c:f0:34:c6:6e:82:2a:3c:0e:
                    64:d9:7d:c9:f5:78:f4:09:50:a8:be:f7:69:d0:bc:
                    01:47:38:a8:19:d8:c9:e7:1e:93:01:4e:f7:6e:01:
                    af:33:4b:95:37:20:bd:9b:b3:45:5c:4b:18:3b:da:
                    a8:30:4f:3d:02:f2:41:55:ce:b8:e7:b3:6a:9b:15:
                    dd:c5:a4:c6:c3:9c:e3:77:1d:f9:b8:71:25:5f:52:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:83:4F:4D:F6:1C:04:B7:23:56:A9:E1:18:85:E7:14:3A:0D:0A:F4
            X509v3 Authority Key Identifier:
                keyid:92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3233203d3e20323731373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:e3:fc:60:6c:5f:1c:a8:98:52:16:97:23:1c:af:f2:cf:
         0a:c2:05:b6:96:3c:42:c8:3c:2e:86:e2:7f:b0:c4:b4:e1:46:
         46:62:af:ea:b4:18:8f:f2:2f:13:e2:95:db:30:65:53:bc:90:
         bd:ef:0a:d9:7d:3f:15:9a:bf:89:d8:cd:f6:8e:3d:ff:45:b9:
         da:5a:92:d2:b6:58:69:2a:c7:57:6e:e5:08:7e:3c:d6:08:92:
         64:dd:52:f3:62:5a:70:71:43:c2:e4:73:14:c9:37:fb:9a:f7:
         e7:75:35:41:c2:ed:73:20:14:2b:d6:81:f8:d5:1f:c5:58:e5:
         19:70:00:21:ba:a0:90:30:0d:40:d8:3f:f6:6f:7d:79:ac:96:
         eb:3d:76:e1:7e:8a:22:d5:6a:8f:d7:50:22:7d:f6:06:e0:1d:
         2e:52:73:74:6d:db:2e:6b:ec:c7:bf:2a:27:e5:36:8d:b8:7c:
         1c:a7:9d:20:0d:93:ee:24:bb:69:07:eb:ee:d9:a2:6b:49:74:
         a9:5c:5e:ac:1b:e1:a3:1a:f8:a8:e5:9c:7e:4f:f0:d9:20:ad:
         e3:e2:73:ba:50:ba:1f:91:71:5f:c2:3c:3c:79:71:08:53:55:
         af:77:9c:84:79:b7:63:59:6a:61:c2:1a:2f:e9:72:1a:4b:83:
         c2:25:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:41:16 2025 by rpki-client