Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31352e302f32342d3234203d3e20323731373337.roa
File:                     3137392e3132352e31352e302f32342d3234203d3e20323731373337.roa (raw, json)
Hash identifier:          109+6a0KjvZr4EW1aW+rgy2jffEwP5VN0UUsqWM1D2k=
Subject key identifier:   F0:84:01:AF:5D:CF:0F:51:72:CD:5E:DF:DE:DE:F1:03:EA:37:3C:C6
Certificate issuer:       /CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
Certificate serial:       6E3B59C5C45DD74E97300F33143A19BB285BBF83
Authority key identifier: 92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31352e302f32342d3234203d3e20323731373337.roa
Signing time:             Fri 16 May 2025 12:10:59 +0000
ROA not before:           Fri 16 May 2025 12:05:59 +0000
ROA not after:            Fri 15 May 2026 12:10:59 +0000
asID:                     271737
IP address blocks:        179.125.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl
                          rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 07:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3b:59:c5:c4:5d:d7:4e:97:30:0f:33:14:3a:19:bb:28:5b:bf:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
        Validity
            Not Before: May 16 12:05:59 2025 GMT
            Not After : May 15 12:10:59 2026 GMT
        Subject: CN=F08401AF5DCF0F5172CD5EDFDEDEF103EA373CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:fa:ee:e3:9f:2a:d8:07:4e:e0:5f:bf:89:
                    0a:38:99:70:dd:d9:13:fd:e9:4c:ef:fb:83:f0:f0:
                    03:b3:b5:5f:44:d8:e7:90:dc:b0:17:5e:de:9d:6a:
                    2d:63:77:98:67:07:2b:97:44:07:ac:1b:08:e3:a8:
                    63:6f:dc:c0:2b:1f:d9:4e:e2:c8:8a:70:b7:05:0f:
                    57:76:e1:b1:11:2f:79:7c:73:36:2c:4e:35:cc:94:
                    68:8c:ab:8a:48:15:d3:cb:b4:3f:33:bc:e8:28:b8:
                    fe:44:f7:61:72:bd:59:69:90:f6:b0:2f:25:ef:71:
                    3f:70:d1:ae:f1:a2:9f:f3:49:d5:2a:b1:70:ef:c2:
                    83:df:ca:d2:5b:0f:cb:0d:4a:00:e2:c4:bc:48:3a:
                    a8:ee:cb:e8:24:97:52:c0:f1:d5:81:cf:17:ab:02:
                    bf:e2:2d:1c:7e:da:b0:31:b1:54:f6:fc:5b:c4:65:
                    35:5f:99:cd:ff:9e:e2:a5:e7:a4:5a:5e:68:bf:a3:
                    b8:2a:76:27:6c:04:d3:44:03:87:83:42:36:b0:13:
                    1f:53:d4:10:d4:9d:ba:6f:18:b1:a2:7e:36:34:0f:
                    aa:c1:fc:32:82:fb:5a:75:3e:04:58:e1:9f:d5:2c:
                    63:e3:2b:55:28:78:55:7a:61:e1:6e:a6:7f:0b:21:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:84:01:AF:5D:CF:0F:51:72:CD:5E:DF:DE:DE:F1:03:EA:37:3C:C6
            X509v3 Authority Key Identifier:
                keyid:92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31352e302f32342d3234203d3e20323731373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2c:3d:09:76:c9:06:5d:11:97:b1:2e:f6:e5:2d:e6:ad:86:
         7d:ae:c5:76:c0:a9:be:f6:6f:e9:0f:44:bb:30:98:c6:7f:1d:
         7a:5a:5f:f0:8e:30:d6:2c:7d:58:83:15:1a:89:37:60:5c:84:
         2c:9c:df:40:ca:44:c0:df:e2:28:9a:61:34:35:42:66:0c:b9:
         15:6c:30:4a:9b:82:90:c4:eb:d4:f2:7e:09:3c:5f:04:55:1c:
         42:a2:52:25:a4:20:ba:fb:ae:d2:aa:eb:28:38:06:d8:8d:1a:
         3c:e6:4e:8e:d5:7a:28:e3:0c:70:29:d0:32:8a:84:33:26:92:
         d4:0c:ce:02:7d:82:0a:8e:48:ef:28:67:95:4d:f3:69:a4:f0:
         7b:7c:fc:b4:96:4e:4f:e1:1c:ca:a3:68:62:01:df:a5:08:2a:
         71:89:97:7d:95:49:a0:82:03:9b:3c:40:e8:9d:6b:07:0e:09:
         11:9a:6c:4a:05:05:42:ff:b9:7d:bb:06:e3:65:d7:8b:ec:f4:
         94:f9:0e:b8:9f:72:d2:2b:c1:58:12:70:b4:69:89:be:92:f4:
         c9:10:ef:97:b2:37:45:1e:b6:be:58:6e:2f:55:19:49:2c:24:
         f7:2e:96:54:1f:27:17:17:00:61:23:c6:3e:50:2a:f0:33:46:
         f9:0e:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:09:25 2025 by rpki-client