Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa
File:                     3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa (raw, json)
Hash identifier:          e9ESsdTyS0LFijhxeYv6Whe7n0BbVTQAbU9lQbx2wt4=
Subject key identifier:   19:22:51:47:C0:03:98:CC:99:2D:86:9F:46:C4:F0:22:D5:FA:F8:D1
Certificate issuer:       /CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
Certificate serial:       455F11164DE3DB5D0AA6EEBC3CC22984883D647C
Authority key identifier: C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa
Signing time:             Wed 21 May 2025 21:42:28 +0000
ROA not before:           Wed 21 May 2025 21:37:28 +0000
ROA not after:            Wed 20 May 2026 21:42:28 +0000
asID:                     263515
IP address blocks:        191.243.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5f:11:16:4d:e3:db:5d:0a:a6:ee:bc:3c:c2:29:84:88:3d:64:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
        Validity
            Not Before: May 21 21:37:28 2025 GMT
            Not After : May 20 21:42:28 2026 GMT
        Subject: CN=19225147C00398CC992D869F46C4F022D5FAF8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:20:9e:04:f5:12:0e:44:83:e6:ad:f4:64:
                    32:ad:c8:df:bc:32:b6:f2:8c:ff:12:2d:f5:f9:d8:
                    e1:bd:e6:22:08:ac:61:f1:db:28:88:d8:2e:9c:b8:
                    4f:5b:52:a4:04:57:14:72:9d:dd:34:88:b6:8e:05:
                    92:35:af:f2:e1:76:9b:04:5d:38:0d:1e:c1:b7:7e:
                    67:c2:a9:39:44:d1:f8:82:e4:3d:27:00:42:c9:be:
                    18:7f:a5:88:88:28:26:ad:11:1f:53:e5:25:fe:3e:
                    c7:24:04:1d:68:30:90:7f:01:f4:ff:3d:8d:b7:36:
                    e3:84:4d:80:ae:2f:cd:0b:b8:f3:e8:d1:5b:f7:e1:
                    94:12:7f:df:99:0f:02:fc:a5:20:aa:c4:f2:a3:01:
                    25:c9:92:d8:44:27:95:57:31:fb:2d:88:be:27:7d:
                    6a:ea:8b:46:5b:08:66:e0:17:5c:29:78:a5:d5:f9:
                    a3:aa:68:20:c6:34:ab:95:2e:43:11:fc:85:7a:b8:
                    2e:5c:03:fe:f7:3d:c2:83:b9:73:97:73:b8:23:38:
                    0d:67:05:6b:f6:8a:9a:ec:27:3c:4e:12:b1:ac:55:
                    84:49:b6:08:26:d9:90:dd:72:e5:7d:1c:eb:6a:23:
                    cf:95:4a:70:e7:0a:84:e5:72:34:e5:16:15:bf:c4:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:22:51:47:C0:03:98:CC:99:2D:86:9F:46:C4:F0:22:D5:FA:F8:D1
            X509v3 Authority Key Identifier:
                keyid:C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:c8:a7:77:95:ac:bb:b2:1d:ea:52:96:c2:d0:fc:48:2b:0c:
         6e:46:a3:bc:94:96:35:a3:dc:fa:d9:8c:49:ce:a9:20:c8:b9:
         82:34:81:c6:4b:11:74:1e:3d:be:1b:b7:77:67:2f:0f:44:4f:
         09:83:b1:d8:74:c1:77:22:97:f4:a3:0f:15:b0:96:be:2a:e0:
         64:dd:31:55:cd:aa:2e:57:2b:88:69:f6:30:cb:ee:8a:2f:43:
         21:24:c2:f6:41:8d:05:b2:e4:6c:44:a4:83:64:25:ab:82:da:
         92:16:8e:15:33:e7:e4:4f:a2:5d:1d:30:a4:db:ae:d2:f7:93:
         61:21:4b:ec:3f:91:77:b7:2e:43:0e:3a:fb:59:e2:b6:44:9e:
         fa:7c:2d:32:d2:46:b3:f4:1f:eb:a0:a1:df:46:b7:39:66:03:
         22:e5:7c:9d:a3:a7:85:49:c0:b4:8f:55:ed:3a:63:21:29:84:
         ad:af:d6:b7:c8:9b:bf:65:c7:0e:9f:09:d8:dd:81:ad:61:96:
         ed:5a:4a:17:1d:74:d9:53:8f:a1:90:ab:81:79:17:87:8c:e6:
         68:58:4c:82:9c:6d:94:71:f7:71:13:62:25:c3:74:fe:e4:92:
         38:f8:15:53:ad:aa:aa:cc:67:e3:ba:31:50:c4:bc:a1:0e:8e:
         1b:cf:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:16:52 2025 by rpki-client