Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa
File:                     3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa (raw, json)
Hash identifier:          8oq04i3pA443+kSEWIJtHUIMF79Y9W1QbdjrMhXy3Ic=
Subject key identifier:   30:D9:1A:D5:AA:3C:1F:EB:FF:8B:AA:AC:BC:3C:39:2A:F1:C2:41:CB
Certificate issuer:       /CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
Certificate serial:       690052DCD5E0EB86E060BE1033136D579817449D
Authority key identifier: C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa
Signing time:             Wed 21 May 2025 21:42:28 +0000
ROA not before:           Wed 21 May 2025 21:37:28 +0000
ROA not after:            Wed 20 May 2026 21:42:28 +0000
asID:                     263515
IP address blocks:        191.243.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:00:52:dc:d5:e0:eb:86:e0:60:be:10:33:13:6d:57:98:17:44:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
        Validity
            Not Before: May 21 21:37:28 2025 GMT
            Not After : May 20 21:42:28 2026 GMT
        Subject: CN=30D91AD5AA3C1FEBFF8BAAACBC3C392AF1C241CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:1c:f0:66:3a:a4:dd:1f:b3:74:69:04:7f:
                    8b:14:81:9d:9f:69:a4:28:9a:8f:54:34:63:0c:75:
                    80:2b:dd:a6:2f:56:6b:35:e1:f0:a4:28:f4:df:60:
                    32:87:a0:77:98:bd:41:38:01:82:a6:5a:26:8d:64:
                    2c:04:19:45:e0:4f:c0:44:7f:ae:01:15:94:f4:a6:
                    3c:85:8a:52:3f:4d:6e:50:42:2a:3f:79:89:a7:57:
                    96:02:3e:2c:d8:e7:f8:e2:29:48:9b:90:29:6b:f3:
                    40:bc:73:b8:92:80:ee:5b:a2:3a:72:f0:36:e7:5f:
                    95:6c:d4:bb:f1:4e:de:13:83:bb:6e:f2:ca:09:85:
                    c5:26:40:e4:83:b7:4c:43:6a:46:54:39:db:d1:9e:
                    6b:12:7b:d3:1f:4c:c1:fb:81:d6:88:76:36:bb:a3:
                    93:cf:16:f1:43:b9:9e:21:85:2e:f4:8d:e6:fe:16:
                    07:1e:42:b7:d4:80:f6:0d:34:5a:52:b7:5f:a1:15:
                    ae:2d:5a:1e:58:a5:67:a8:4d:8e:dd:ac:6d:d3:fa:
                    53:f3:9b:84:c9:d0:61:df:c2:8c:25:fc:56:a3:12:
                    f7:63:7a:02:b9:81:22:d6:a1:bb:03:65:63:6c:ac:
                    f9:c6:dd:3c:c6:f3:c2:ca:45:90:28:5d:10:28:94:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D9:1A:D5:AA:3C:1F:EB:FF:8B:AA:AC:BC:3C:39:2A:F1:C2:41:CB
            X509v3 Authority Key Identifier:
                keyid:C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:b2:10:ab:1f:a6:4c:0e:3c:f3:c9:1c:01:b8:56:df:bc:e5:
         c4:e8:04:86:42:cd:ca:d8:b6:b6:77:74:5d:dc:4c:b3:d1:8b:
         a2:c2:04:8c:af:03:89:2e:cb:1b:a0:86:4d:07:83:06:dd:8c:
         57:e3:dc:23:14:25:f0:b4:fb:04:80:46:7a:86:3f:f8:5b:85:
         0b:ea:81:b9:af:49:bb:5f:87:04:ee:98:cc:87:3e:1b:83:e7:
         63:23:71:3f:87:b1:a5:33:84:df:fe:cd:76:af:31:27:d6:34:
         9b:83:05:0f:8a:e3:d0:b4:46:24:af:23:74:b3:de:98:43:1a:
         2c:56:af:0c:ea:a3:0d:a4:07:fd:b7:c8:d8:e2:3a:4c:9c:b6:
         8b:7a:e3:f1:1d:b5:8f:ca:a0:2a:86:60:01:d3:1b:89:6d:d0:
         d2:0e:f3:2b:06:e9:00:c4:4a:4c:79:f4:3d:bf:dc:62:4e:4f:
         a8:96:6a:b1:6d:fa:09:00:b7:61:0d:f8:2b:67:be:27:7d:3d:
         01:55:aa:86:c4:10:b1:56:f2:fc:c5:74:ad:72:9c:1b:08:19:
         a7:e4:40:d5:23:9e:09:b8:08:f2:b2:50:c1:24:6e:42:8c:8c:
         82:08:ca:91:58:8d:7e:89:1e:e5:95:37:04:65:61:11:3d:96:
         c9:cb:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:23:30 2025 by rpki-client