Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa
File:                     3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa (raw, json)
Hash identifier:          R4g05ADj2/B5Kkb3DZkmE5V9hXOr1rce+DvS4vi3DJc=
Subject key identifier:   64:86:29:65:0F:69:B5:65:01:B4:EB:69:32:B0:0C:E4:74:E3:3A:01
Certificate issuer:       /CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
Certificate serial:       7AC375B855AA3B7AB58D4C3145451044FED60A13
Authority key identifier: 96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa
Signing time:             Sat 07 Jun 2025 13:24:57 +0000
ROA not before:           Sat 07 Jun 2025 13:19:57 +0000
ROA not after:            Sat 06 Jun 2026 13:24:57 +0000
asID:                     267535
IP address blocks:        192.141.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.crl
                          rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 05:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c3:75:b8:55:aa:3b:7a:b5:8d:4c:31:45:45:10:44:fe:d6:0a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
        Validity
            Not Before: Jun  7 13:19:57 2025 GMT
            Not After : Jun  6 13:24:57 2026 GMT
        Subject: CN=648629650F69B56501B4EB6932B00CE474E33A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:c7:ea:3e:58:0c:66:5e:f3:d0:21:0c:9f:
                    ee:59:4c:a5:97:32:3b:69:5b:e0:32:fc:6f:21:68:
                    f7:d3:26:d3:58:fb:2a:3f:ef:2d:52:47:d8:93:71:
                    f5:de:eb:b9:13:92:58:d1:29:7c:13:76:d8:08:ff:
                    e0:7e:d8:a1:db:f3:a1:ed:89:58:cd:ec:30:8e:b3:
                    8a:0a:23:bb:01:f0:58:5a:94:9d:cb:72:4c:36:78:
                    cb:5f:4e:d5:1a:ff:8c:a2:75:52:2f:4b:83:46:f8:
                    55:5e:ad:3f:0e:61:c6:94:07:3a:ec:5d:c6:35:15:
                    99:a8:54:84:e3:47:ad:22:9d:2d:f9:b0:ed:dc:37:
                    de:b5:f1:fd:c5:b4:7c:b8:9c:ed:28:8a:6e:1e:d9:
                    06:6c:73:e2:eb:9b:4f:c1:bd:2c:ac:71:34:c2:b2:
                    68:a0:ab:55:3f:39:0f:1b:fa:c9:aa:d8:be:d0:44:
                    8f:26:a9:ef:55:29:3c:d8:ab:66:60:91:3c:4d:b7:
                    d9:60:9c:ff:18:b1:d7:dd:75:5e:ec:41:50:e3:0c:
                    f4:a7:bd:11:bb:4c:86:99:6b:13:69:de:b7:af:2f:
                    00:38:f2:c6:e3:c6:52:7e:2d:44:c4:01:f2:86:94:
                    df:83:63:f4:85:9f:c2:4b:18:9f:c7:57:57:b4:dd:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:86:29:65:0F:69:B5:65:01:B4:EB:69:32:B0:0C:E4:74:E3:3A:01
            X509v3 Authority Key Identifier:
                keyid:96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:fc:b1:11:19:a1:9c:19:fd:ed:36:d0:76:ff:ca:b4:5d:
         55:57:b4:20:43:3e:44:fe:5f:f1:e1:7a:55:a6:58:1b:6f:a0:
         90:fe:ec:6f:4a:c0:94:89:de:49:ad:8f:b7:e1:ee:e7:15:71:
         7d:b7:17:3f:a1:d5:2d:21:a6:5a:25:f6:9b:29:1f:50:fe:94:
         d9:39:9c:d4:0e:a4:f7:ae:e9:43:a6:67:d8:31:31:6f:d8:18:
         ca:b0:7c:70:01:65:c4:8d:12:aa:94:c2:14:52:c0:7e:64:93:
         b5:40:36:31:90:3e:c2:0c:c3:38:78:1c:d5:b5:40:d1:a5:c1:
         09:57:c0:5f:de:2b:eb:52:41:5b:e5:1d:d1:f2:ad:37:5b:62:
         8a:92:7f:93:5c:e9:6c:5a:6e:ca:91:94:01:4e:bf:6e:1c:d1:
         17:c7:65:ee:2e:6b:b2:c2:7b:c6:25:46:99:2c:9a:cc:5d:a2:
         89:c5:6c:91:f8:6b:af:c3:0d:e2:d2:dd:6c:35:30:ee:93:75:
         f5:75:d8:02:29:f1:92:0f:ae:4f:1b:2e:b8:5c:c8:c4:49:13:
         61:5b:1b:e2:03:2b:03:72:94:7d:5a:eb:f8:77:38:98:68:ad:
         d9:67:15:13:10:37:0d:1d:fc:3f:64:49:c7:81:91:5b:a1:b7:
         b9:ac:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:47 2025 by rpki-client