Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa
File:                     3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (raw, json)
Hash identifier:          KlULxHMxyBYgHOWDvr82ep/Pt0PmGQBYgR+pKvkMFlE=
Subject key identifier:   C6:41:E2:3F:A1:8B:CE:DF:A4:76:B9:A4:1A:A1:FA:2A:2A:17:58:F4
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       652997EE97501FC4EB7CBA3B3BB97E31BE263D58
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa
Signing time:             Wed 16 Apr 2025 10:35:45 +0000
ROA not before:           Wed 16 Apr 2025 10:30:45 +0000
ROA not after:            Wed 15 Apr 2026 10:35:45 +0000
asID:                     263509
IP address blocks:        191.243.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:29:97:ee:97:50:1f:c4:eb:7c:ba:3b:3b:b9:7e:31:be:26:3d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Apr 16 10:30:45 2025 GMT
            Not After : Apr 15 10:35:45 2026 GMT
        Subject: CN=C641E23FA18BCEDFA476B9A41AA1FA2A2A1758F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:71:b8:f5:46:1e:2a:c6:c8:d5:8c:7b:f4:
                    3c:ca:94:1f:ec:cb:00:54:44:b5:b1:58:4e:f5:35:
                    e7:6a:23:90:fe:bf:54:45:75:49:8d:1e:90:04:5d:
                    cf:b2:62:db:da:ed:7a:b2:94:d8:0e:3a:b4:39:25:
                    ed:b8:3f:d8:ec:76:db:49:59:59:a4:8f:16:f0:3c:
                    11:32:4b:bd:f9:7c:92:0a:b2:f4:1f:f8:58:4a:c4:
                    18:73:ed:70:3f:4e:15:00:b8:76:7b:6d:93:7c:88:
                    bf:78:02:61:c2:02:f0:99:4f:1b:9b:79:f3:7c:95:
                    65:dc:f8:5a:9d:41:c0:1d:c9:9e:0c:00:6a:b3:19:
                    1e:96:c1:c1:60:fc:07:51:ec:18:b9:49:27:67:84:
                    3b:1c:55:2e:d6:c6:67:12:ae:dc:9f:68:3b:13:26:
                    cc:41:b0:29:ed:81:e2:60:99:76:9b:29:88:c1:8d:
                    9e:d3:6b:9a:01:8a:aa:3d:e1:cc:1c:20:ca:21:89:
                    fe:9a:14:18:eb:5d:67:4a:d9:a6:13:40:1f:57:7e:
                    bd:07:25:41:52:3f:30:aa:0a:a3:81:6b:b2:55:01:
                    26:e9:ba:62:f0:64:08:f9:dd:29:33:e7:83:20:c0:
                    65:48:ae:0f:fd:0b:51:dd:08:a9:02:bf:36:4e:e9:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:41:E2:3F:A1:8B:CE:DF:A4:76:B9:A4:1A:A1:FA:2A:2A:17:58:F4
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:19:6a:40:c1:f5:e8:02:90:c2:af:99:59:e3:09:a1:ce:34:
         c7:9a:3e:3f:4d:4f:73:a2:25:ba:cb:2e:16:59:6b:93:34:5c:
         dc:8c:28:a9:98:c5:57:c5:55:b1:73:79:dc:d5:c7:cc:6f:02:
         5e:08:bf:4f:15:0f:69:4a:f6:8d:8d:9e:de:0a:45:ae:32:dd:
         e7:cd:b3:76:7f:d7:fc:83:7a:78:b3:a0:e5:27:89:e4:44:3e:
         4d:a9:0a:fd:76:e7:d5:0d:0a:59:94:ab:be:b1:6d:a2:df:06:
         b3:08:ea:b1:9e:a4:b8:6f:37:03:64:d9:dc:fa:88:8f:07:eb:
         72:61:6a:cd:50:c6:ca:25:81:b2:29:b0:70:2b:34:21:ed:7f:
         63:82:f2:44:3f:1a:8a:d7:09:e0:9c:51:24:01:b1:db:14:ac:
         ca:34:ea:e8:81:a6:48:39:0a:eb:3f:55:11:79:13:e3:6a:ac:
         35:6d:fc:23:9b:c7:c1:dd:11:b9:de:b7:48:26:c5:7e:11:5a:
         dd:b0:a9:d7:de:f4:89:0d:c1:cd:66:15:cf:90:8e:84:29:bc:
         7b:33:e4:11:7e:20:16:22:70:e3:d0:4f:89:b3:4d:5e:01:ee:
         69:82:15:24:2f:af:19:13:92:f0:be:b1:1e:cd:89:26:b0:26:
         c6:bb:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:28:03 2025 by rpki-client