Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa
File:                     3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa (raw, json)
Hash identifier:          vZGBQlqLGgKZSpier2taKaZwqllhse7GRGN7XT2pQzs=
Subject key identifier:   EB:CF:77:CA:D6:9A:2D:BB:DF:A3:A6:45:DE:23:CD:25:AD:7A:D0:1B
Certificate issuer:       /CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
Certificate serial:       1EEE9B4FD74E9C0053DD85B79D1D424268E2881C
Authority key identifier: C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa
Signing time:             Wed 19 Jun 2024 21:25:38 +0000
ROA not before:           Wed 19 Jun 2024 21:20:38 +0000
ROA not after:            Wed 18 Jun 2025 21:25:38 +0000
asID:                     263515
IP address blocks:        191.243.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ee:9b:4f:d7:4e:9c:00:53:dd:85:b7:9d:1d:42:42:68:e2:88:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
        Validity
            Not Before: Jun 19 21:20:38 2024 GMT
            Not After : Jun 18 21:25:38 2025 GMT
        Subject: CN=EBCF77CAD69A2DBBDFA3A645DE23CD25AD7AD01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:b3:39:61:29:45:1d:12:0d:cf:28:dc:66:
                    4c:69:0b:d9:46:5c:49:30:cc:98:52:93:36:5f:3a:
                    41:ff:a2:21:cb:01:c6:6a:ef:70:4b:ef:db:eb:2e:
                    56:3a:cf:f0:01:24:bb:6b:63:7e:81:9d:32:98:62:
                    b0:51:53:5f:4c:32:05:e0:1c:14:e9:6f:0c:35:7a:
                    db:a8:9b:03:e5:87:67:d0:f3:2d:9d:6f:82:91:2e:
                    63:ee:4a:34:de:b6:29:20:4a:5d:5e:b2:17:ba:d0:
                    d7:36:8e:ea:ca:21:8d:c4:a0:4a:c8:18:b8:ad:da:
                    ea:76:be:e4:32:ba:ed:dc:df:35:ba:2e:17:af:a0:
                    3b:32:8a:4c:da:a4:fd:77:44:28:e2:de:ba:fc:b6:
                    2c:fe:19:35:83:63:37:74:a0:ad:74:a6:36:4c:86:
                    9d:c1:b6:b3:18:46:a8:79:a8:a1:9f:b9:61:8a:87:
                    b4:d0:18:8a:b0:65:b7:7b:07:61:53:b4:71:a0:e2:
                    d9:92:1a:a6:4a:46:16:1b:07:87:ad:58:91:ea:1a:
                    01:c8:de:d2:f9:c9:c1:fb:8d:4c:7e:aa:9d:de:70:
                    38:63:2c:73:8f:2f:86:40:d4:c5:c1:47:c9:0b:f4:
                    6a:33:80:f3:b3:8d:78:ac:85:b3:e3:46:9a:c5:01:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CF:77:CA:D6:9A:2D:BB:DF:A3:A6:45:DE:23:CD:25:AD:7A:D0:1B
            X509v3 Authority Key Identifier:
                keyid:C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:18:bf:5d:93:36:b5:18:45:19:ed:61:31:37:c8:a3:aa:16:
         bd:5e:a3:85:ff:7b:48:a1:3f:31:d8:97:2b:cd:cf:55:91:63:
         68:c6:7f:b8:0f:aa:dc:32:51:f1:5d:3c:06:ae:79:c8:f0:18:
         ed:67:32:a3:19:51:5e:31:41:3a:93:5c:a7:8a:60:b4:ce:4c:
         4b:75:61:73:c0:fa:9d:7f:1f:7b:b3:cc:86:06:d9:97:1d:f9:
         7d:c3:50:58:79:46:fb:c8:10:c2:53:b4:07:0b:b0:71:b1:67:
         df:df:84:c7:14:16:06:0b:8a:1e:c8:e2:d1:e8:78:1d:70:dd:
         38:f7:4f:ad:4b:dd:8c:b2:cf:18:4a:8e:08:09:bd:45:0d:59:
         3b:2b:85:79:a2:bf:5d:6b:a6:58:4c:a4:ca:3a:65:d6:87:6a:
         cd:24:fa:b5:6f:b4:a3:a2:7f:89:c7:ef:bc:1b:eb:35:a5:87:
         90:83:b2:52:bb:c8:62:41:43:ab:51:ed:c4:94:5a:c4:c3:a1:
         c8:e0:01:35:0d:4c:0a:f1:12:4b:2f:41:95:35:f7:99:e8:9b:
         ce:ca:fe:1e:01:11:d9:0b:5b:0c:c7:97:ca:e6:7c:46:44:76:
         0b:6e:b2:8a:9b:e8:58:a2:2e:9f:93:84:a8:ba:db:50:90:64:
         54:2a:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:31 2025 by rpki-client