Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa
File:                     3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa (raw, json)
Hash identifier:          A8kWvaltxYyvbnah0osFRp6KjhjI7+SK/5dGPfcjeoE=
Subject key identifier:   AD:42:1B:F4:F1:7E:2C:27:12:A9:A3:CC:F9:F0:EE:B7:87:7A:70:CF
Certificate issuer:       /CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994
Certificate serial:       3B329A9D4D64DEE47D1DE6EE41492A8D01671E69
Authority key identifier: CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa
Signing time:             Fri 14 Mar 2025 17:16:22 +0000
ROA not before:           Fri 14 Mar 2025 17:11:22 +0000
ROA not after:            Fri 13 Mar 2026 17:16:22 +0000
asID:                     270415
IP address blocks:        190.107.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl
                          rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:32:9a:9d:4d:64:de:e4:7d:1d:e6:ee:41:49:2a:8d:01:67:1e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994
        Validity
            Not Before: Mar 14 17:11:22 2025 GMT
            Not After : Mar 13 17:16:22 2026 GMT
        Subject: CN=AD421BF4F17E2C2712A9A3CCF9F0EEB7877A70CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:2a:42:80:b7:cf:aa:8b:7f:a9:44:f7:c5:
                    6f:33:20:29:07:65:6a:9a:35:bb:04:d3:2f:37:90:
                    ae:1f:96:e1:8d:2f:0c:15:b6:f8:5e:b6:26:be:6e:
                    9e:cf:1f:34:5a:22:3d:51:08:a3:ec:da:f7:d9:ce:
                    64:37:f3:0a:b6:73:65:81:ee:f1:2d:30:9d:64:54:
                    7f:b0:b2:e6:d5:38:51:55:b9:36:1a:2f:e6:7a:3e:
                    a3:6f:33:b9:b3:bf:b7:7a:ae:ce:fa:9e:b9:2d:ec:
                    f9:67:37:cf:95:1e:16:db:97:30:90:b1:3a:2b:78:
                    86:b2:43:ce:0c:ba:16:76:61:f2:75:62:ac:9d:b9:
                    fe:67:44:bd:df:27:56:d1:79:20:3d:f5:fe:f2:8d:
                    6d:9d:a6:80:6b:db:3f:3d:ab:ef:93:7c:da:29:32:
                    52:ce:dd:22:30:c8:3d:36:52:fc:d0:28:3c:5f:2e:
                    cf:44:34:95:b1:b9:10:67:ff:e3:7c:26:4d:69:7c:
                    0b:1a:39:0a:d6:6a:d3:3f:21:e0:55:71:b2:81:07:
                    d3:8b:ed:64:f9:35:ba:b7:11:94:dc:0a:38:5c:be:
                    33:69:db:6f:f0:9d:32:30:8b:93:a8:3d:b7:4f:59:
                    9a:f3:eb:5d:d7:16:5e:b7:63:5b:70:f8:c2:c6:a3:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:1B:F4:F1:7E:2C:27:12:A9:A3:CC:F9:F0:EE:B7:87:7A:70:CF
            X509v3 Authority Key Identifier:
                keyid:CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:b6:84:fb:87:6a:e9:43:fd:e3:29:6c:ed:ef:52:d5:3e:3d:
         8f:87:19:cc:db:a2:58:dc:3a:f4:86:22:44:a5:50:82:f0:05:
         ad:1d:55:66:d5:62:ac:8c:f1:da:fb:12:39:e3:f9:ce:45:0c:
         b5:11:27:bb:a0:a9:25:42:86:fd:03:1e:0e:fc:31:90:7b:59:
         79:3a:1a:cd:be:43:12:85:44:50:dd:d5:e9:bc:2c:2a:7d:50:
         ff:0e:2a:2c:cf:0a:42:a0:2c:17:cc:ec:ff:4f:48:b7:53:3a:
         6b:eb:c7:e2:9d:5e:05:41:ea:3d:d2:d2:ee:60:1f:c1:ef:33:
         4f:05:cd:f3:62:1d:d8:f0:f9:fc:3e:bc:34:27:9f:70:7f:98:
         56:61:0c:79:c9:f7:41:c7:67:06:e3:ac:7b:30:0c:f5:86:38:
         c4:c1:7e:0a:47:35:b8:8f:04:c5:fa:92:b3:ff:25:52:81:f6:
         2d:2a:62:20:80:5c:2e:da:5a:48:78:4a:e1:01:1e:b5:5e:d8:
         69:d3:d9:a2:11:13:8a:6d:e8:80:ed:5b:8c:00:70:1a:73:ca:
         7c:95:f0:2c:85:f4:39:c4:25:aa:fa:15:f2:7d:7f:23:d3:20:
         64:bc:89:3e:0f:f3:68:d0:15:04:cd:6d:20:1d:b3:16:17:e2:
         bf:88:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:29:08 2025 by rpki-client