Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa
File:                     3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (raw, json)
Hash identifier:          gEKEaIZuFtCa2m15vfxLEmbSM0J0ycpP6AHITuG0TkU=
Subject key identifier:   A7:72:7D:D4:9F:56:DE:A7:26:A3:C3:7E:2C:26:FD:B1:75:18:EF:9D
Certificate issuer:       /CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88
Certificate serial:       386CC87A9B063381B6066D7A67410E16D45A25E9
Authority key identifier: DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa
Signing time:             Fri 04 Apr 2025 19:15:46 +0000
ROA not before:           Fri 04 Apr 2025 19:10:46 +0000
ROA not after:            Fri 03 Apr 2026 19:15:46 +0000
asID:                     270428
IP address blocks:        190.111.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl
                          rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 23:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6c:c8:7a:9b:06:33:81:b6:06:6d:7a:67:41:0e:16:d4:5a:25:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88
        Validity
            Not Before: Apr  4 19:10:46 2025 GMT
            Not After : Apr  3 19:15:46 2026 GMT
        Subject: CN=A7727DD49F56DEA726A3C37E2C26FDB17518EF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:57:cc:d0:f2:11:14:eb:46:f9:7c:56:2f:
                    0c:e8:b7:08:39:87:22:74:1c:de:f1:44:af:0d:e8:
                    05:a2:28:28:c7:b0:78:29:ce:15:ed:12:33:54:58:
                    5c:f7:72:85:ac:73:e2:24:7d:37:43:65:a0:b9:d2:
                    75:33:ae:1a:a3:a6:60:94:a1:f0:12:a5:37:40:88:
                    de:17:20:f4:41:12:36:14:2f:9d:af:36:6c:6a:12:
                    32:9b:d2:cb:e1:8f:9d:15:00:71:32:1e:34:95:d2:
                    33:70:63:67:3f:e6:08:b3:67:cb:57:8f:66:60:6a:
                    ed:78:a4:90:31:fb:ff:ef:4c:99:98:c3:61:ab:56:
                    2b:e1:2a:25:8d:42:ba:24:5e:ba:ec:4f:a5:e4:88:
                    49:42:67:a0:f2:f6:fc:19:17:81:94:d1:f7:d4:e8:
                    2f:f1:05:3c:7b:85:d9:63:62:f4:d7:b5:b0:a0:b9:
                    81:42:4a:93:76:a7:32:9d:bc:8e:52:97:48:82:0c:
                    cf:bf:1b:ed:20:03:dd:5f:5b:d4:af:4f:02:fa:b4:
                    bc:0e:e0:56:bb:c5:ed:e1:58:78:d5:ee:cd:11:c3:
                    1f:94:6f:c7:76:14:9a:4e:e3:99:06:ce:01:05:01:
                    11:92:02:f1:1a:1e:18:1e:62:ef:75:75:84:39:cc:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:72:7D:D4:9F:56:DE:A7:26:A3:C3:7E:2C:26:FD:B1:75:18:EF:9D
            X509v3 Authority Key Identifier:
                keyid:DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:14:f3:40:83:04:44:33:af:08:34:40:c7:65:1d:07:70:
         06:dd:fe:cb:31:0e:90:3e:4b:5e:8b:7a:62:a9:17:70:84:94:
         fe:eb:47:20:b5:af:c4:52:38:56:31:b8:ee:1e:f8:82:33:9c:
         a7:0e:ec:c4:f1:aa:01:74:7d:55:ad:e6:15:8f:3c:39:fe:ee:
         71:1f:55:bf:d9:54:2d:14:ca:b0:68:3a:d4:91:b0:d9:a5:bf:
         89:b9:e7:c0:81:35:2b:ea:31:2f:4c:a0:6d:f4:d4:c4:32:f1:
         f3:98:bd:73:0f:ad:4e:98:31:10:01:ae:90:ad:71:47:b1:35:
         8b:83:30:06:a9:d5:ef:dd:8a:b1:7b:37:02:21:00:20:2e:a3:
         1e:13:8d:75:4d:75:c3:68:ea:87:1c:16:04:69:a7:44:7f:77:
         04:6c:6f:51:e9:70:c0:db:75:d3:c7:0f:e4:4b:b8:9d:b9:7d:
         0a:68:87:89:57:ff:6e:e4:eb:10:e9:d0:8d:d5:cd:e4:e2:f5:
         d5:b2:13:4f:48:a7:a9:a0:51:4b:ee:86:00:dc:43:12:8d:5a:
         d3:75:cf:b2:f1:69:17:87:d5:d8:01:20:8d:6a:8c:8b:6a:82:
         ec:fb:4d:51:77:d7:38:5a:c2:16:1a:b5:d0:5b:a2:4e:8d:31:
         a2:40:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:39 2025 by rpki-client