Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          toe4xRFcb2utCoTgyc1eODVyLsdniDZaz4Werke8v0A=
Subject key identifier:   A1:B2:F6:5F:65:17:BA:A5:EE:BE:E7:38:21:4F:9A:9C:67:52:6B:89
Certificate issuer:       /CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
Certificate serial:       69915207078730CB3C44D48C6EC441B19C13F2AE
Authority key identifier: E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa
Signing time:             Wed 05 Mar 2025 19:03:40 +0000
ROA not before:           Wed 05 Mar 2025 18:58:40 +0000
ROA not after:            Wed 04 Mar 2026 19:03:40 +0000
asID:                     271326
IP address blocks:        190.123.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:91:52:07:07:87:30:cb:3c:44:d4:8c:6e:c4:41:b1:9c:13:f2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
        Validity
            Not Before: Mar  5 18:58:40 2025 GMT
            Not After : Mar  4 19:03:40 2026 GMT
        Subject: CN=A1B2F65F6517BAA5EEBEE738214F9A9C67526B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:01:92:a2:6b:ad:90:92:c3:f8:f6:59:7d:
                    6d:c3:12:9f:5c:45:d2:8d:2b:4c:98:77:b8:76:6d:
                    47:59:c5:2f:c2:b5:8c:fe:00:b6:3b:0d:79:ea:76:
                    57:ee:4b:cf:5e:cf:a2:46:5f:94:e1:aa:38:15:1f:
                    63:9f:23:26:3f:47:7d:9a:ad:e9:79:0e:18:0b:22:
                    12:ae:72:81:f5:6d:8a:f9:45:73:ef:05:16:e5:aa:
                    82:cd:20:0c:97:b2:fb:22:4f:16:35:60:45:30:55:
                    14:28:dd:5c:84:e3:be:85:15:4c:7e:6d:a5:51:53:
                    9f:80:37:82:eb:a4:d4:e8:2f:a2:69:15:58:7a:3a:
                    d3:07:cf:40:78:7d:d6:96:55:73:8c:7e:5a:0b:6c:
                    05:13:00:5d:77:4a:db:12:f5:21:57:de:cb:01:97:
                    83:d7:81:3e:7e:62:a2:e3:33:36:05:c5:e3:82:89:
                    8f:53:35:ab:0d:70:5b:dd:41:35:cf:83:58:dc:42:
                    26:01:78:b4:d1:5a:ef:e9:3f:5f:bb:e6:4d:f1:db:
                    9a:e5:10:74:2f:9e:ea:ff:c3:a9:31:08:bd:98:05:
                    ea:83:d0:d4:9e:f8:f4:8e:8d:b5:81:58:b2:84:d6:
                    eb:9b:5e:fb:c4:22:5e:2c:8e:93:5d:7f:ac:5a:86:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:F6:5F:65:17:BA:A5:EE:BE:E7:38:21:4F:9A:9C:67:52:6B:89
            X509v3 Authority Key Identifier:
                keyid:E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:e4:77:5f:b9:9e:14:b4:92:87:92:52:b6:22:d2:90:d6:
         8c:b0:74:6d:b3:34:0e:f9:20:46:8f:9a:69:35:6e:4e:eb:30:
         0c:f8:38:e6:8f:41:9e:22:a8:80:a4:28:ae:bd:82:eb:d7:fd:
         c2:26:e2:c9:87:44:5e:2c:5d:9a:95:2e:44:3c:3e:90:cf:dc:
         bf:3f:ea:48:42:f9:f5:02:22:0d:57:a9:0b:8e:5b:fc:40:e3:
         e0:5f:2e:44:5c:f8:4a:cc:45:28:4d:2a:0b:35:4e:e3:10:50:
         75:9c:12:be:cf:4b:9f:b4:2d:4a:5f:84:a4:38:b5:0c:28:22:
         b1:1b:b9:f3:44:3a:b1:3b:d1:6f:12:0e:9f:ed:25:fe:a5:02:
         17:8f:69:12:25:79:59:a8:b6:91:d9:b8:2c:07:37:fc:9f:b7:
         b6:a8:c1:6a:7f:ce:cd:4c:c2:20:90:40:b8:5f:d2:36:fd:77:
         9f:80:23:61:35:49:32:c1:ad:7f:9f:1e:34:6d:1a:e6:51:52:
         bb:a1:65:e9:53:61:d4:ff:5e:ee:ea:2d:3c:95:f0:ea:70:8f:
         c9:5f:10:1a:4f:ef:6f:24:4c:36:8f:f4:ad:57:49:ec:85:61:
         8a:35:28:c7:6f:05:2a:f5:97:6f:29:19:cb:b0:61:a0:e8:2f:
         8f:61:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:20:48 2025 by rpki-client