Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138392e39312e302e302f31392d3235203d3e203238323032.roa
File:                     3138392e39312e302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier:          2pSQrRiR/5fsqwan7jnuByyo+JQUQLxr0eHM4E2/2/M=
Subject key identifier:   27:E7:39:40:F2:7D:39:EF:7B:52:38:F8:28:83:C4:8E:77:E8:F3:E3
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       2D1FFDC0DF2A5F6944194BED53596FE485D59A01
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138392e39312e302e302f31392d3235203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:28 +0000
ROA not before:           Mon 13 Jan 2025 13:27:28 +0000
ROA not after:            Mon 12 Jan 2026 13:32:28 +0000
asID:                     28202
IP address blocks:        189.91.0.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1f:fd:c0:df:2a:5f:69:44:19:4b:ed:53:59:6f:e4:85:d5:9a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:28 2025 GMT
            Not After : Jan 12 13:32:28 2026 GMT
        Subject: CN=27E73940F27D39EF7B5238F82883C48E77E8F3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:60:c9:2e:4b:02:8e:ab:00:95:6d:23:5e:
                    40:cb:04:bb:13:80:2c:15:58:ed:c8:1f:96:04:54:
                    ab:b2:db:21:00:63:d8:25:ec:45:b8:70:f3:c4:b9:
                    67:9d:c6:27:53:ee:57:9d:0b:36:8c:73:36:5a:5a:
                    d7:d9:00:d5:38:13:7b:e8:52:77:66:61:ff:bf:22:
                    34:47:5b:bf:ea:ee:98:3b:19:ff:36:97:2f:8b:65:
                    45:89:34:71:2e:69:89:49:b5:07:52:75:18:ba:2f:
                    64:6d:a2:7d:52:f6:4e:b6:02:9d:69:50:11:af:63:
                    2a:8a:09:5b:5c:1e:7c:e2:8a:2b:3f:00:ed:86:34:
                    ab:67:6d:ec:ea:72:bb:c6:bc:25:1b:ed:fc:6f:84:
                    39:e8:70:a8:98:f5:e4:01:8a:f0:d4:2e:e8:5d:10:
                    2b:1c:2f:49:48:80:17:a4:8d:6d:4c:02:d6:cd:94:
                    d3:fc:37:a9:8f:9c:c0:2b:57:4c:a3:94:2c:c5:df:
                    3f:9b:b1:0b:48:b3:6b:f5:23:a8:3f:af:b7:5d:28:
                    0b:24:50:8c:ff:d5:ad:cb:55:6f:3c:49:29:e9:d6:
                    4b:f0:9a:4b:11:c8:81:3f:ab:f3:c2:81:4a:33:ee:
                    0e:06:70:1a:65:d6:f4:63:4b:dc:b3:c3:f2:09:eb:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E7:39:40:F2:7D:39:EF:7B:52:38:F8:28:83:C4:8E:77:E8:F3:E3
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138392e39312e302e302f31392d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:23:27:9d:18:1c:03:5f:d2:97:f8:95:02:7f:ef:64:e1:
         b2:c9:f7:03:b1:b9:23:10:dd:79:2e:7e:e6:82:d5:b6:c2:44:
         e9:aa:27:da:4e:30:d1:22:10:78:06:f1:53:45:74:f6:37:44:
         94:40:08:e7:a8:53:53:84:7a:fe:96:8d:c4:73:44:cb:cd:36:
         c2:62:bd:d8:ca:c5:a6:8a:70:2d:73:9d:e0:fc:1a:07:ef:0f:
         6a:f1:02:6e:72:72:20:19:0c:75:32:16:c6:42:5a:2d:ca:7c:
         a6:c1:06:fa:d5:e3:51:ec:48:fb:d9:43:1c:45:59:17:3f:e1:
         f3:82:c7:85:b5:05:cb:a4:2e:ab:d6:df:6a:4d:e6:07:a4:7f:
         38:d0:2f:b9:bd:cd:01:a9:86:73:07:c6:93:b2:e9:84:c7:66:
         ac:a1:bd:5d:5e:d0:1a:c9:3d:1b:68:cc:e0:8d:b1:00:7a:f3:
         a9:7b:f3:87:37:27:1a:f1:ff:67:0b:79:db:23:2c:c2:72:63:
         10:41:f8:4c:5a:01:a9:96:c9:e0:70:e0:5c:81:97:a3:d5:91:
         68:eb:bb:e9:6e:be:25:91:9d:66:73:66:1e:fe:ff:30:0f:1c:
         ae:b1:ed:c0:c6:48:fb:24:00:53:4b:5b:78:b2:8d:ab:0a:e5:
         40:e5:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:08:12 2025 by rpki-client