Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
File:                     3139312e3234302e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier:          fU/ahj5nmpoNPZyY4iZqFal+KTSTOYQUZPGPnJPsUNc=
Subject key identifier:   4A:42:6F:29:DE:58:2C:77:89:32:0F:98:51:20:C2:30:B8:30:D1:AB
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       304C187D578807B27400EB2BE045D9AED4E2A7EF
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:36 +0000
ROA not before:           Mon 13 Jan 2025 13:27:36 +0000
ROA not after:            Mon 12 Jan 2026 13:32:36 +0000
asID:                     28202
IP address blocks:        191.240.0.0/17 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4c:18:7d:57:88:07:b2:74:00:eb:2b:e0:45:d9:ae:d4:e2:a7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:36 2025 GMT
            Not After : Jan 12 13:32:36 2026 GMT
        Subject: CN=4A426F29DE582C7789320F985120C230B830D1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:61:31:76:e6:3c:54:6a:75:9c:4b:9c:89:
                    01:1f:1b:ad:1d:e2:65:dc:9d:66:be:c1:f6:27:3f:
                    60:40:9d:de:45:21:54:ab:e8:bd:9d:e7:3d:21:d9:
                    f7:6c:55:5d:0e:25:c2:e5:ec:3b:d3:0f:a0:b6:a9:
                    e9:53:36:e5:ad:d6:e2:dc:d7:c3:ee:de:7a:5a:76:
                    48:21:bc:ad:0c:c1:f9:11:ad:d0:b7:19:b1:2f:8e:
                    9f:d9:b6:4d:f8:08:ed:7e:93:28:a2:23:2d:2d:d0:
                    70:b7:98:9a:4b:f4:f4:55:c1:1e:b6:69:d6:9a:02:
                    fc:d3:5f:ce:a0:ff:7a:9b:bd:87:11:08:e5:06:3c:
                    1a:79:38:63:bc:cc:c0:f6:24:0b:b5:4b:86:a1:75:
                    4b:6f:fc:1e:16:31:9e:31:cd:f5:a8:d4:f1:0d:f9:
                    5b:f6:3a:d2:f0:f4:26:b2:2a:5b:ed:25:d5:a8:7f:
                    62:f4:82:fe:ea:08:b2:0c:3d:c4:71:b3:25:a4:63:
                    03:b2:70:1e:94:65:22:02:0b:58:f4:2e:88:c0:53:
                    6b:ff:36:f9:1b:34:b7:7d:54:ff:5c:c5:0b:30:73:
                    1c:c6:22:f8:a3:86:16:b7:f9:24:9f:65:36:ce:72:
                    40:38:5d:78:68:f4:56:df:37:29:a9:69:10:85:a5:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:42:6F:29:DE:58:2C:77:89:32:0F:98:51:20:C2:30:B8:30:D1:AB
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         18:22:ae:36:7b:19:3d:05:91:03:d3:6d:26:84:5f:ed:32:16:
         76:e4:76:b4:f9:7e:67:4a:ef:28:ee:70:6f:74:50:00:84:f7:
         b6:54:63:e5:75:d5:cf:36:aa:47:f3:db:fb:09:ee:6b:09:88:
         3b:a1:f1:7b:eb:39:5f:7d:7a:43:89:a5:1c:a3:c4:d0:01:1c:
         69:80:64:49:c9:10:87:34:cd:12:c3:66:66:06:66:43:31:64:
         3c:3c:f9:4a:33:89:7b:32:de:84:cb:44:30:1a:85:5d:23:2d:
         f8:7e:51:f2:3f:30:6d:37:11:39:2c:f8:0f:58:49:27:17:60:
         ab:ec:be:5e:04:69:3a:10:a2:c2:ed:2e:58:66:03:56:e3:8b:
         10:7f:d7:f9:b2:d6:0f:81:bc:a6:16:59:94:30:be:6b:12:eb:
         29:06:b7:9a:a3:a5:e8:3c:05:aa:bd:6f:79:1d:11:11:5d:21:
         dc:88:73:31:88:a3:34:3d:d1:5a:46:52:54:b1:5c:ba:1c:cb:
         1e:bd:f3:ef:a9:a5:b7:28:b4:f4:31:f7:ad:a4:08:13:a6:7b:
         8d:1a:2e:04:44:46:7c:b2:5c:3e:e9:11:65:76:5e:c0:4d:b2:
         82:1e:fe:b2:ac:43:8d:a1:c2:ce:49:09:cc:00:6f:8f:d2:0a:
         48:fe:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:35 2025 by rpki-client