Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e302e302f31362d3235203d3e203238323032.roa
File:                     3139312e35332e302e302f31362d3235203d3e203238323032.roa (raw, json)
Hash identifier:          saI9zkClE+pjiB4O8V1aZYmxQx4uyJQJbA3OdVl1ykM=
Subject key identifier:   A9:4D:FE:5A:6E:50:33:7F:94:DF:27:AA:88:8B:AE:9B:07:26:08:D7
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       1A7C3815DB2A7A34AF617BBB396B63FAEAAD517D
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e302e302f31362d3235203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:09 +0000
ROA not before:           Mon 13 Jan 2025 13:27:09 +0000
ROA not after:            Mon 12 Jan 2026 13:32:09 +0000
asID:                     28202
IP address blocks:        191.53.0.0/16 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7c:38:15:db:2a:7a:34:af:61:7b:bb:39:6b:63:fa:ea:ad:51:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:09 2025 GMT
            Not After : Jan 12 13:32:09 2026 GMT
        Subject: CN=A94DFE5A6E50337F94DF27AA888BAE9B072608D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:47:12:5d:4e:04:2b:40:cb:e8:39:6b:42:
                    59:c5:51:9a:b8:a6:61:3d:6f:ae:09:f4:dc:e1:7e:
                    f6:dc:d0:ee:f0:da:df:0b:11:7a:0c:d8:6e:97:5d:
                    5b:9c:d5:85:41:20:85:12:5b:2b:9e:4e:ce:23:b7:
                    db:0f:1b:1f:71:76:28:6e:4e:55:3d:9f:e7:12:ba:
                    87:82:3c:ff:c9:1e:4f:7d:70:47:c8:31:d7:53:d5:
                    15:cc:cc:b1:47:60:0f:53:c4:d0:06:bb:6a:e7:dd:
                    37:ae:5f:8e:a7:97:44:a9:dc:f1:be:f7:8c:a9:ee:
                    37:41:9d:f7:78:c3:d5:b4:58:c0:28:df:4e:80:75:
                    5b:da:c9:69:22:16:8f:46:e6:f1:a2:a8:2d:84:e8:
                    04:15:b4:b4:59:eb:97:01:14:26:e4:4b:44:e9:27:
                    d8:12:4b:4f:7c:69:43:f3:92:07:5c:61:f7:8b:35:
                    50:7f:0a:8a:00:9d:f8:fb:41:56:14:f9:61:ba:60:
                    46:67:63:fd:06:4e:6c:5e:85:d8:ab:fb:82:04:c2:
                    3d:19:46:69:a3:6e:86:09:dd:81:84:da:cd:d9:f9:
                    3c:1e:2e:b8:f8:b0:9a:b2:8e:86:c1:00:11:14:37:
                    6d:ae:05:7f:ae:43:48:56:b8:7e:0b:f7:90:56:03:
                    8b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:FE:5A:6E:50:33:7F:94:DF:27:AA:88:8B:AE:9B:07:26:08:D7
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e302e302f31362d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:24:9e:b9:c7:a1:85:e3:33:76:b8:18:49:9b:98:60:ff:12:
         73:fc:d0:e6:75:6a:cc:b9:eb:ec:03:a4:6b:6c:dd:1e:b9:0a:
         20:37:8c:b0:fb:e8:be:f5:5b:46:31:db:d3:5a:6e:29:e2:3f:
         c9:70:11:73:5b:93:0a:7f:42:7a:38:bf:36:38:36:3e:6c:a0:
         72:e6:19:c8:53:9b:ac:9c:af:4e:39:99:ec:23:f7:65:5c:c9:
         65:27:bf:c8:fa:a6:22:f6:28:70:d2:3b:ab:4b:be:af:de:a0:
         04:30:10:64:0e:c2:1b:6e:c5:fa:e7:5d:27:1e:8c:81:99:84:
         67:af:e1:c3:32:23:29:d0:d7:32:4b:7c:d5:df:b4:f0:9d:c1:
         60:f8:89:12:16:da:0d:47:0c:2c:0f:2e:ea:03:ea:58:24:52:
         e5:87:84:fa:44:db:44:0b:35:06:56:00:90:6b:46:82:4e:fd:
         fe:8c:9a:fc:6f:41:6d:b7:4b:35:ec:b2:ba:7c:0e:a1:3a:8b:
         19:81:c1:ea:16:a4:70:c8:46:5d:6e:73:00:b8:83:4e:16:d1:
         20:a2:47:41:b5:34:19:a3:5c:44:5f:cc:ea:fc:ec:43:03:0d:
         29:83:d1:bd:ed:0d:31:38:e7:77:00:b9:03:61:b1:9f:7a:6e:
         87:f5:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:58:44 2025 by rpki-client