Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e35322e302f32342d3234203d3e203236353036.roa
File:                     3139312e35332e35322e302f32342d3234203d3e203236353036.roa (raw, json)
Hash identifier:          AD1KoFIcaczOQzHW8iBE3n4h+fqIytpwQbjz12oTaqo=
Subject key identifier:   5E:81:98:72:7A:D4:61:4D:EB:E0:E9:65:2B:E2:C7:BE:E9:85:53:DF
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       1BE7CB70F90B17F4A796641D790427C37B7A726F
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e35322e302f32342d3234203d3e203236353036.roa
Signing time:             Mon 13 Jan 2025 13:32:25 +0000
ROA not before:           Mon 13 Jan 2025 13:27:25 +0000
ROA not after:            Mon 12 Jan 2026 13:32:25 +0000
asID:                     26506
IP address blocks:        191.53.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 16:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e7:cb:70:f9:0b:17:f4:a7:96:64:1d:79:04:27:c3:7b:7a:72:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:25 2025 GMT
            Not After : Jan 12 13:32:25 2026 GMT
        Subject: CN=5E8198727AD4614DEBE0E9652BE2C7BEE98553DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:ff:46:f4:5b:4a:9e:78:73:5d:89:dc:2e:
                    1b:90:6e:fa:ba:28:f5:d3:b6:33:18:98:45:f5:8c:
                    fd:17:f3:ae:d7:6e:ad:9d:0f:d3:c0:6c:83:8a:9c:
                    99:d5:76:4d:c1:70:79:fc:26:11:dd:36:4f:8b:37:
                    4b:07:fb:6a:65:43:d0:f2:e9:5e:0d:f0:82:db:22:
                    d5:f2:b3:f0:58:d4:8f:be:58:85:cb:b5:26:47:c8:
                    4c:1d:2b:2f:c0:1d:bc:22:a0:f8:91:b2:b0:ca:c1:
                    5b:07:7c:89:a1:99:75:14:96:c0:78:95:94:14:47:
                    c5:00:f4:ba:55:1f:e9:fb:5e:73:ef:26:79:bc:a6:
                    6f:eb:14:44:5a:3f:d0:4e:fd:5c:b0:b1:61:4e:21:
                    bd:05:20:e1:f1:8e:21:90:5f:87:05:90:5b:a8:b4:
                    0f:b3:6c:34:b6:6f:22:05:7a:87:d0:20:18:d9:08:
                    60:79:99:dd:e0:98:89:41:80:83:61:d6:01:bd:1e:
                    db:67:e8:ca:14:42:e9:a5:7b:dc:85:40:f7:e8:42:
                    43:a4:10:ae:ee:b9:8d:fe:ff:62:5e:36:70:71:d0:
                    bf:93:fb:f3:7d:68:95:3b:80:8b:34:2a:fb:86:53:
                    67:cd:e5:8d:32:92:70:08:c9:ec:44:cf:8c:eb:b6:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:81:98:72:7A:D4:61:4D:EB:E0:E9:65:2B:E2:C7:BE:E9:85:53:DF
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e35322e302f32342d3234203d3e203236353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.53.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e8:e3:3d:b7:80:ca:e3:32:89:ab:07:65:b3:ad:80:92:22:
         bc:e0:3a:14:db:ae:47:e8:63:ea:0f:e5:fc:28:70:02:9a:ff:
         cc:24:9b:ae:a9:2c:93:44:20:03:09:8d:68:e3:7f:3f:9b:46:
         9c:35:ac:6b:41:5d:6f:14:03:ee:92:b0:78:ce:db:c0:33:9c:
         ea:b3:fb:9f:ff:07:44:0a:ae:d6:f7:b6:08:bb:4d:f4:96:5e:
         ab:1a:50:78:7a:04:41:79:c8:41:de:2a:23:58:11:e0:6d:52:
         2c:dc:71:37:31:35:6a:9d:2a:da:a7:f1:a0:f1:93:fb:69:0f:
         e9:a3:24:43:e6:c0:b6:1a:9a:c8:6d:82:12:a8:da:ab:85:ba:
         fa:84:76:4b:ee:1c:f2:3f:18:5c:9a:69:f3:20:30:48:ba:8d:
         e3:4b:d1:69:b9:ec:05:e4:3b:f0:b0:13:68:65:c0:7f:49:4f:
         02:ca:45:30:15:25:1e:04:5b:6a:37:4c:ea:4e:00:7d:de:30:
         99:b1:25:49:50:13:b5:b6:12:3d:bc:21:97:f2:bf:09:4c:fb:
         bc:84:d0:e1:76:cc:6a:b3:2b:87:1d:94:82:b5:b1:e9:84:f2:
         aa:9f:a7:d7:44:c0:2b:54:c0:72:62:ff:92:13:a0:57:e4:40:
         0b:7a:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:02:26 2025 by rpki-client