Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
File:                     3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (raw, json)
Hash identifier:          WYSv+pg5b8lhuDdWYjlI4iII9ZiYJ0H6OtIhfOIPrFo=
Subject key identifier:   0F:98:E2:59:8D:5A:D9:45:6E:62:77:A6:56:F8:AA:7F:13:32:9F:96
Certificate issuer:       /CN=B11BE6CAB53FC4E28CBCD5946DDCED24099FF940
Certificate serial:       59FF8086FECFAC44A82B300B97A59753BC512D6D
Authority key identifier: B1:1B:E6:CA:B5:3F:C4:E2:8C:BC:D5:94:6D:DC:ED:24:09:9F:F9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
Signing time:             Thu 06 Mar 2025 20:20:01 +0000
ROA not before:           Thu 06 Mar 2025 20:15:01 +0000
ROA not after:            Thu 05 Mar 2026 20:20:01 +0000
asID:                     270915
IP address blocks:        201.140.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 18:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ff:80:86:fe:cf:ac:44:a8:2b:30:0b:97:a5:97:53:bc:51:2d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11BE6CAB53FC4E28CBCD5946DDCED24099FF940
        Validity
            Not Before: Mar  6 20:15:01 2025 GMT
            Not After : Mar  5 20:20:01 2026 GMT
        Subject: CN=0F98E2598D5AD9456E6277A656F8AA7F13329F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:5c:16:a0:7a:65:ba:ba:38:c1:57:54:86:
                    2d:1b:7b:bb:7c:a5:87:b8:14:d0:e0:36:a1:31:02:
                    82:e3:b6:7b:c0:c6:db:0a:51:16:fe:3d:b6:12:6c:
                    45:79:39:9c:79:fc:be:ce:a0:65:07:a1:3c:40:f2:
                    fa:a8:4e:78:49:09:9f:e7:4a:92:18:bd:dd:3c:c8:
                    ad:df:3c:76:8f:28:6d:65:db:5e:ed:75:e3:91:0d:
                    0f:92:22:40:e6:d5:56:c8:95:a4:a5:ea:4f:d6:5b:
                    e9:9f:34:94:2d:6f:f7:d4:30:f8:69:98:34:e6:b8:
                    67:d8:26:f3:12:bb:fc:69:d9:e2:54:11:40:fc:e9:
                    4b:20:fa:ec:39:b0:ee:58:bd:5f:4c:9c:e3:1c:f5:
                    88:df:eb:52:53:f0:e5:8c:1b:2b:70:ba:cf:ae:e1:
                    2c:81:a0:91:86:3e:c5:8e:a4:8a:17:8f:9b:54:d8:
                    3d:33:3b:a6:96:ad:13:cb:d3:b2:13:95:46:32:6b:
                    87:b0:65:db:4d:44:6c:dd:06:59:8d:a5:31:07:a4:
                    59:e8:b4:1c:1b:40:c7:44:a2:6f:e4:62:50:f3:a8:
                    2b:b4:6c:21:1a:a7:c4:0f:9e:d8:c4:f9:d1:84:e7:
                    be:ad:0e:12:13:88:dc:2c:96:6b:f0:e3:69:ae:21:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:98:E2:59:8D:5A:D9:45:6E:62:77:A6:56:F8:AA:7F:13:32:9F:96
            X509v3 Authority Key Identifier:
                keyid:B1:1B:E6:CA:B5:3F:C4:E2:8C:BC:D5:94:6D:DC:ED:24:09:9F:F9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:4b:ad:a7:c6:ec:fa:df:f9:63:b0:8d:34:27:7f:ab:f2:
         b4:05:5e:f5:33:e1:c5:c0:38:21:61:76:f0:99:e2:8f:e1:2b:
         45:e2:52:c6:08:a1:d2:62:cf:5a:a2:c9:bb:20:2a:49:06:af:
         2f:b4:bf:8c:15:27:a6:e1:c9:5a:a2:27:55:6a:05:45:78:66:
         5f:0b:d6:47:59:14:39:6e:e0:d7:b2:56:a9:27:d5:b4:d7:25:
         12:2d:7e:12:7f:6c:3e:ce:5c:08:1a:5f:dc:62:c4:e0:ea:34:
         33:cf:4a:36:fb:40:af:8d:88:59:94:84:ef:a4:ed:ce:85:72:
         d9:85:53:18:84:e6:66:37:0e:50:42:4c:fa:67:66:ad:13:39:
         4b:85:30:57:91:11:7a:47:38:02:af:4d:4a:5e:8a:29:f0:de:
         79:1d:95:b4:47:33:ca:1f:7a:a4:99:8b:ed:83:b0:0b:ad:59:
         54:fd:34:79:7d:5f:88:a1:f0:8b:14:8c:17:db:ec:d5:60:c5:
         a5:47:eb:f1:28:ca:35:ed:c9:57:9b:b2:9b:ad:98:96:86:e9:
         fe:a9:02:1e:d7:e6:b2:e7:db:ac:92:00:a2:1b:4c:1e:e4:60:
         a6:1c:5c:ff:2a:fe:a6:a9:a7:f8:e2:c2:00:de:23:46:5b:ba:
         83:11:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:01 2025 by rpki-client