Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa
File:                     3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          ue0KIFxkSNxF1hg1eqfMteBqRDWhn+AgxTOPK+eRZEA=
Subject key identifier:   6B:72:1C:84:CA:9D:2E:48:EB:83:6A:60:78:55:77:11:98:6C:49:70
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       7B5809200CC353F18837FC68D5AA4397754DA736
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa
Signing time:             Wed 05 Mar 2025 19:00:17 +0000
ROA not before:           Wed 05 Mar 2025 18:55:17 +0000
ROA not after:            Wed 04 Mar 2026 19:00:17 +0000
asID:                     262891
IP address blocks:        191.253.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:58:09:20:0c:c3:53:f1:88:37:fc:68:d5:aa:43:97:75:4d:a7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Mar  5 18:55:17 2025 GMT
            Not After : Mar  4 19:00:17 2026 GMT
        Subject: CN=6B721C84CA9D2E48EB836A6078557711986C4970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:68:50:71:13:41:0b:0f:db:d7:19:84:f9:
                    c8:f6:0e:bc:d2:78:96:ad:a4:77:f0:4c:e8:84:9b:
                    63:7a:91:02:a3:e3:07:4c:64:57:7c:10:d9:a8:17:
                    d3:d2:f7:8d:3e:c0:77:2f:c3:b3:0f:fb:60:a5:33:
                    d6:de:bc:ea:c6:3a:05:7b:57:b3:37:8c:11:13:8b:
                    84:0c:6f:ac:a8:d0:59:8e:64:af:a9:f0:ee:c6:04:
                    01:d5:52:21:62:e4:c2:79:34:bc:da:bd:dc:bc:89:
                    59:3b:60:b8:f2:f4:4f:6d:27:3c:fc:3a:15:cd:62:
                    e4:5c:53:0d:84:d4:10:a2:84:c9:b9:39:ea:95:90:
                    9b:5e:c3:cf:17:40:d0:e1:13:e9:b5:67:0c:e8:8c:
                    21:f1:3c:ce:91:64:ac:46:42:88:8f:6d:9a:a8:e2:
                    9d:b6:42:e2:22:67:39:38:a1:01:95:17:68:f5:e8:
                    c7:c9:83:b6:79:09:46:65:75:f2:b8:f0:d5:14:1f:
                    c7:cf:bb:53:92:5a:c0:1b:ad:1a:23:b8:e2:5e:ac:
                    0c:1d:d8:34:65:ad:a2:89:11:da:42:26:33:6d:db:
                    88:fd:ec:07:8d:68:a4:00:22:87:82:19:17:06:7c:
                    94:e1:9e:e4:ee:98:a7:42:54:50:1a:b0:ea:cf:6f:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:72:1C:84:CA:9D:2E:48:EB:83:6A:60:78:55:77:11:98:6C:49:70
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:97:ae:85:90:5e:22:4d:92:fe:ad:28:59:93:69:5e:df:1b:
         8d:3d:83:73:c7:5b:e5:f7:24:95:3e:9c:87:cb:c6:ad:b1:da:
         d3:5b:98:f9:ca:40:a5:95:cf:1b:54:97:90:19:d2:f3:fa:7f:
         28:4c:68:f4:a3:a1:42:b7:ae:92:a9:70:6c:6b:a4:4d:5d:26:
         45:dd:45:2b:ad:b8:cf:81:17:39:75:53:6a:fa:48:a2:52:22:
         e6:4b:ff:25:f5:63:c3:3b:4a:8a:7c:10:d0:11:4d:cb:37:f4:
         70:2d:90:45:66:d9:fc:8e:d0:6c:4a:5e:d6:a4:48:f3:6b:be:
         86:fd:fa:4e:fc:d9:7d:6e:c6:93:a1:8d:bd:87:44:2c:ae:a3:
         e2:9c:a3:df:d3:cc:d0:f3:86:22:8a:b0:fc:22:77:b7:98:fb:
         7a:07:ca:57:88:a6:1c:b1:15:34:f5:fc:59:72:48:9c:5b:b1:
         89:08:da:32:26:e8:d1:00:b1:c9:97:ad:21:72:af:4d:93:fa:
         6e:3d:91:c2:82:61:6d:c4:9f:85:cf:76:ce:a0:9e:20:66:2e:
         e3:de:ad:53:e2:32:f7:5d:2b:53:99:6c:41:02:a6:20:30:63:
         49:69:64:b1:5f:fb:3c:b3:ef:58:7d:74:7d:f4:d3:dd:aa:f7:
         1f:85:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:45:44 2025 by rpki-client