Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135312e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135312e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          gXl38a/msJ4gvXTOH0E4uO8Vre1H6mSzbiKjd3YpTlE=
Subject key identifier:   3D:DE:6B:04:32:48:BF:55:B1:C2:C9:AC:A1:C6:C3:1E:83:45:43:1B
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       20270DF68DD0F529541C532143DDB152E1ABD3D4
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135312e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:25 +0000
ROA not before:           Sat 22 Mar 2025 09:54:25 +0000
ROA not after:            Sat 21 Mar 2026 09:59:25 +0000
asID:                     262784
IP address blocks:        191.241.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:27:0d:f6:8d:d0:f5:29:54:1c:53:21:43:dd:b1:52:e1:ab:d3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:25 2025 GMT
            Not After : Mar 21 09:59:25 2026 GMT
        Subject: CN=3DDE6B043248BF55B1C2C9ACA1C6C31E8345431B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:01:8f:3b:ae:db:71:b5:17:c0:27:6b:bc:2d:
                    fb:8d:aa:70:b7:96:c7:22:e3:fd:ad:84:90:ba:75:
                    cc:4d:d5:4a:7a:f7:4f:f1:3a:bc:50:48:5c:43:20:
                    51:c4:f3:d9:77:f3:2b:06:ff:77:30:2a:31:1d:52:
                    83:51:f3:ac:b2:3d:5c:61:be:91:1a:99:39:02:37:
                    75:89:99:57:89:55:90:2b:6d:f1:bc:8a:e8:40:06:
                    bf:61:f3:01:a3:42:5a:f0:ec:b1:9f:e8:b1:be:57:
                    b6:99:64:82:7e:2f:04:0a:4f:df:a3:4e:72:ae:d4:
                    ca:7f:67:d9:19:7b:f2:5b:d5:8f:24:c5:46:b5:fa:
                    0f:ca:4d:65:fa:ad:1d:de:2e:01:ef:e3:28:03:17:
                    c5:75:5b:c2:e9:43:7b:2b:c4:02:16:4d:a4:b5:e9:
                    3e:88:9b:b3:65:62:49:b5:6c:ce:46:b3:52:69:12:
                    41:35:a1:3f:c8:2b:91:5f:cd:01:73:00:d2:1e:4b:
                    a6:73:1c:e2:88:c8:c6:84:3e:b7:8a:61:b4:4d:99:
                    22:47:db:9a:76:b0:50:4c:02:b3:fd:41:26:00:51:
                    65:6d:5f:d3:0a:e5:60:22:56:8f:2c:8b:af:cf:9c:
                    66:6c:b4:14:65:dc:3a:85:8f:05:b2:b6:62:8b:c3:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DE:6B:04:32:48:BF:55:B1:C2:C9:AC:A1:C6:C3:1E:83:45:43:1B
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135312e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:f1:5b:c0:39:41:2e:1a:9a:f7:de:66:46:e1:7e:a1:f8:
         da:66:2e:db:b4:15:80:0f:e7:09:2a:73:de:6b:95:d3:a2:43:
         92:29:4e:8e:88:3f:0e:d0:c7:cf:cc:ba:a6:22:99:35:72:70:
         a8:38:0d:a3:a7:bb:e7:1d:a2:be:0c:59:fc:ae:f8:b0:95:ea:
         f0:bf:51:8f:b4:82:61:9b:1a:59:ce:8d:3c:ba:0d:5b:3e:99:
         7b:d5:9d:c2:1b:92:9a:15:8f:56:ca:e6:e8:30:b6:b5:96:69:
         b9:94:b5:03:54:1f:b5:db:99:fe:97:69:f6:d0:6a:28:fb:80:
         42:d3:d1:e4:d8:1a:ed:ab:dd:f7:8c:de:9c:68:52:cf:d5:2c:
         37:73:34:23:3c:d2:95:38:83:92:a1:8f:a4:4d:68:3f:6b:c1:
         c8:c2:ae:2d:b8:d8:8a:e9:0f:15:d2:ce:3e:3a:39:db:48:83:
         9a:c5:53:72:6f:2b:03:90:39:e8:c6:a2:4e:e6:e4:c4:81:6c:
         85:36:de:1c:ef:13:c7:b6:09:22:70:ba:d8:fa:59:f7:3d:a5:
         a1:24:28:f7:29:42:c6:e8:bb:ac:1a:16:a4:7a:77:40:7b:ba:
         14:67:54:a9:b4:3d:92:1b:f1:46:09:18:27:17:67:4e:24:d8:
         cd:4d:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:11 2025 by rpki-client