Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          PNDDu/sMtMVqEe/3j1thCQN7STQHwut341zBlB/NrE8=
Subject key identifier:   C1:F7:8E:21:1E:1A:2D:7C:A8:D9:AE:BA:7A:98:F7:98:21:F9:05:A7
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       0676DC516AD746A4D4A7ED97DD485BB55E0DE6B5
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:26 +0000
ROA not before:           Sat 22 Mar 2025 09:54:26 +0000
ROA not after:            Sat 21 Mar 2026 09:59:26 +0000
asID:                     262784
IP address blocks:        191.241.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:76:dc:51:6a:d7:46:a4:d4:a7:ed:97:dd:48:5b:b5:5e:0d:e6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:26 2025 GMT
            Not After : Mar 21 09:59:26 2026 GMT
        Subject: CN=C1F78E211E1A2D7CA8D9AEBA7A98F79821F905A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:3c:d2:b8:17:73:51:0f:9c:09:dd:e1:10:
                    b8:aa:e4:67:15:df:52:21:7e:b8:c7:7f:cd:90:19:
                    e3:06:7c:3a:69:3c:13:95:0b:2f:e2:1e:a7:2c:2a:
                    22:e3:42:00:4f:1a:84:12:76:2a:94:51:ad:d2:45:
                    bd:9b:59:eb:ab:b6:8a:d6:28:a8:82:2d:e2:12:94:
                    f0:22:08:72:00:50:4b:89:34:1c:f0:1a:3f:94:43:
                    0e:e4:ff:64:e7:d7:06:10:f4:27:b5:0a:00:b7:46:
                    82:70:ae:48:aa:a3:69:25:81:b9:59:68:bf:33:ea:
                    9f:ab:8e:38:1d:24:18:8b:1a:dd:84:b1:10:e7:17:
                    a1:e7:76:4e:fd:96:02:e5:c7:9e:f0:ef:a0:7a:b0:
                    f5:1c:51:53:24:55:d6:46:7d:52:e9:13:d1:1d:e8:
                    b2:45:5a:7b:46:22:bd:b8:6b:47:fa:52:8e:67:16:
                    c7:ed:56:89:3c:85:74:51:49:01:96:3b:ac:05:bd:
                    80:a2:c2:5e:a3:70:9f:17:d6:ef:61:b3:d3:ee:4e:
                    2d:55:28:21:df:40:40:49:7d:ae:c7:bf:8a:79:66:
                    89:0a:99:2e:bd:01:07:98:3a:a4:de:4c:77:ad:b7:
                    fa:2d:34:5e:27:88:6a:1b:8a:d2:f6:3e:b7:ad:e7:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F7:8E:21:1E:1A:2D:7C:A8:D9:AE:BA:7A:98:F7:98:21:F9:05:A7
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:be:a5:be:0a:19:33:9a:e6:a1:a5:a3:d6:ed:c3:4a:23:72:
         d2:33:aa:3d:3e:5c:2f:e5:8b:06:1c:bd:05:97:af:1d:63:83:
         1d:be:4d:e6:06:5b:95:c3:bb:31:20:64:0b:ca:d8:15:4d:70:
         9d:d0:4b:29:f3:fb:8b:fc:c2:57:3e:6f:a0:c0:ba:80:f8:ba:
         06:75:29:85:2a:f2:d4:48:a3:a0:1f:86:89:3b:b9:6a:31:90:
         19:29:a1:f3:ce:09:38:fe:8c:0e:77:09:55:c7:0e:c9:4c:ba:
         33:57:a5:91:e1:5f:07:29:ac:71:d7:c0:69:a6:e4:d3:de:c6:
         68:6d:be:ad:ef:4a:2d:5e:04:6c:52:4e:c2:5f:e7:47:09:3d:
         a1:9b:83:96:2b:4a:52:b5:93:66:72:7b:8c:87:c8:15:15:be:
         43:3d:8c:4f:9e:73:cc:44:57:0f:a0:8c:c3:c4:d2:c3:28:c0:
         0f:09:12:46:2f:e1:35:fe:17:1a:7e:7c:88:c9:5b:32:38:9f:
         d9:b5:6f:0c:85:85:9d:43:1c:31:ec:1a:8b:d0:18:ac:12:9d:
         3e:b9:bf:e1:7f:a4:75:1b:c2:44:43:19:ad:37:d0:a6:63:d1:
         80:d6:7b:e1:53:1e:d1:cb:3e:4e:43:e8:f0:10:26:b2:5a:88:
         ed:cc:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:44:58 2025 by rpki-client