Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          easHftmUYC+KGKIbhSuNwM0h+DtWftI1xJ/fMskth8M=
Subject key identifier:   9E:DA:73:7C:39:C5:9E:09:5F:63:49:C2:91:7B:81:7F:EB:36:40:1D
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       2325A8097BFC7F0CF7D35A22E2974BA54BB2A7DD
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:24 +0000
ROA not before:           Sat 22 Mar 2025 09:54:24 +0000
ROA not after:            Sat 21 Mar 2026 09:59:24 +0000
asID:                     262784
IP address blocks:        191.241.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:25:a8:09:7b:fc:7f:0c:f7:d3:5a:22:e2:97:4b:a5:4b:b2:a7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:24 2025 GMT
            Not After : Mar 21 09:59:24 2026 GMT
        Subject: CN=9EDA737C39C59E095F6349C2917B817FEB36401D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:ce:a7:33:b9:cc:01:c4:04:d7:84:b7:38:
                    90:1e:9d:f7:0a:67:b2:21:ac:17:51:e5:ca:02:40:
                    c1:86:a9:1c:e5:9d:66:14:46:ff:e4:77:a6:a1:f2:
                    5d:c2:fe:43:8a:00:0c:c6:82:21:76:42:b2:e2:72:
                    33:7a:86:53:04:36:8f:61:7b:76:06:a2:f9:31:6f:
                    cd:f9:6a:b1:8f:3b:07:84:e5:5b:ee:9c:27:b3:77:
                    94:e7:e2:53:87:dc:52:1b:28:5c:13:56:e3:5b:3d:
                    40:28:6f:ec:bb:de:88:0e:2e:c5:23:ed:6b:f9:b1:
                    37:62:6c:bb:a9:0e:2f:77:5d:46:fc:02:2b:b4:7c:
                    69:30:1a:96:68:e7:13:7b:a4:fa:46:f3:04:91:dd:
                    ec:7c:be:b4:c0:6c:2c:d1:2f:ef:a4:c7:1c:ed:15:
                    25:02:3d:e0:ee:7a:3b:92:06:88:11:53:63:8e:ec:
                    92:b8:2f:12:d8:42:a7:08:30:b2:75:69:32:9f:85:
                    08:bc:e8:2c:a5:0c:e4:37:e6:34:49:2a:ef:6b:65:
                    dc:47:2f:17:57:6a:16:f5:22:7f:a4:03:10:7b:62:
                    b9:e6:2e:73:6f:90:bd:39:c3:e8:5e:cd:8a:d2:97:
                    2b:87:7b:d3:ef:b4:9b:40:af:17:19:6f:8a:6d:ec:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DA:73:7C:39:C5:9E:09:5F:63:49:C2:91:7B:81:7F:EB:36:40:1D
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:70:ce:94:2d:2b:d7:91:43:bd:a9:c2:c4:a1:7d:9a:4a:
         c2:32:0d:14:ac:e1:4a:41:53:1b:0e:86:db:c6:19:91:b3:ee:
         75:a0:8a:c5:44:c8:e5:c9:71:27:3c:3c:9d:c4:20:f1:63:b2:
         66:a7:f6:58:fc:2e:d5:f0:52:21:f8:6e:a1:5f:c7:82:f8:f2:
         aa:bb:9a:bc:bf:ca:8c:ea:8c:c7:50:fd:79:50:b4:7a:eb:9c:
         d9:65:64:4a:e1:60:a8:29:9e:7a:64:03:c4:6a:33:88:6f:0b:
         e0:47:fb:16:8e:73:2c:33:d3:ee:71:40:7b:d4:d8:92:8f:c0:
         66:54:77:18:a8:28:81:2d:d4:9c:6b:9c:b1:d2:31:6e:a0:71:
         25:c3:fa:4b:26:70:f5:53:87:ba:6c:44:e4:3d:4d:c5:a7:cb:
         ef:97:0d:2b:eb:99:1f:f6:71:46:23:68:92:67:b4:0d:be:7f:
         22:e2:70:f2:e8:13:ad:ed:96:29:02:8d:62:20:77:64:48:a0:
         dc:2a:8a:ff:52:9b:3f:2e:58:6b:f5:69:20:9c:47:d2:01:4a:
         e7:f8:bb:f5:cf:23:70:61:b1:c0:34:c6:f2:8b:be:98:6a:fd:
         20:80:92:3b:a0:7d:d2:55:00:f5:d1:a1:8c:cb:3a:bf:56:09:
         02:48:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:37 2025 by rpki-client