Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3139312e362e3233322e302f32312d3332203d3e203238363339.roa
File:                     3139312e362e3233322e302f32312d3332203d3e203238363339.roa (raw, json)
Hash identifier:          lAWXcHvJQEUJBKmNh5txL8VNqKKsnauGkIpzuQASyX0=
Subject key identifier:   66:01:D3:D0:A3:ED:8F:DC:94:AB:9D:14:FF:26:C0:26:FE:39:DD:23
Certificate issuer:       /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Certificate serial:       12BBBFA55201E2855120148461D8333190959335
Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3139312e362e3233322e302f32312d3332203d3e203238363339.roa
Signing time:             Wed 05 Mar 2025 23:18:33 +0000
ROA not before:           Wed 05 Mar 2025 23:13:33 +0000
ROA not after:            Wed 04 Mar 2026 23:18:33 +0000
asID:                     28639
IP address blocks:        191.6.232.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl
                          rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 17:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bb:bf:a5:52:01:e2:85:51:20:14:84:61:d8:33:31:90:95:93:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
        Validity
            Not Before: Mar  5 23:13:33 2025 GMT
            Not After : Mar  4 23:18:33 2026 GMT
        Subject: CN=6601D3D0A3ED8FDC94AB9D14FF26C026FE39DD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:c5:8e:36:14:4f:5f:f4:54:1d:e9:9d:aa:
                    14:06:02:31:f8:37:92:11:f1:60:f6:b4:b6:0c:1e:
                    76:6c:e7:d8:06:fd:a1:9b:af:c5:a9:fe:97:12:51:
                    18:f3:6d:3d:5e:68:5f:ad:b2:11:be:73:4b:32:5c:
                    51:b8:b0:bd:e2:c8:0d:a6:6a:fe:23:67:8b:b6:0f:
                    fc:7a:28:e9:8a:0b:bf:35:1f:8d:91:1f:96:90:f3:
                    75:55:01:0d:61:49:17:bb:af:2d:5f:5d:ef:4e:cb:
                    58:a2:ba:3b:bf:bd:7f:f1:32:42:8b:e6:d4:8d:d0:
                    dd:15:76:6b:84:97:4f:94:3e:ee:fd:ac:f4:1c:65:
                    c9:7a:1e:c8:8d:19:e8:ad:2e:1e:86:67:4a:c0:eb:
                    ac:ed:07:e8:e4:fa:32:bc:9e:bf:26:c1:87:6f:6e:
                    5f:95:8b:e7:33:9c:a3:ea:96:b1:5a:da:60:56:74:
                    d2:3a:66:2e:5d:a2:87:dc:60:58:e8:33:04:81:ec:
                    19:49:ab:bb:f8:7c:ef:4f:ce:9e:df:78:4a:9f:7a:
                    24:98:b2:ae:bd:3e:23:2f:28:ca:89:16:0f:d3:5f:
                    9e:07:82:a6:9a:5a:3e:cf:95:49:69:b1:b4:dd:26:
                    3c:0f:0b:ed:6f:79:a6:1b:6a:ef:f5:4a:d1:ff:9b:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:01:D3:D0:A3:ED:8F:DC:94:AB:9D:14:FF:26:C0:26:FE:39:DD:23
            X509v3 Authority Key Identifier:
                keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3139312e362e3233322e302f32312d3332203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:46:fb:c0:81:13:db:a1:ea:23:60:10:bf:93:30:c2:91:
         93:b9:b7:0a:16:4e:25:be:68:65:d6:05:eb:d3:97:09:32:e2:
         9a:d8:58:38:5d:19:ad:7b:07:69:b0:cc:9c:9c:ad:c2:e7:8c:
         b1:45:9a:4c:cf:e7:72:1b:b9:2c:c4:c7:32:74:70:8c:d1:19:
         b6:95:25:23:47:13:23:9d:32:7c:9c:6f:1c:9d:80:06:f7:63:
         85:98:b4:35:d4:03:35:53:7b:71:54:f0:10:34:79:69:17:53:
         99:49:35:ea:21:c7:16:b5:e9:bd:2c:c2:e0:cc:9d:c1:00:3b:
         03:8f:87:5c:2e:ac:dc:41:ce:56:14:60:54:63:23:13:5c:4c:
         c1:3f:c2:f3:9f:82:f3:04:ce:76:4c:b5:2f:fa:6c:f8:78:c7:
         b7:d3:0f:80:40:c9:6b:06:86:68:c5:88:e6:a4:c0:03:bb:b6:
         c3:e2:dc:a4:f2:11:59:b0:4e:4a:0d:2a:7c:38:52:1c:16:3f:
         06:9b:8e:81:b3:15:0a:92:79:29:41:eb:4f:c6:5e:2b:11:91:
         e7:4c:dc:b4:fc:ba:a2:15:02:bd:93:4e:c8:30:63:f5:6c:5d:
         9c:40:8a:13:b2:08:fd:a5:4d:23:dd:10:28:5e:0f:a3:61:79:
         8f:de:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:52:56 2025 by rpki-client