Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa
File:                     3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa (raw, json)
Hash identifier:          cmaL9nczs41+mYhx4XEy9q/VxD5ez5SoENxb1djVC7w=
Subject key identifier:   6A:CE:1F:C2:73:8F:1C:E9:45:8B:DD:8F:0B:3C:95:42:38:1B:31:74
Certificate issuer:       /CN=7C15F291DFB615DDF2838141345B3BEFF00DF2A8
Certificate serial:       253B05906680E2665B5475A39E29F8DD1DC07B0C
Authority key identifier: 7C:15:F2:91:DF:B6:15:DD:F2:83:81:41:34:5B:3B:EF:F0:0D:F2:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa
Signing time:             Tue 24 Dec 2024 13:43:09 +0000
ROA not before:           Tue 24 Dec 2024 13:38:09 +0000
ROA not after:            Tue 23 Dec 2025 13:43:09 +0000
asID:                     273521
IP address blocks:        189.126.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.crl
                          rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 13:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3b:05:90:66:80:e2:66:5b:54:75:a3:9e:29:f8:dd:1d:c0:7b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C15F291DFB615DDF2838141345B3BEFF00DF2A8
        Validity
            Not Before: Dec 24 13:38:09 2024 GMT
            Not After : Dec 23 13:43:09 2025 GMT
        Subject: CN=6ACE1FC2738F1CE9458BDD8F0B3C9542381B3174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:36:be:93:bc:94:b8:df:2f:9d:b1:98:31:
                    5c:ed:c1:ab:c5:b8:19:33:1c:63:62:ea:44:7b:1f:
                    74:8a:c6:e8:ce:0c:c3:1e:da:8b:90:30:aa:91:05:
                    09:96:98:ee:86:05:23:38:2e:0f:8a:20:da:25:31:
                    c1:f9:eb:8e:73:5f:c6:99:2a:03:7a:51:e3:a6:2e:
                    52:67:c3:eb:27:d9:b2:7f:34:3b:34:69:99:85:3b:
                    45:64:51:5e:2e:bc:e6:53:3c:42:94:17:c2:a1:8d:
                    e7:ff:cb:22:41:e8:e8:fe:3a:a0:ca:7f:2c:47:09:
                    d8:44:27:2f:0a:5a:88:d5:38:ec:86:f0:20:49:05:
                    54:65:e9:b0:d7:d0:d1:5c:27:26:f0:df:6d:75:a5:
                    27:16:e9:76:de:cc:8c:2c:e9:2a:ab:79:2c:b6:4b:
                    b2:5e:e8:85:5f:8f:8b:7e:e2:d1:33:79:a8:60:6e:
                    e2:00:fb:f3:0b:cd:14:dd:2c:14:65:2b:36:40:d5:
                    bb:5f:9c:06:70:3c:a4:ad:58:5b:44:fb:cb:2a:e6:
                    7f:47:5a:be:16:60:8a:65:83:65:83:80:0a:8e:d2:
                    72:9b:48:15:57:da:cb:2b:1d:fb:61:5f:c6:6d:a7:
                    66:79:12:4f:b6:44:38:63:8a:8f:28:ed:5c:bf:62:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CE:1F:C2:73:8F:1C:E9:45:8B:DD:8F:0B:3C:95:42:38:1B:31:74
            X509v3 Authority Key Identifier:
                keyid:7C:15:F2:91:DF:B6:15:DD:F2:83:81:41:34:5B:3B:EF:F0:0D:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C15F291DFB615DDF2838141345B3BEFF00DF2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/3138392e3132362e33392e302f32342d3234203d3e20323733353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:bd:31:f3:6d:5b:9e:85:de:4b:78:1d:35:16:b4:42:85:
         eb:fb:21:17:6e:6f:06:86:b5:16:ab:2a:28:91:00:b5:d4:a0:
         01:64:94:a9:0a:a2:0d:89:01:81:01:e6:98:50:0b:94:c7:6a:
         b8:96:75:55:c7:93:4e:9f:1d:ca:b1:66:bd:f1:81:00:8e:ee:
         2f:62:db:2f:9f:64:34:db:6c:c7:98:55:ba:96:00:d9:08:9c:
         d4:03:2c:fb:62:b4:b6:98:85:b4:a0:07:9c:4c:2b:e9:1e:a6:
         d8:a2:9a:0c:94:bb:28:26:13:79:6d:ac:df:6a:85:83:25:11:
         1b:a5:8e:1b:02:d2:e8:21:40:a4:c3:0b:2f:6d:3f:53:b1:7e:
         6b:15:af:d6:4b:60:fe:fa:17:c2:09:2b:ad:81:84:3e:d4:ee:
         47:27:ed:cf:91:e6:b4:d6:31:c4:73:4f:29:65:d2:6e:5d:42:
         ba:a9:03:a1:fb:75:b7:c8:48:05:1f:7c:38:67:94:00:77:a7:
         ea:63:52:92:1b:3c:f1:cf:6f:86:81:60:b6:3f:1c:7b:29:72:
         00:3c:53:7a:06:3a:5b:b6:63:55:56:e6:82:b8:b5:4a:39:de:
         86:44:5f:a7:c8:4b:2c:24:6b:cf:ac:67:37:15:94:95:b2:dd:
         5e:18:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:23:55 2025 by rpki-client