Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/3139312e3233322e302e302f31332d3133203d3e2038303735.roa
File:                     3139312e3233322e302e302f31332d3133203d3e2038303735.roa (raw, json)
Hash identifier:          9XW6OZA9+YPhEqiBp7Dd8KlbjKFGGNYarSrJoKLNw1s=
Subject key identifier:   7F:27:5A:68:83:F3:7C:C5:B4:4B:D6:72:58:6B:78:A0:E3:8F:51:8D
Certificate issuer:       /CN=0E0B703F842C38CBB5AE671AE348E1B136E9AA60
Certificate serial:       417D218B1BA53AFBF1D972F88E7403B10C281F32
Authority key identifier: 0E:0B:70:3F:84:2C:38:CB:B5:AE:67:1A:E3:48:E1:B1:36:E9:AA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/3139312e3233322e302e302f31332d3133203d3e2038303735.roa
Signing time:             Sat 08 Mar 2025 23:35:44 +0000
ROA not before:           Sat 08 Mar 2025 23:30:44 +0000
ROA not after:            Sat 07 Mar 2026 23:35:44 +0000
asID:                     8075
IP address blocks:        191.232.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.crl
                          rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 17:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7d:21:8b:1b:a5:3a:fb:f1:d9:72:f8:8e:74:03:b1:0c:28:1f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0B703F842C38CBB5AE671AE348E1B136E9AA60
        Validity
            Not Before: Mar  8 23:30:44 2025 GMT
            Not After : Mar  7 23:35:44 2026 GMT
        Subject: CN=7F275A6883F37CC5B44BD672586B78A0E38F518D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:f3:15:69:93:ed:51:2e:e2:e9:9f:16:3e:
                    ba:d0:7c:dd:6a:72:c3:3d:f5:1c:7c:75:a3:b7:ac:
                    78:23:16:a5:90:78:b1:1e:0b:dc:b1:0c:56:f2:11:
                    2e:b2:cc:6a:42:ce:95:bf:6c:05:2d:f0:de:8e:3d:
                    7d:d9:53:ce:63:a4:3b:94:38:f1:24:66:bf:e5:91:
                    0c:0e:8b:5a:48:b4:c1:92:68:f3:68:71:87:7a:61:
                    5c:c3:63:b5:b4:a5:ac:04:bf:3c:5b:ef:3c:8f:13:
                    32:5f:26:fb:0e:50:8a:8a:28:c8:b2:9c:43:9f:cb:
                    55:ad:e2:96:40:11:5d:45:ca:64:af:e9:b9:19:d8:
                    79:11:13:89:e0:77:f3:d8:92:62:3b:1d:d0:d4:92:
                    96:24:3d:d9:3c:5f:56:9c:df:82:fb:f7:ed:5c:6b:
                    46:c9:9f:88:73:da:a7:69:f4:8e:9d:bc:05:45:8a:
                    40:c7:96:d9:02:81:48:85:ed:1a:c4:a0:16:52:7c:
                    b9:15:bd:c5:7c:f4:54:2d:72:13:7a:34:ce:ab:83:
                    9c:b6:98:43:ba:01:e7:ab:a9:22:fc:a2:a4:e1:45:
                    fc:67:2e:ef:9c:d5:5b:8c:7a:85:13:af:a8:db:d2:
                    49:b9:7c:2f:95:74:a7:b4:f7:88:4d:d4:29:05:ec:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:27:5A:68:83:F3:7C:C5:B4:4B:D6:72:58:6B:78:A0:E3:8F:51:8D
            X509v3 Authority Key Identifier:
                keyid:0E:0B:70:3F:84:2C:38:CB:B5:AE:67:1A:E3:48:E1:B1:36:E9:AA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/3139312e3233322e302e302f31332d3133203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.232.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:09:d1:fb:49:0a:bd:f7:6a:5c:38:f5:12:7e:b6:a9:36:
         e6:0e:bc:d3:21:dc:41:dd:0f:3f:27:3a:da:68:ab:56:0c:e5:
         5b:8e:62:f5:ab:cb:88:9f:33:62:cb:5a:8b:2e:e1:27:52:3c:
         53:53:92:c1:5f:cd:1c:6b:89:88:68:1d:ca:04:a0:c3:38:de:
         cd:ca:1f:07:62:62:08:b0:9c:98:3e:a5:f9:1c:0f:14:cd:d7:
         c3:d8:e3:aa:7d:87:d3:0e:92:d7:98:70:25:21:0d:a5:d4:32:
         86:fe:9f:4f:b7:bb:ae:08:7c:d4:9c:38:55:30:82:02:fc:86:
         74:62:f5:c2:4a:ee:16:ec:7f:fa:71:ce:c0:57:fd:c0:e1:c3:
         b3:6a:3d:58:3c:11:61:58:c3:98:12:f6:d6:e4:c3:b2:99:d1:
         1f:4a:63:89:36:d4:bf:9c:5f:f1:d3:0a:17:ad:c6:c1:30:9d:
         56:f2:4e:cf:2c:e9:a6:3b:99:30:8a:3c:57:bf:c8:8d:b2:a3:
         dd:1a:d5:6c:ee:2d:dc:f4:18:57:ad:9b:bd:bd:a2:78:58:ef:
         11:c8:c0:43:e8:a5:cf:de:17:2b:4f:d2:66:74:3e:43:16:63:
         2f:43:33:2c:45:2a:65:4e:0d:27:4b:df:ed:ad:de:20:d3:21:
         d7:73:18:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:38 2025 by rpki-client