Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa
File:                     3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa (raw, json)
Hash identifier:          iCsDA9bvaRaU4YPT9gBkA6wjYYLdpioSEXlmkwGQ/20=
Subject key identifier:   5D:8F:79:0D:5C:24:87:19:7A:2B:ED:4C:7E:6A:CF:4C:F4:F5:C0:9E
Certificate issuer:       /CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
Certificate serial:       042FB6E02EB87BC1D386986450A3F9FC771124BB
Authority key identifier: 39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa
Signing time:             Thu 17 Apr 2025 13:21:09 +0000
ROA not before:           Thu 17 Apr 2025 13:16:09 +0000
ROA not after:            Thu 16 Apr 2026 13:21:09 +0000
asID:                     266176
IP address blocks:        190.196.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl
                          rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 03:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2f:b6:e0:2e:b8:7b:c1:d3:86:98:64:50:a3:f9:fc:77:11:24:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
        Validity
            Not Before: Apr 17 13:16:09 2025 GMT
            Not After : Apr 16 13:21:09 2026 GMT
        Subject: CN=5D8F790D5C2487197A2BED4C7E6ACF4CF4F5C09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:41:fa:6f:ed:c8:2b:ea:63:8f:6a:13:a2:
                    62:50:d0:78:19:86:21:33:8f:6c:48:4d:6d:46:35:
                    3e:ee:ee:95:e6:26:ef:5b:48:bc:94:d6:1b:52:9e:
                    a9:c2:5a:ea:16:ae:74:12:dd:1e:30:9b:32:df:4b:
                    ec:51:28:f9:9a:37:2b:09:42:cd:e5:64:72:6d:ba:
                    e9:a2:cf:fa:f3:8c:5b:a4:0e:80:73:4c:a6:a9:e1:
                    bd:50:2c:f3:ca:4e:a0:92:21:b5:26:fc:e1:e2:93:
                    00:30:09:4d:bc:65:b1:6a:a6:82:13:81:5c:f5:ae:
                    90:fe:61:45:a2:75:7e:a7:46:98:3c:1a:81:27:a0:
                    c2:23:06:c1:38:b7:32:83:d1:c6:40:50:6e:eb:75:
                    d4:8c:1a:a3:42:96:f0:d9:ff:f3:4b:50:c1:8c:21:
                    b0:92:d1:ef:3b:8b:e9:fa:5e:0a:6c:8d:5b:d2:0d:
                    a9:ed:51:48:19:fa:47:be:1e:67:18:48:c3:ae:98:
                    77:b2:6a:d9:67:06:b1:ad:44:dc:5b:3f:42:2f:c4:
                    79:21:7b:9a:27:2c:d4:4a:90:6f:0a:af:1a:4e:b8:
                    2a:8a:11:60:e2:e3:08:6a:68:d0:96:b7:ba:d6:da:
                    c9:5e:75:bf:14:04:54:8b:80:0e:fe:90:07:8c:c4:
                    45:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8F:79:0D:5C:24:87:19:7A:2B:ED:4C:7E:6A:CF:4C:F4:F5:C0:9E
            X509v3 Authority Key Identifier:
                keyid:39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:1f:34:ea:5b:86:57:21:8c:ff:b8:06:a6:ab:90:fc:b6:
         e2:cc:48:6b:59:85:97:32:50:d7:7a:3c:66:11:d7:f9:5b:48:
         7f:78:9f:74:97:0c:b0:ef:fa:94:ec:6f:19:4d:7e:75:bb:45:
         03:2f:b8:08:0f:00:da:62:ab:1e:c6:63:96:8b:a7:d5:09:1a:
         57:bb:28:08:d0:59:1f:81:fd:31:c4:a4:cf:af:61:4d:51:0b:
         75:ad:7f:48:ed:2f:55:fa:f3:fd:b4:fe:11:e5:22:ae:ce:bd:
         0a:44:7a:f7:b0:4f:f8:b7:ce:9f:65:ed:cc:54:b0:62:ab:69:
         2e:29:15:3a:c6:05:0a:c8:b4:c1:9a:b8:ae:62:3a:66:3e:1d:
         ce:93:df:3c:1c:0f:2f:c4:09:be:64:7f:b1:81:77:5d:98:e4:
         de:51:7a:38:07:a8:a4:0f:39:b9:e5:53:98:20:8d:b2:70:7c:
         73:d8:14:8a:12:96:4b:57:5c:2f:63:8c:8a:d8:b4:53:52:21:
         53:45:63:60:38:e7:82:c2:06:59:ab:4c:27:79:92:d6:92:c6:
         26:e2:76:f9:af:49:b1:49:ec:c3:c0:a1:69:52:50:2f:39:d7:
         2f:6b:e6:4a:f1:45:1f:e2:a5:1f:11:b0:21:15:80:13:d3:38:
         0c:dd:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:32:53 2025 by rpki-client