Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa
File:                     3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa (raw, json)
Hash identifier:          FVXKKNAA8VCSe1BKVXMeOyg8/njTfpvCwcRgG8pxsnU=
Subject key identifier:   11:4B:BE:C9:66:F0:D4:F4:79:30:75:5A:14:8D:FF:45:EE:84:92:1F
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       2308246FFC5F3F76540A1185C30B1EE50D1BF5CB
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa
Signing time:             Thu 06 Mar 2025 06:25:48 +0000
ROA not before:           Thu 06 Mar 2025 06:20:48 +0000
ROA not after:            Thu 05 Mar 2026 06:25:48 +0000
asID:                     263474
IP address blocks:        191.242.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:08:24:6f:fc:5f:3f:76:54:0a:11:85:c3:0b:1e:e5:0d:1b:f5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Mar  6 06:20:48 2025 GMT
            Not After : Mar  5 06:25:48 2026 GMT
        Subject: CN=114BBEC966F0D4F47930755A148DFF45EE84921F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:71:81:76:0b:83:a6:f1:c7:98:c6:72:1a:
                    aa:0d:68:7a:cb:8f:0a:54:67:95:0d:5c:e3:dd:10:
                    f6:8e:17:8f:31:04:c9:d5:83:8e:89:b5:53:b5:56:
                    ef:78:01:ca:4a:22:cc:cc:35:5d:a8:ea:5e:df:0f:
                    c7:b1:01:b7:ac:a3:70:d0:ec:51:9a:84:33:7f:f1:
                    44:23:22:c7:ec:3c:4a:7b:d3:9b:11:fe:ea:73:6f:
                    18:6a:82:a4:3f:b1:be:df:83:4a:a0:1d:1b:fd:8f:
                    46:75:65:15:46:2b:f1:a4:84:59:04:68:74:92:93:
                    b7:4b:27:b0:a5:eb:86:eb:e1:71:1b:c7:cb:2a:7a:
                    92:09:55:f4:e7:f8:38:86:d0:a7:c0:17:9e:d9:91:
                    51:b3:72:17:22:94:1f:c5:e1:4c:b1:bc:d1:73:8f:
                    41:e6:52:3e:82:5c:84:26:ad:41:09:b0:3d:66:e3:
                    f5:66:90:ca:31:93:50:4b:50:ce:c8:0d:f4:e1:3a:
                    1c:c9:20:6f:da:04:fb:e0:92:87:81:d2:b3:12:d3:
                    c2:20:65:5b:88:e0:5e:9b:49:a6:e4:74:a2:74:22:
                    3d:1f:c4:7b:dc:20:e6:0a:79:d1:ea:30:d5:76:a7:
                    76:98:22:f8:6a:ce:2f:3f:56:8e:7a:c3:c9:ff:12:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4B:BE:C9:66:F0:D4:F4:79:30:75:5A:14:8D:FF:45:EE:84:92:1F
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:33:38:62:e8:51:fd:c6:39:0b:c4:9c:3d:f9:b6:1b:c7:b2:
         65:e7:9a:a8:38:0f:51:d5:72:04:13:08:0b:38:8d:9e:1a:fc:
         9d:04:0b:43:bd:8a:08:e2:1d:00:f0:9d:5e:82:de:fb:46:5d:
         f9:dd:53:71:5f:6f:78:68:14:9f:0f:9a:c5:df:fb:61:9d:a2:
         71:ba:41:1a:de:17:1f:49:7d:a1:80:0c:48:e0:47:05:41:36:
         3f:c9:15:69:64:ae:a1:01:3a:56:78:14:41:58:7c:b6:71:3f:
         61:f4:72:29:a7:60:62:c4:58:2a:df:21:ac:a1:cd:79:20:d6:
         f2:1f:4a:54:00:c9:06:d9:f3:5a:e3:6a:0e:40:bf:4f:c5:16:
         14:d3:14:e9:22:f6:cb:33:b9:40:e4:db:b8:f6:53:73:28:bc:
         6b:38:67:a8:c8:2b:f5:59:75:97:7b:53:ca:ba:48:14:76:15:
         e2:4e:de:b7:e8:3d:f3:bc:6f:79:f9:37:29:8b:fa:95:0f:c2:
         9e:47:76:b3:8d:4c:27:e4:26:9a:5c:8b:2d:42:93:7b:da:e0:
         08:54:ba:10:66:b2:f9:1b:66:9a:00:45:15:77:39:55:aa:8d:
         37:dc:c9:6e:6e:02:88:d6:da:e4:62:16:cc:3e:98:53:77:05:
         fd:13:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:32 2025 by rpki-client