Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          xHFZEnrBR+ggnwOC4QfCrZ727LomaJt6hnKmpCP3xLk=
Subject key identifier:   20:42:FA:23:5E:C6:7C:DF:0A:A6:A1:19:BC:F7:89:AB:B5:76:B4:87
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       382C35605CBCBE807095092FD035627F7D2B5DC1
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa
Signing time:             Thu 06 Mar 2025 06:25:49 +0000
ROA not before:           Thu 06 Mar 2025 06:20:49 +0000
ROA not after:            Thu 05 Mar 2026 06:25:49 +0000
asID:                     263474
IP address blocks:        191.242.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2c:35:60:5c:bc:be:80:70:95:09:2f:d0:35:62:7f:7d:2b:5d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Mar  6 06:20:49 2025 GMT
            Not After : Mar  5 06:25:49 2026 GMT
        Subject: CN=2042FA235EC67CDF0AA6A119BCF789ABB576B487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:eb:93:c9:7c:e4:a5:4a:39:e6:b1:c3:08:
                    74:e4:e7:66:4e:bd:ed:98:fe:c4:b1:c5:be:7a:f7:
                    fd:7a:f3:cb:d2:55:c0:11:24:2d:2e:06:1a:4f:81:
                    37:5e:88:cc:07:73:e9:65:58:4d:56:70:04:58:95:
                    4c:74:2b:6a:52:c7:60:c5:56:66:5c:f5:b9:aa:99:
                    ed:16:34:4e:72:6c:75:9b:35:bb:77:1e:02:b6:75:
                    89:b4:d4:7b:69:f6:0b:5b:2a:73:6a:f2:e5:8c:90:
                    b4:84:83:e8:17:03:4a:a4:02:d3:a7:ea:b2:5f:0d:
                    4c:1e:d9:e3:57:b6:4c:4b:c9:6c:d4:d4:37:cd:7a:
                    f2:43:2d:f7:40:77:c5:8c:62:a0:86:6d:c3:16:dc:
                    b9:db:be:c6:bb:5a:ab:da:4c:ce:19:56:7b:68:ba:
                    1a:b5:93:26:41:92:12:a4:97:72:ec:f0:cb:b8:d5:
                    88:af:7a:58:f6:cd:4c:a4:35:9b:29:e3:70:64:c5:
                    b1:af:cd:dd:c3:13:3e:ae:d9:2c:42:6b:d7:83:36:
                    79:c3:d2:da:bb:1f:b8:21:44:93:6f:e7:f3:f9:47:
                    08:bc:20:c3:78:38:67:29:d8:11:1d:b3:aa:33:ee:
                    ac:eb:8b:b7:18:36:bc:9c:e3:fd:76:de:7a:3d:c2:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:42:FA:23:5E:C6:7C:DF:0A:A6:A1:19:BC:F7:89:AB:B5:76:B4:87
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c0:ce:89:eb:de:bc:37:cd:3c:6d:d3:4e:99:f7:da:e1:4f:
         c9:93:2b:88:ba:d9:30:73:0e:e7:78:c0:90:53:2e:bd:8c:07:
         a6:16:39:b8:d8:a9:0b:08:89:38:10:11:3e:20:63:7d:7d:34:
         6c:08:25:78:e4:a8:4f:4b:95:a5:f9:dd:d5:f8:36:0a:be:cc:
         9a:d6:94:97:c1:fe:61:c0:f5:1a:d2:b7:42:49:76:a1:2f:3f:
         db:e6:0e:50:62:f5:54:f1:08:3f:2f:4e:41:df:13:1c:94:10:
         71:3f:85:48:b3:85:18:f1:9d:cf:ec:1f:6b:d9:78:98:0a:03:
         db:0d:ee:a2:df:19:6a:8e:99:d1:e7:85:ae:d5:e8:21:d5:32:
         ed:78:94:5a:96:de:3c:55:06:e0:a3:2e:bb:27:fe:c5:4c:94:
         0f:a7:db:54:c6:2a:3b:b2:a3:76:f9:35:ec:28:03:5d:7b:35:
         6b:85:a5:69:8c:bf:04:0e:15:42:0c:ba:45:db:d4:fd:3c:13:
         cb:5d:88:df:43:b4:ad:72:b3:a9:3a:e0:fe:1c:93:ce:80:0e:
         ec:47:16:1a:2e:8b:b3:58:f6:fd:72:b1:01:49:6c:65:a7:2c:
         ea:21:e9:25:0b:6d:c4:eb:2b:72:ca:c5:60:84:28:16:0b:0e:
         8a:98:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:04 2025 by rpki-client