Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139322e302f31392d3332203d3e203533303631.roa
File:                     3139312e3234312e3139322e302f31392d3332203d3e203533303631.roa (raw, json)
Hash identifier:          FxJRcfhxkX+38EBLeFJlj/MahU0S8M4BrC7O3Q+VDUM=
Subject key identifier:   E3:26:E0:33:7A:92:16:82:99:89:02:1B:C5:51:2C:87:F5:D9:BE:76
Certificate issuer:       /CN=06BA6CF66550C30DB2603ABA8A3A8301F6476E61
Certificate serial:       57B38E396F960FD2FD92A362CDB6A45CCDAA60D5
Authority key identifier: 06:BA:6C:F6:65:50:C3:0D:B2:60:3A:BA:8A:3A:83:01:F6:47:6E:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139322e302f31392d3332203d3e203533303631.roa
Signing time:             Thu 06 Mar 2025 19:58:51 +0000
ROA not before:           Thu 06 Mar 2025 19:53:51 +0000
ROA not after:            Thu 05 Mar 2026 19:58:51 +0000
asID:                     53061
IP address blocks:        191.241.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.crl
                          rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 11:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b3:8e:39:6f:96:0f:d2:fd:92:a3:62:cd:b6:a4:5c:cd:aa:60:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06BA6CF66550C30DB2603ABA8A3A8301F6476E61
        Validity
            Not Before: Mar  6 19:53:51 2025 GMT
            Not After : Mar  5 19:58:51 2026 GMT
        Subject: CN=E326E0337A9216829989021BC5512C87F5D9BE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:ca:ee:39:e8:ff:01:08:01:c2:6f:d3:00:
                    49:4f:fc:8a:02:f9:04:9d:b4:cc:95:5e:29:c9:a7:
                    e2:9b:d4:81:f9:9c:7f:d1:dc:00:55:95:f4:99:ec:
                    d2:aa:67:de:2f:e8:a3:a8:cf:c3:e9:3a:51:86:eb:
                    7d:d9:44:19:51:8d:08:32:9b:d5:7c:06:8c:3d:79:
                    c1:cb:78:c0:65:97:1f:94:32:f8:64:51:6d:54:a9:
                    7e:82:65:f6:85:3a:f8:52:75:99:bc:3d:00:31:3a:
                    0a:c5:b0:d5:03:8e:46:83:6e:e5:c4:b3:00:ed:af:
                    4b:88:1e:68:cd:6a:45:72:98:67:4c:02:f3:02:9b:
                    24:ae:a6:34:f8:89:06:4d:e6:66:65:04:0f:66:2f:
                    8e:ff:10:9d:1a:d5:f0:2a:0a:92:b7:54:37:f1:ef:
                    89:46:b6:c0:d3:a4:7a:2a:4c:c0:c0:03:8c:6c:33:
                    63:4d:41:5b:df:fc:0a:5e:2e:8c:09:5e:70:b2:37:
                    9f:37:59:b0:b2:be:b4:83:28:d4:bc:90:85:85:ee:
                    42:1a:d0:ca:72:aa:7f:70:b5:8a:db:ff:05:3a:89:
                    ca:c7:3e:2d:e8:1f:c7:40:a8:d8:ae:ff:32:ba:d9:
                    f3:18:94:ea:61:a2:24:93:16:2d:e9:ac:4a:00:68:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:26:E0:33:7A:92:16:82:99:89:02:1B:C5:51:2C:87:F5:D9:BE:76
            X509v3 Authority Key Identifier:
                keyid:06:BA:6C:F6:65:50:C3:0D:B2:60:3A:BA:8A:3A:83:01:F6:47:6E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06BA6CF66550C30DB2603ABA8A3A8301F6476E61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139322e302f31392d3332203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:40:02:f9:f1:06:d4:2a:5f:8d:32:3e:55:8d:86:88:44:8d:
         57:85:14:f0:d7:37:2b:2c:c2:94:d0:5c:31:90:fe:93:22:ad:
         25:81:57:39:7e:41:a2:1d:13:34:86:99:de:08:c2:e5:35:f7:
         9c:a8:d0:f7:45:77:a3:e2:e5:0c:f9:51:e4:2f:be:62:28:46:
         ec:85:6e:64:84:fb:d5:19:4a:23:b1:ee:0d:ba:1a:4f:74:1d:
         42:e9:9f:28:16:e1:98:5c:4a:f6:ca:d6:67:d8:16:42:2e:a8:
         64:c1:2b:22:e8:3a:37:a2:f0:e0:83:e0:30:c3:7c:d3:ef:cc:
         c1:e6:ba:9f:3a:5c:cb:92:d9:4e:41:ae:63:56:9f:f5:7d:bc:
         26:50:c3:6d:19:18:ff:26:99:95:5d:a6:93:b0:62:03:ad:dd:
         bf:44:6a:15:94:ce:c3:f4:fd:64:34:48:d4:3c:67:75:8e:d1:
         fc:a2:30:0c:c4:f9:b1:35:02:47:f6:b4:1d:70:61:90:7f:5c:
         f9:65:d2:5a:ef:d4:08:21:36:53:3b:6e:0f:ab:7d:d7:7d:fc:
         29:74:df:5c:30:da:72:a6:d7:2c:d9:be:3c:5e:b9:3d:03:6a:
         19:4d:5b:90:03:79:be:65:23:db:f6:65:eb:71:5e:35:74:1e:
         72:27:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:07:21 2025 by rpki-client