Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/3139302e38392e31382e302f32332d3234203d3e20323730343335.roa
File:                     3139302e38392e31382e302f32332d3234203d3e20323730343335.roa (raw, json)
Hash identifier:          fJqLINGfJLKHhdGQXpHx+OwRT0q2GMaECr3bGROBpUo=
Subject key identifier:   87:7C:97:10:18:0B:5F:44:4A:49:CF:CE:8F:1F:70:64:F4:DC:A5:1D
Certificate issuer:       /CN=5DE550D452A79633C6AEF9931F09B9424440FD65
Certificate serial:       265A3100F00207D7414428EED0AE6F00447BFA18
Authority key identifier: 5D:E5:50:D4:52:A7:96:33:C6:AE:F9:93:1F:09:B9:42:44:40:FD:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DE550D452A79633C6AEF9931F09B9424440FD65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/3139302e38392e31382e302f32332d3234203d3e20323730343335.roa
Signing time:             Mon 31 Mar 2025 12:52:25 +0000
ROA not before:           Mon 31 Mar 2025 12:47:25 +0000
ROA not after:            Mon 30 Mar 2026 12:52:25 +0000
asID:                     270435
IP address blocks:        190.89.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.crl
                          rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DE550D452A79633C6AEF9931F09B9424440FD65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5a:31:00:f0:02:07:d7:41:44:28:ee:d0:ae:6f:00:44:7b:fa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DE550D452A79633C6AEF9931F09B9424440FD65
        Validity
            Not Before: Mar 31 12:47:25 2025 GMT
            Not After : Mar 30 12:52:25 2026 GMT
        Subject: CN=877C9710180B5F444A49CFCE8F1F7064F4DCA51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:c0:29:e0:2b:cd:12:85:cd:5f:27:30:e8:
                    49:c0:ca:f1:cd:e6:bd:73:39:2c:72:20:40:58:c4:
                    8d:f2:99:7f:b9:9e:e6:fc:ba:11:05:ce:06:fc:90:
                    fe:a0:37:56:b5:8f:2e:17:75:4c:9d:e5:ce:26:ac:
                    30:9c:f2:ca:6e:fb:20:83:ed:28:ea:e8:25:0d:ea:
                    58:77:3f:bd:b6:fe:07:92:22:e2:3f:44:bb:72:ef:
                    f5:f6:94:3a:6d:4a:a5:62:43:fb:5a:92:3c:c8:43:
                    6e:a9:2e:1b:c8:3a:41:e9:79:32:30:10:0b:f8:0e:
                    fd:64:c0:cc:47:df:ac:4e:ba:a2:4d:72:07:f5:4f:
                    cd:6d:68:87:fd:9d:b0:d1:30:a7:a6:b3:17:68:f4:
                    d9:24:a7:4e:95:96:02:f5:c8:ac:08:25:fd:f6:be:
                    d1:ae:04:6c:3b:0c:86:9f:6a:16:df:ea:20:bd:ae:
                    ac:47:28:57:0b:e2:46:eb:19:2f:e1:c6:11:83:d3:
                    0a:c1:c6:f6:04:e3:11:29:ca:fa:e1:af:d3:fa:1c:
                    9d:b4:8b:04:2c:69:b1:6b:db:8b:38:d3:4a:ed:62:
                    2c:81:5a:a7:02:3c:3e:78:78:f0:bb:da:8d:b9:65:
                    d8:c4:f6:a3:2b:09:37:46:34:75:62:e9:15:80:8d:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:97:10:18:0B:5F:44:4A:49:CF:CE:8F:1F:70:64:F4:DC:A5:1D
            X509v3 Authority Key Identifier:
                keyid:5D:E5:50:D4:52:A7:96:33:C6:AE:F9:93:1F:09:B9:42:44:40:FD:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DE550D452A79633C6AEF9931F09B9424440FD65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/3139302e38392e31382e302f32332d3234203d3e20323730343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:51:71:97:9b:99:c8:f3:f3:2e:78:f4:dc:70:25:b3:ba:9f:
         48:f0:0d:c2:9c:07:35:21:8d:8e:f7:87:44:40:ef:c3:37:27:
         2b:6e:30:db:ab:27:80:ce:a0:bf:bd:03:ca:65:da:61:7f:59:
         ed:5c:62:dc:9e:52:9a:98:54:55:a4:8f:1f:6b:d2:d5:d2:ab:
         a3:6b:39:e4:df:e3:67:96:f6:3f:fb:0f:13:f9:dc:ff:cc:d3:
         d0:af:6a:db:97:75:6a:a8:f7:d0:f1:77:a2:96:f4:3b:b5:1e:
         0d:25:56:4b:ad:9c:4f:42:5f:d7:aa:b3:f5:19:a2:e7:bd:6b:
         d7:20:0d:cb:02:8a:49:6f:2c:36:88:a8:8d:45:dd:fc:af:a1:
         3f:67:0d:31:a4:9f:d0:d7:bb:87:be:05:f2:e9:f7:31:4b:7d:
         d6:b8:6c:45:61:70:05:07:b1:f9:32:20:c3:7f:94:3b:a9:5b:
         80:a9:c8:5c:a0:e4:50:ea:f0:4b:f4:a3:14:ec:8a:27:c1:03:
         eb:67:4c:44:d1:07:30:4a:5c:33:15:d4:f4:eb:25:ab:92:7c:
         1a:a9:9a:f8:34:a5:8c:ad:96:42:5f:39:a2:76:f5:27:77:07:
         c3:df:f1:f1:3d:29:f9:3f:e4:1d:01:dc:46:75:d0:45:87:fd:
         bc:6e:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:49 2025 by rpki-client