Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          fPlSnZGwlk45NgQUcJOvHLwKFlJLuMkPDoK/9sGQ86I=
Subject key identifier:   13:65:B8:B3:B1:74:15:FB:B8:4F:1D:B1:B8:71:2D:9A:C7:40:91:74
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       7DB3DE1198B85C40104442B880FEB3EEAB982A69
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 27 Feb 2025 15:58:06 +0000
ROA not before:           Thu 27 Feb 2025 15:53:06 +0000
ROA not after:            Thu 26 Feb 2026 15:58:06 +0000
asID:                     263508
IP address blocks:        191.243.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b3:de:11:98:b8:5c:40:10:44:42:b8:80:fe:b3:ee:ab:98:2a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Feb 27 15:53:06 2025 GMT
            Not After : Feb 26 15:58:06 2026 GMT
        Subject: CN=1365B8B3B17415FBB84F1DB1B8712D9AC7409174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:8e:47:d8:97:f8:ec:ac:40:31:73:ba:49:
                    dd:e4:7d:e0:da:b1:a7:93:e2:ba:5f:3c:c1:c0:9f:
                    51:5c:45:cd:97:71:4e:f7:65:7f:29:6b:4f:7c:34:
                    56:8a:63:85:77:60:1d:b6:45:5f:a1:ed:f1:c5:b5:
                    9f:c1:34:42:37:9e:d0:64:0f:92:e2:19:2c:50:94:
                    c2:23:5b:d7:92:a7:96:9d:a3:6f:6a:5d:cd:d7:cc:
                    cd:11:f4:45:de:f4:0d:7f:af:93:24:cb:e8:e4:eb:
                    b9:a5:65:6e:2c:0c:19:d6:53:29:04:3d:10:2b:6d:
                    4c:f1:bc:55:3d:df:b4:8b:89:0a:ff:00:f6:f3:de:
                    d7:19:12:2d:59:61:6c:b1:6d:9c:68:74:8a:06:58:
                    4e:27:52:18:d2:48:ea:7e:23:6c:77:d2:49:9b:23:
                    dc:7f:ec:e8:fd:1f:e1:82:20:7a:cf:0f:f1:ac:4a:
                    3b:6c:67:5f:6a:5c:05:25:15:8b:72:69:0c:a7:9a:
                    71:71:97:51:e8:ef:6d:15:98:c7:64:ae:03:b2:c1:
                    05:fa:a1:91:c4:cd:51:a0:01:5c:fc:1c:4a:db:4a:
                    da:35:29:54:bd:17:b8:81:05:6b:c6:3b:b1:f2:c4:
                    9b:1c:31:fd:33:e9:a6:c5:97:3e:4d:ec:cc:1f:79:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:B8:B3:B1:74:15:FB:B8:4F:1D:B1:B8:71:2D:9A:C7:40:91:74
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:8e:86:b8:5a:4b:59:80:68:59:11:cc:9d:00:c7:02:0f:1a:
         16:1a:f5:85:1b:42:42:52:2b:9c:1a:b1:82:96:38:78:3c:d1:
         85:e3:ac:a1:28:d6:ae:ed:e2:a9:99:71:88:e0:c0:60:7f:bb:
         b0:b9:3b:d1:27:3c:b7:92:23:37:6c:07:c8:c3:b8:d8:5c:93:
         70:42:54:1d:07:b9:48:93:40:55:4a:d5:3e:b3:f5:7f:4d:28:
         ab:05:09:8b:9d:cd:0d:b4:4e:11:22:85:4c:76:2f:4b:ec:d7:
         47:00:ad:88:8c:b5:c9:92:60:46:ff:35:30:3d:15:21:f6:c9:
         69:10:07:ee:fb:38:27:1a:3f:fe:44:5f:34:15:cd:fd:3a:83:
         cc:a1:13:26:25:35:88:0d:d7:53:e8:af:bf:22:92:da:03:1a:
         c9:5c:76:fa:ae:1d:db:1d:48:ed:fc:3c:56:01:d7:78:6d:71:
         7d:f0:40:21:86:cb:ff:f6:47:0d:c5:4d:c3:c4:6a:9f:ed:ca:
         2a:cd:aa:e9:e6:ba:b3:3b:4d:72:1e:45:1f:7e:fa:1a:ca:92:
         05:d5:c5:18:8e:ed:f3:cf:1a:11:3f:39:9a:a5:1a:63:d8:6f:
         fb:af:db:de:49:2f:6d:26:ae:a0:9e:de:a6:a4:f4:da:ea:d2:
         63:bc:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:16 2025 by rpki-client