Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138302e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3138302e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          AWyYxjnp6v/3rnV9PcWXd0WFDsxTbfY5nunWSmpdCnI=
Subject key identifier:   73:3F:54:73:A3:DD:E0:4A:73:11:C6:49:E3:8A:75:67:53:54:A0:77
Certificate issuer:       /CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
Certificate serial:       160F4D3E0B94AA012BECC268AD04AC864E16E34A
Authority key identifier: 7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138302e302f32342d3234203d3e20323633333639.roa
Signing time:             Sat 01 Feb 2025 21:52:56 +0000
ROA not before:           Sat 01 Feb 2025 21:47:56 +0000
ROA not after:            Sat 31 Jan 2026 21:52:56 +0000
asID:                     263369
IP address blocks:        191.37.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 20:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0f:4d:3e:0b:94:aa:01:2b:ec:c2:68:ad:04:ac:86:4e:16:e3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
        Validity
            Not Before: Feb  1 21:47:56 2025 GMT
            Not After : Jan 31 21:52:56 2026 GMT
        Subject: CN=733F5473A3DDE04A7311C649E38A75675354A077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:33:ea:87:af:d2:4d:4e:44:fa:cf:9e:66:
                    b2:7f:ff:b2:8b:37:c5:1a:3e:12:1f:c6:41:0b:ee:
                    cd:07:52:3b:a0:ee:1b:18:1d:15:19:a0:4e:c8:c5:
                    71:e5:1c:ef:05:ca:cd:23:72:9d:f9:45:ca:62:c9:
                    ae:18:eb:c9:ce:2e:2a:f1:27:97:0a:4e:e9:aa:48:
                    4d:36:4e:c3:0f:bf:bc:c0:0e:d1:82:be:3f:13:ed:
                    8d:1d:5d:b8:8e:06:7e:91:e2:13:de:5e:b7:da:6e:
                    57:f8:12:13:32:cc:f3:dd:90:b2:96:6b:ec:ea:e0:
                    22:11:d3:b3:3d:a7:3f:23:f7:e2:c5:ce:ca:6c:37:
                    54:79:de:f4:25:fa:22:dc:11:c4:26:6c:43:51:65:
                    47:ed:37:52:2f:78:5a:41:92:c9:bf:54:c1:0e:07:
                    5d:08:88:52:85:3e:c6:88:13:d6:b6:70:df:3e:13:
                    0f:ef:50:c7:46:5c:7c:32:64:90:ee:22:0f:cb:c6:
                    06:ea:27:33:e3:dd:0f:be:b5:ce:87:0f:e8:8c:22:
                    1b:81:3a:af:9b:c3:fb:1a:80:39:12:83:56:95:9b:
                    55:22:60:40:09:10:38:31:79:ee:88:08:13:be:6d:
                    60:2e:6d:4a:fd:14:ec:62:f1:91:73:c5:95:bb:35:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3F:54:73:A3:DD:E0:4A:73:11:C6:49:E3:8A:75:67:53:54:A0:77
            X509v3 Authority Key Identifier:
                keyid:7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138302e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:70:b4:e1:68:5c:42:19:4a:a7:85:32:0c:b4:1d:1d:a9:
         4c:3a:40:68:4b:b6:b1:99:f3:e4:4e:63:02:d5:3c:ac:5b:8e:
         cd:a5:8c:38:e4:3d:51:2f:e6:47:ee:02:92:8f:9e:67:cd:ed:
         23:88:ec:5e:61:96:66:4d:94:51:9d:31:cb:0e:5c:1b:dc:91:
         70:ec:7a:bb:d4:c7:c2:d1:61:7b:f0:75:be:25:7e:d7:ff:f3:
         54:66:05:ea:30:47:53:00:09:e0:61:84:d8:cd:c8:dc:39:36:
         b3:02:55:ff:12:f6:ad:7c:ce:30:2a:16:18:ef:df:3b:95:5e:
         d0:ee:98:ba:f9:24:9b:01:14:59:91:39:75:7c:73:1c:41:21:
         5c:e9:15:bf:e7:b4:b7:98:f4:93:90:81:fc:97:93:b4:db:e4:
         2d:24:83:98:2c:d0:36:29:73:6a:fc:27:7d:58:eb:95:47:b4:
         f4:34:9c:51:10:0b:9f:6e:c6:a0:78:36:38:8a:c1:08:41:f7:
         07:4e:da:2e:92:7b:6b:21:18:51:25:13:57:f8:25:49:66:1a:
         b8:61:ef:77:31:c7:30:31:68:c9:0a:1b:5c:b4:5c:21:87:ae:
         a0:ea:d1:28:8f:ab:2e:2e:69:78:58:6e:45:49:c5:12:eb:21:
         29:71:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:14:00 2025 by rpki-client