Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          8L/5UwKPwxLeZxIklZh2fiFhOhfRd/d4n4ZAHU14QEA=
Subject key identifier:   01:DF:E0:ED:15:CD:49:3A:D4:26:DD:B2:A8:32:CE:BB:E9:FB:FA:54
Certificate issuer:       /CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
Certificate serial:       4167CD604F60C7F2E9476A93AB2462CD58255071
Authority key identifier: 7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa
Signing time:             Sat 01 Feb 2025 21:52:56 +0000
ROA not before:           Sat 01 Feb 2025 21:47:56 +0000
ROA not after:            Sat 31 Jan 2026 21:52:56 +0000
asID:                     263369
IP address blocks:        191.37.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 20:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:67:cd:60:4f:60:c7:f2:e9:47:6a:93:ab:24:62:cd:58:25:50:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
        Validity
            Not Before: Feb  1 21:47:56 2025 GMT
            Not After : Jan 31 21:52:56 2026 GMT
        Subject: CN=01DFE0ED15CD493AD426DDB2A832CEBBE9FBFA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:1d:24:ad:f6:26:96:2c:b4:ae:63:b9:e8:
                    bf:97:f8:03:a7:d1:8d:d8:17:6c:13:60:cb:93:76:
                    04:5c:a8:41:37:ae:94:33:b7:a0:e1:f3:2a:00:06:
                    e2:39:56:33:7e:68:92:58:72:3c:e7:b0:7a:eb:b3:
                    f1:ae:ee:36:f1:44:78:d0:f0:86:cd:66:cc:eb:bd:
                    38:df:65:31:18:3d:87:27:27:6d:81:f4:e2:31:d1:
                    73:98:47:04:0e:20:46:9b:c8:1c:33:ab:c0:21:54:
                    ea:56:55:26:9f:92:50:96:e8:19:01:ea:dd:8f:b8:
                    b4:85:22:77:84:45:17:80:5d:9c:90:65:98:48:7f:
                    2c:55:80:59:ca:ed:67:7c:b3:5c:88:6c:a3:20:b6:
                    aa:d5:22:f9:d5:88:e0:65:db:ec:8e:de:ac:25:c2:
                    3b:75:dd:8a:5a:49:fa:ca:a7:0a:35:b5:46:9f:86:
                    1b:28:71:7a:ce:c2:07:f4:01:22:69:f2:21:35:9c:
                    6c:b3:b3:95:c1:bb:a4:42:90:7e:2d:06:ba:75:9c:
                    d7:4c:73:50:98:02:35:8a:97:68:5f:8d:3c:7c:43:
                    ae:b2:b7:b2:77:e9:69:b9:33:0d:f5:86:2b:59:4e:
                    54:b7:02:b3:c5:47:f1:20:14:5f:cf:7a:9c:8e:63:
                    71:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:E0:ED:15:CD:49:3A:D4:26:DD:B2:A8:32:CE:BB:E9:FB:FA:54
            X509v3 Authority Key Identifier:
                keyid:7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:82:9f:e8:a6:60:fb:87:60:94:ad:72:a6:df:05:4c:02:
         45:2e:53:14:d4:34:fd:e3:2a:14:66:6f:82:0c:25:a6:05:e6:
         55:fc:a4:1f:9f:20:4d:31:fe:79:59:22:71:18:a9:b8:90:9a:
         25:42:a3:fd:cc:cd:7a:c6:47:7b:80:eb:f6:ac:c2:6f:11:d3:
         f6:9e:4b:4e:ff:b1:a6:8d:59:6d:2a:92:5c:a0:d0:39:ab:83:
         e8:5a:04:33:da:10:91:58:85:d0:57:90:7e:95:b9:1d:19:ca:
         0e:07:36:02:24:18:81:3d:29:19:29:81:bd:2f:bc:53:c6:b9:
         be:e8:1b:57:ae:a8:4f:3a:a1:7a:f1:57:50:d8:46:6a:77:1d:
         85:f2:eb:02:42:f2:5b:c3:ec:df:b7:97:6a:2d:7b:11:7b:8c:
         0f:f1:b8:ba:33:51:4d:6d:e7:99:70:4e:ae:bd:ea:a6:ae:f7:
         67:80:1b:ee:02:ed:ee:62:a5:20:29:35:fc:85:51:dd:89:12:
         c3:a8:6b:33:16:34:4b:af:f3:53:11:c7:30:13:8b:ce:57:9f:
         b5:7a:94:88:ae:48:88:ec:dc:3f:ab:78:68:98:84:86:b0:50:
         21:c3:df:df:c0:ff:e5:33:99:48:5f:25:a9:7e:50:d6:64:4b:
         ff:f6:3a:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQWfNYE9gx/LpR2qTqyRizVglUHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y5RkExRjI4RENBMDY5OEIzRUMxODM2NEE2NEVFODgy
ODQwMzFBMzAeFw0yNTAyMDEyMTQ3NTZaFw0yNjAxMzEyMTUyNTZaMDMxMTAvBgNV
BAMTKDAxREZFMEVEMTVDRDQ5M0FENDI2RERCMkE4MzJDRUJCRTlGQkZBNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdR0krfYmliy0rmO56L+X+AOn
0Y3YF2wTYMuTdgRcqEE3rpQzt6Dh8yoABuI5VjN+aJJYcjznsHrrs/Gu7jbxRHjQ
8IbNZszrvTjfZTEYPYcnJ22B9OIx0XOYRwQOIEabyBwzq8AhVOpWVSafklCW6BkB
6t2PuLSFIneERReAXZyQZZhIfyxVgFnK7Wd8s1yIbKMgtqrVIvnViOBl2+yO3qwl
wjt13YpaSfrKpwo1tUafhhsocXrOwgf0ASJp8iE1nGyzs5XBu6RCkH4tBrp1nNdM
c1CYAjWKl2hfjTx8Q66yt7J36Wm5Mw31hitZTlS3ArPFR/EgFF/PepyOY3HFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAd/g7RXNSTrUJt2yqDLOu+n7+lQwHwYDVR0j
BBgwFoAUf5+h8o3KBpiz7Bg2SmTuiChAMaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODE4a1lFY3lXb2h4UzlLYWF0d3prZFU1SEh6ZVk2UnA0Qzg3dnBCMzNT
bVEvMS83RjlGQTFGMjhEQ0EwNjk4QjNFQzE4MzY0QTY0RUU4ODI4NDAzMUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGOUZBMUYyOERDQTA2OThC
M0VDMTgzNjRBNjRFRTg4Mjg0MDMxQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxOGtZRWN5V29oeFM5S2FhdHd6a2RVNUhIemVZNlJwNEM4N3ZwQjMzU21RLzEv
MzEzOTMxMmUzMzM3MmUzMTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JbUwDQYJKoZIhvcNAQELBQADggEBADitgp/o
pmD7h2CUrXKm3wVMAkUuUxTUNP3jKhRmb4IMJaYF5lX8pB+fIE0x/nlZInEYqbiQ
miVCo/3MzXrGR3uA6/aswm8R0/aeS07/saaNWW0qklyg0Dmrg+haBDPaEJFYhdBX
kH6VuR0Zyg4HNgIkGIE9KRkpgb0vvFPGub7oG1euqE86oXrxV1DYRmp3HYXy6wJC
8lvD7N+3l2otexF7jA/xuLozUU1t55lwTq696qau92eAG+4C7e5ipSApNfyFUd2J
EsOoazMWNEuv81MRxzATi85Xn7V6lIiuSIjs3D+reGiYhIawUCHD39/A/+UzmUhf
Jal+UNZkS//2OsM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:32 2025 by rpki-client