Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa
File:                     3139312e3234332e38392e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          q6Kol+pSnYq/Zz2V3jOrad4nsHDFo1Lxl/U89k7xD8M=
Subject key identifier:   F9:29:3F:1E:0D:19:EB:65:A3:92:76:89:87:3C:36:AB:72:5F:13:EE
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       0877D85E63D0C64066D3B1288ADD155731E98175
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:14 +0000
ROA not before:           Thu 06 Mar 2025 04:37:14 +0000
ROA not after:            Thu 05 Mar 2026 04:42:14 +0000
asID:                     28210
IP address blocks:        191.243.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:77:d8:5e:63:d0:c6:40:66:d3:b1:28:8a:dd:15:57:31:e9:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:14 2025 GMT
            Not After : Mar  5 04:42:14 2026 GMT
        Subject: CN=F9293F1E0D19EB65A3927689873C36AB725F13EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:63:d7:c2:89:fb:c9:c7:e4:fe:a7:2a:24:
                    38:c6:13:51:c4:87:5b:3b:08:90:f8:1c:ac:fe:6d:
                    2d:96:28:5c:0e:0c:86:64:45:2f:b1:e7:ef:3b:93:
                    9e:10:f6:77:e7:d2:ea:f8:47:8b:a0:4e:37:6e:cc:
                    72:b3:de:97:c4:09:2b:c6:46:2b:05:4a:0e:7a:91:
                    a6:2d:a1:63:f4:b2:c1:8d:3d:5f:b2:cb:c3:ce:3e:
                    6b:67:fa:ec:41:f6:c9:48:f2:5a:cb:69:f8:0b:66:
                    56:45:a6:e6:19:0c:2e:66:cf:b6:7b:68:3f:47:a6:
                    b1:27:04:ab:b5:fe:2c:52:47:b2:38:56:c8:5d:d0:
                    e1:ca:d3:73:3d:60:04:fa:14:13:90:5b:40:b3:4e:
                    1d:58:7b:5e:3e:71:25:79:f2:ea:cd:c0:40:24:31:
                    35:71:88:43:b3:b0:6b:97:02:64:49:b0:a6:21:28:
                    1e:28:4d:ad:f0:d7:48:3a:94:cf:ac:a2:de:a7:f9:
                    1b:95:7f:12:17:8d:60:5b:03:f5:14:84:82:51:ce:
                    18:de:11:6b:35:02:90:83:84:aa:c8:77:1d:06:79:
                    14:d0:ed:8c:47:29:8a:22:db:8e:2f:5b:6c:72:b6:
                    d0:26:df:6c:37:5c:37:5a:66:02:72:f2:cd:ae:50:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:3F:1E:0D:19:EB:65:A3:92:76:89:87:3C:36:AB:72:5F:13:EE
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:32:8f:16:b2:05:59:f0:39:f0:a2:f3:e1:c7:63:6a:9c:
         ec:8e:11:12:53:af:73:04:0f:5d:be:67:f7:fe:7e:da:77:ca:
         9e:16:ab:4a:33:31:76:9c:b5:08:ef:de:1b:69:7a:63:ed:4e:
         01:e3:2c:63:61:58:08:b2:0e:42:d0:ca:90:d2:64:9e:43:42:
         fa:f5:52:52:49:71:94:92:44:09:4a:39:e6:e9:37:f3:0a:40:
         d2:f2:f9:e2:cd:05:77:de:bd:41:fc:4b:0e:e3:3f:73:df:99:
         9f:61:3a:0b:04:16:12:37:9b:8e:13:f0:02:53:c7:fa:d9:1d:
         4f:ab:5e:64:18:a0:03:80:cd:ef:ec:ca:22:c6:e9:2e:47:00:
         69:b0:49:db:b7:86:d5:7e:4b:31:50:71:64:80:b5:23:ee:1e:
         9f:3a:22:8d:36:26:f8:06:f5:27:05:93:29:91:03:f5:d1:f8:
         13:f7:d1:fd:58:66:77:76:ec:ab:c5:7b:15:ed:44:5d:88:ca:
         94:4c:aa:e9:e3:a1:45:20:3a:84:08:a0:ce:97:f6:f1:ec:40:
         0c:7a:0e:c5:c7:4e:40:0f:cb:27:22:6f:b7:17:0a:04:9c:f4:
         d8:13:cf:51:30:4b:ca:5b:fd:17:61:41:0d:96:69:e7:bd:b4:
         46:d9:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:50:10 2025 by rpki-client