Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa
File:                     3138392e35302e3131322e302f32302d3332203d3e203238333239.roa (raw, json)
Hash identifier:          6tS/deLFtCxU/vjl7gIWmsKaz7d0e/E6+dnAakjUook=
Subject key identifier:   C9:9A:57:6E:BF:F8:53:B7:7D:89:18:38:EC:4C:1A:37:29:F2:5F:88
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       78B29E85AA1F3A4EE76CEF1BAC8085F0A1BD12CA
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa
Signing time:             Fri 07 Mar 2025 19:01:50 +0000
ROA not before:           Fri 07 Mar 2025 18:56:50 +0000
ROA not after:            Fri 06 Mar 2026 19:01:50 +0000
asID:                     28329
IP address blocks:        189.50.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b2:9e:85:aa:1f:3a:4e:e7:6c:ef:1b:ac:80:85:f0:a1:bd:12:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 18:56:50 2025 GMT
            Not After : Mar  6 19:01:50 2026 GMT
        Subject: CN=C99A576EBFF853B77D891838EC4C1A3729F25F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ed:0e:a8:31:2e:3a:bf:4d:a2:05:1e:96:83:
                    9c:9b:c3:40:87:f6:da:ae:4a:36:80:7d:2a:00:93:
                    ae:5e:50:ec:4a:da:e4:2e:cf:e6:66:c1:a2:8b:1b:
                    6b:bd:7d:6d:25:41:e2:d5:88:e9:9f:c3:5d:a5:05:
                    e6:5c:4c:bd:b9:03:a3:1d:64:53:1f:dd:d7:4e:ed:
                    59:60:32:34:c9:34:b2:d5:e8:b9:2a:ab:ee:8e:ff:
                    6b:6f:fa:32:62:dd:cf:3b:2e:1f:31:af:0a:f5:de:
                    f6:0f:b8:12:82:d6:b3:96:0d:f4:35:35:d5:59:6a:
                    cf:58:34:36:e1:9d:86:6d:39:6c:d7:c6:c3:e6:fd:
                    c0:61:f0:fa:0b:19:06:1b:a4:02:7a:70:6f:fe:78:
                    42:07:7d:d8:84:12:10:50:1d:be:22:ff:c0:6a:ca:
                    93:31:13:d7:03:ec:6e:02:85:96:b4:fb:e8:80:a1:
                    f1:1b:bb:0d:e6:06:ca:62:b5:f1:4d:93:6d:63:b6:
                    0c:da:a0:5c:e7:ce:ee:a4:e9:73:d9:a1:e9:e3:97:
                    ab:0c:36:5b:ae:62:39:b1:d4:ee:74:58:e4:16:5d:
                    dc:09:d4:02:04:cc:2f:66:d5:4a:74:e0:4f:77:80:
                    80:b0:df:27:0b:79:d8:88:86:6d:20:f1:18:17:f5:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9A:57:6E:BF:F8:53:B7:7D:89:18:38:EC:4C:1A:37:29:F2:5F:88
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:8d:fe:d4:19:7f:b0:ab:39:e9:c4:2d:78:6d:21:de:12:a3:
         e6:5d:07:93:a3:90:16:03:90:70:e4:4a:a7:59:38:ab:95:56:
         58:b8:f4:8c:6d:a0:9d:ab:d3:7f:b9:fc:a2:d9:5f:5a:bb:a8:
         cf:63:4f:25:ca:f3:d6:ce:cd:c7:1d:be:88:cb:e6:80:e0:8d:
         91:8d:03:19:d0:2a:16:50:26:3e:a9:29:1c:90:ad:d9:56:c0:
         7c:12:e0:6b:d7:45:14:ae:c2:52:6b:84:ba:20:1d:c9:05:e3:
         1a:c7:26:57:59:42:83:e0:f7:20:e6:e3:64:02:3e:cd:60:58:
         a9:97:6f:c7:4c:47:46:86:b8:d5:20:63:fd:cb:05:61:3b:3a:
         d6:bd:51:29:0f:ff:83:b9:8d:ac:a0:11:08:ac:3e:9c:c9:e7:
         17:03:07:a1:d1:16:c0:5b:21:f0:e7:a8:53:e9:e1:c7:21:95:
         92:09:74:8f:73:2e:19:f3:e0:f0:6e:b4:fc:ac:5f:06:5f:23:
         12:ab:d4:b7:a2:c5:49:ee:29:50:6c:ce:7a:ab:9c:e0:0f:82:
         69:1f:47:d8:59:a6:9a:65:df:d2:e6:18:20:e3:65:42:24:72:
         47:c8:6b:23:4a:45:85:a3:36:fa:f2:1d:e7:61:e8:1b:b2:ac:
         15:a6:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:40:12 2025 by rpki-client