Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3134332e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          UA9ryDjztaoKThTz8chXqPYwKMNq4It4tOxlAK+gybg=
Subject key identifier:   9F:CD:3D:82:C9:51:02:7F:2A:2A:66:0C:F7:F2:6C:4F:74:74:9D:50
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       7C838747A27DCD7C05015BE373F1DE95EE7EC199
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:06:19 +0000
ROA not before:           Fri 07 Mar 2025 19:01:19 +0000
ROA not after:            Fri 06 Mar 2026 19:06:19 +0000
asID:                     22381
IP address blocks:        201.87.143.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:83:87:47:a2:7d:cd:7c:05:01:5b:e3:73:f1:de:95:ee:7e:c1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:01:19 2025 GMT
            Not After : Mar  6 19:06:19 2026 GMT
        Subject: CN=9FCD3D82C951027F2A2A660CF7F26C4F74749D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:0c:65:3e:8f:41:31:06:e2:c2:22:59:eb:
                    79:64:b5:20:7d:b3:11:d4:48:69:4d:8a:8e:3d:47:
                    49:b8:f3:36:6e:45:05:f4:0d:7a:c1:d4:08:6d:60:
                    90:52:95:80:51:97:b5:61:a6:f7:de:e7:75:f1:b0:
                    19:0c:c0:09:bd:da:d4:3c:d3:b2:0b:68:89:f6:cf:
                    26:34:bf:2e:47:a5:d0:80:1e:45:fb:a0:5d:d0:87:
                    d7:c3:c1:14:c6:82:7b:9a:0b:b9:26:0b:81:12:07:
                    41:70:3e:e3:04:4d:08:ed:9c:a5:3d:22:45:31:df:
                    5d:e8:9c:1d:1e:d4:eb:dc:73:4a:78:5a:79:aa:41:
                    b8:62:36:3a:93:1a:d4:08:39:8a:94:47:48:f5:7b:
                    96:20:0b:99:87:12:38:32:39:81:7b:41:6b:93:a9:
                    6f:a3:81:83:b3:6e:04:d9:1f:79:60:f4:00:4f:dc:
                    5c:28:61:a1:80:67:b8:d5:13:4a:b6:00:2e:a7:13:
                    77:05:74:f7:a9:36:cf:f2:88:d1:70:ba:11:55:31:
                    c9:5c:2b:db:71:4f:21:f6:21:8b:3b:6e:8d:b3:a3:
                    d9:b6:1c:62:57:8a:8c:39:5a:ee:4f:12:0f:f1:8f:
                    03:ce:43:3f:f8:9e:4e:36:37:c1:e9:77:7d:ba:ec:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CD:3D:82:C9:51:02:7F:2A:2A:66:0C:F7:F2:6C:4F:74:74:9D:50
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:59:20:b9:98:21:ba:6e:05:61:74:99:e6:ff:26:4f:d0:
         a1:75:90:b2:00:f4:87:ae:a1:bd:09:fa:e0:7a:c5:97:1c:c1:
         ec:f9:b3:91:77:2a:3a:27:12:36:a1:d3:b2:16:b9:fd:08:2d:
         3d:de:d8:21:56:13:6c:c3:a0:1e:43:b3:18:bb:da:0c:7c:b8:
         44:04:ec:0a:d8:82:94:a2:d5:3d:7d:65:4e:00:39:0b:03:98:
         e1:a5:41:b1:cf:81:06:a2:12:06:83:c6:7e:f5:f1:29:d6:67:
         cb:81:33:ed:2b:40:67:1f:79:dc:6f:56:cc:7e:c4:74:d3:33:
         3b:6d:1a:0e:c6:dd:77:00:84:4e:f7:b2:aa:5b:9d:48:7f:f4:
         e9:09:2a:27:45:08:95:ef:d3:ca:10:5c:68:ce:4f:74:43:76:
         eb:ac:70:0d:3c:5e:7f:9e:a6:93:dd:ea:c8:71:51:2f:1f:8e:
         a4:ab:9c:31:98:82:3d:c9:83:87:dc:46:61:eb:30:9d:94:22:
         79:28:e2:72:d4:a8:df:b4:51:08:2c:d3:1f:d6:0e:5d:17:f2:
         70:dd:2b:82:2e:d1:77:8f:f5:5c:ea:82:28:11:57:72:f0:32:
         25:76:50:20:c0:d1:bc:73:84:da:df:38:de:ae:b2:d9:19:0a:
         76:1d:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:06 2025 by rpki-client