Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/3138392e34352e3136302e302f32302d3332203d3e203631393337.roa
File:                     3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (raw, json)
Hash identifier:          XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=
Subject key identifier:   25:B2:C0:EE:24:A0:08:17:37:8D:BA:32:94:AA:6D:AA:C0:C0:62:FF
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       2FDFBB848C01DB105FCBE950D2634B38F70CA23A
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/3138392e34352e3136302e302f32302d3332203d3e203631393337.roa
Signing time:             Thu 06 Mar 2025 09:00:15 +0000
ROA not before:           Thu 06 Mar 2025 08:55:15 +0000
ROA not after:            Thu 05 Mar 2026 09:00:15 +0000
asID:                     61937
IP address blocks:        189.45.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 07:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:df:bb:84:8c:01:db:10:5f:cb:e9:50:d2:63:4b:38:f7:0c:a2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Mar  6 08:55:15 2025 GMT
            Not After : Mar  5 09:00:15 2026 GMT
        Subject: CN=25B2C0EE24A00817378DBA3294AA6DAAC0C062FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:de:84:2d:1a:81:91:94:94:d5:3f:da:e9:
                    9c:52:c6:ef:1d:23:33:85:1c:61:e0:83:eb:4c:60:
                    51:76:a2:1e:c6:f6:c2:de:c0:00:14:d2:31:33:f5:
                    ba:a3:21:a4:2e:a9:ba:c1:c7:c9:f9:3f:31:23:fd:
                    9c:04:ab:31:9a:73:9e:4a:09:c9:98:6a:36:1d:4e:
                    0a:3d:8a:cd:28:1f:42:56:8b:6d:01:58:91:bb:c2:
                    63:75:15:44:bc:a2:15:1c:63:4a:9c:db:8d:fc:98:
                    6c:5c:cf:2f:3b:44:9c:3f:9b:f0:fd:67:fc:76:92:
                    8b:37:a6:3b:25:29:28:d3:87:cf:67:67:0a:4b:74:
                    df:30:ef:60:c9:81:73:bb:07:1e:e1:7d:a1:12:c3:
                    47:c2:a1:cb:a3:b4:d2:3a:88:95:a2:15:c0:3d:5a:
                    52:67:1e:71:21:0c:3c:05:e8:f8:f6:97:8c:2f:48:
                    ff:6d:f8:b7:0a:c4:b3:e1:20:53:ed:2f:dc:7a:c0:
                    ef:67:20:09:37:26:ee:dd:a7:d3:98:95:8d:79:a0:
                    e6:57:fe:1d:3f:11:cf:ad:2a:b7:81:0e:f0:06:b6:
                    20:d3:bd:1d:e2:86:2f:34:e3:22:85:88:be:f5:aa:
                    95:82:c3:2e:e0:8e:e6:4f:ef:38:bc:76:eb:53:3d:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B2:C0:EE:24:A0:08:17:37:8D:BA:32:94:AA:6D:AA:C0:C0:62:FF
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/3138392e34352e3136302e302f32302d3332203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:db:31:74:8c:6c:94:82:79:89:c5:44:eb:6b:a1:10:ad:21:
         43:d8:dc:67:4e:10:a9:6a:0f:3b:76:c8:3b:4a:19:a8:65:6c:
         c7:f4:c6:e5:c1:7a:13:7e:33:94:46:f1:18:01:ad:bb:d4:70:
         17:06:8d:e1:92:0c:df:5f:25:37:fe:df:5e:14:0b:79:79:06:
         70:29:dd:e0:18:64:df:84:30:86:51:c1:be:90:cc:a8:8f:11:
         b2:2d:4e:1d:c6:2e:65:50:8f:86:70:2c:ed:fe:86:cc:64:d2:
         1c:22:10:ed:a3:d6:3d:c9:61:00:65:dc:33:5a:a4:8f:d2:6b:
         c8:b3:58:e5:61:aa:a7:c7:78:b3:79:33:d7:b9:aa:85:14:2d:
         15:f3:d2:81:94:d4:04:e7:a3:09:4f:c5:ef:dd:07:df:43:08:
         6f:d1:7e:f2:f7:8d:97:0b:57:56:82:1e:74:ca:c1:47:7f:31:
         07:a4:07:24:9b:5f:89:99:24:6e:ed:78:62:22:e6:6d:50:bb:
         9e:8d:76:92:a8:36:10:7f:b2:d6:47:e5:94:bf:53:4a:9c:e0:
         12:d5:ee:d8:7e:2e:9a:77:8a:ce:24:29:a2:96:18:ad:af:f3:
         6b:33:f8:80:4c:f6:4f:ab:fc:00:62:7e:45:5d:60:47:2f:ec:
         bb:b2:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:18:31 2025 by rpki-client