Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          KxAWCWk0GLDrUpvEyb8ut8DBQPuJL3xBhx96Y6S67H8=
Subject key identifier:   56:CC:FA:E0:7F:96:54:76:D8:31:D5:C5:B1:2A:7B:EC:11:38:F9:D5
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       607F692A3D80E153F2DE830945CE26ACFA1FE1D7
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     263512
IP address blocks:        191.243.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:69:2a:3d:80:e1:53:f2:de:83:09:45:ce:26:ac:fa:1f:e1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=56CCFAE07F965476D831D5C5B12A7BEC1138F9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:e7:4d:0f:dc:b2:d0:70:b3:38:87:a9:12:
                    d6:d9:a2:7c:3f:00:25:e2:05:e3:92:26:7e:03:eb:
                    56:db:73:e4:1d:b1:43:f4:13:08:fa:e7:7e:57:cb:
                    f7:6d:fe:f5:60:b2:77:84:5a:de:79:c4:97:00:41:
                    3d:6c:93:9f:cf:2e:57:08:b6:ce:f6:fb:e6:f7:6b:
                    14:0e:3c:a0:e7:71:ec:75:53:20:9b:f5:04:97:f1:
                    ea:37:97:37:6c:bc:94:94:59:a5:23:b7:6d:5d:26:
                    1a:e4:a4:9d:ae:b6:43:47:34:e3:02:ec:a1:65:55:
                    02:f3:a3:48:67:98:d2:f8:89:7d:de:2e:cf:5c:a2:
                    fa:56:3f:ca:b5:7d:90:d7:4f:cb:4b:b7:7f:c4:65:
                    e0:68:62:a3:12:66:85:66:70:c0:0c:fd:d9:e5:95:
                    a1:ef:bc:b5:71:13:09:5b:92:cd:53:10:f5:38:f7:
                    56:63:5d:9a:ae:e4:f2:82:31:b2:ed:34:a4:c5:71:
                    dd:97:e2:78:4f:e7:08:cc:c1:36:48:c8:33:4d:2c:
                    6d:9d:89:72:fa:e3:77:46:8b:b7:77:ce:29:73:9c:
                    cf:99:2d:8a:49:f4:c6:49:73:b4:a9:85:74:71:8d:
                    83:65:66:38:62:d9:f8:85:8a:6d:4a:e1:e4:39:d3:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CC:FA:E0:7F:96:54:76:D8:31:D5:C5:B1:2A:7B:EC:11:38:F9:D5
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:9b:41:68:14:4e:68:42:de:77:00:86:da:36:e2:27:8c:af:
         34:db:9d:a4:d9:4b:3b:9a:43:00:f8:ee:3a:34:67:02:c2:27:
         54:27:b9:d9:31:88:c6:9a:6d:45:ac:6e:6c:88:fd:de:9a:53:
         21:35:38:96:d1:dd:32:b8:86:b9:86:87:04:21:e5:b4:3a:ad:
         1a:89:82:e2:bc:64:43:d9:14:49:39:b6:99:c5:9a:da:0e:8d:
         00:cd:03:dd:2c:21:4d:ed:23:fe:d2:5e:ca:80:ec:76:2b:c7:
         76:39:ce:27:60:3b:46:65:7c:60:c8:bc:04:0c:67:a2:bc:8f:
         15:8d:c6:cb:d3:76:75:53:0f:20:13:a4:e8:78:da:2a:7a:4d:
         1f:7f:f4:2e:74:43:33:c4:c2:ed:74:f9:a0:d5:43:08:45:45:
         07:8d:c5:ae:cd:57:a8:60:82:8e:03:81:d4:42:b3:ef:07:01:
         d5:19:1f:4c:aa:d0:0a:b1:bd:90:e7:df:d6:1d:69:4c:3f:e9:
         78:83:56:92:13:79:88:97:37:2b:59:0e:2c:26:80:a7:2e:bb:
         43:cf:6e:b8:b9:fb:ca:98:59:3d:55:54:2e:be:52:2d:cc:ef:
         13:77:b1:14:80:24:d0:27:83:64:8a:00:20:5b:de:41:4e:16:
         95:aa:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:15 2025 by rpki-client