Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          UIN6bSNaKkY2f44Cg8aq8ZSs06CZ9eazXP/sKClZj9w=
Subject key identifier:   6F:6F:D7:96:86:EF:CC:11:B6:6D:48:0D:56:5E:88:A9:ED:5B:9E:D5
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       1268342948BD06EFF121948AE5354995CF4BCF87
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     263512
IP address blocks:        191.243.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:68:34:29:48:bd:06:ef:f1:21:94:8a:e5:35:49:95:cf:4b:cf:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=6F6FD79686EFCC11B66D480D565E88A9ED5B9ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:84:14:23:e8:2c:79:68:99:a2:ca:73:c7:f7:
                    d6:9a:7f:31:bc:38:39:43:d3:d4:fc:a2:83:62:40:
                    f2:b5:4f:aa:49:cf:98:9b:ae:b8:7b:7d:12:bf:68:
                    8f:1b:af:ad:c8:09:94:f3:17:f1:fb:0c:80:f5:89:
                    fa:74:da:ab:67:f1:cd:97:ae:9c:b4:74:1d:7a:a4:
                    d5:9f:78:4d:7f:36:16:b7:27:9d:6d:4e:7f:e0:28:
                    fc:26:c2:aa:5d:dd:c2:32:c5:76:55:d9:d8:08:50:
                    90:c4:76:42:46:a5:0d:c9:52:35:24:b2:0c:15:95:
                    36:92:a5:43:37:6d:29:32:35:97:79:d7:2b:88:c1:
                    34:11:e2:b3:a6:e2:e5:71:ca:ed:30:a7:d8:03:d0:
                    28:eb:21:d9:da:af:50:13:9a:b0:de:74:5f:73:65:
                    4a:9f:71:fc:f8:95:f7:6e:a3:1d:10:79:2b:fd:5d:
                    77:3a:51:4c:51:8e:76:21:ee:5a:d8:ad:ac:7b:ab:
                    40:11:b1:8e:c3:7a:b3:42:6f:ac:dc:80:0f:d1:c4:
                    3e:8a:03:e6:89:4d:91:a7:8e:7f:14:81:ef:13:25:
                    1e:d0:2e:52:55:be:a7:0c:bb:5d:74:c0:0d:ec:11:
                    99:45:4f:0b:34:24:63:ad:1c:9b:c6:98:f3:c9:91:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6F:D7:96:86:EF:CC:11:B6:6D:48:0D:56:5E:88:A9:ED:5B:9E:D5
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:fb:88:05:27:f1:48:d9:d9:56:13:71:14:33:a2:cc:09:
         c8:97:50:de:d4:2e:b0:46:e0:e7:13:72:c5:51:a9:16:6d:55:
         13:42:c0:e2:b9:4d:40:bd:f6:a5:6a:94:60:4b:5d:ce:8d:21:
         9f:c9:2d:09:4a:ef:2e:da:09:fe:96:d0:da:cb:8b:27:3c:30:
         9c:b6:72:30:96:2b:72:f9:bb:e6:07:1b:f1:15:99:ae:aa:44:
         79:26:92:52:47:3f:50:87:9a:17:fe:1e:f1:9b:fa:62:1e:31:
         e0:b7:1d:31:63:b1:f8:dd:0d:9b:4c:62:8e:4f:be:d9:ce:d1:
         f8:1f:70:16:f0:7a:b3:e5:dc:20:50:e5:76:6e:d6:6d:5f:c9:
         30:e1:f1:6b:4f:b3:e7:89:3e:fd:f3:19:a2:22:ba:6e:b0:06:
         38:ad:e1:5a:91:ef:d9:2a:6d:a9:00:77:2b:23:2c:59:0e:a8:
         3b:26:9f:f7:b5:c2:87:72:02:21:05:82:0a:56:9b:79:2a:44:
         50:42:84:e0:e7:48:e6:95:83:fa:a4:21:66:a6:4f:a0:2d:41:
         a7:f8:e6:e1:6b:97:c2:35:48:5d:89:7e:18:a6:8a:30:19:03:
         3a:8c:a8:f5:24:0e:46:ba:54:ad:e1:c2:14:37:a0:3b:a6:10:
         e7:76:6d:08
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEmg0KUi9Bu/xIZSK5TVJlc9Lz4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx
MEU0NDRBMjAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMDMxMTAvBgNV
BAMTKDZGNkZENzk2ODZFRkNDMTFCNjZENDgwRDU2NUU4OEE5RUQ1QjlFRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2hBQj6Cx5aJmiynPH99aafzG8
ODlD09T8ooNiQPK1T6pJz5ibrrh7fRK/aI8br63ICZTzF/H7DID1ifp02qtn8c2X
rpy0dB16pNWfeE1/Nha3J51tTn/gKPwmwqpd3cIyxXZV2dgIUJDEdkJGpQ3JUjUk
sgwVlTaSpUM3bSkyNZd51yuIwTQR4rOm4uVxyu0wp9gD0CjrIdnar1ATmrDedF9z
ZUqfcfz4lfduox0QeSv9XXc6UUxRjnYh7lrYrax7q0ARsY7DerNCb6zcgA/RxD6K
A+aJTZGnjn8Uge8TJR7QLlJVvqcMu110wA3sEZlFTws0JGOtHJvGmPPJkQCpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUb2/XlobvzBG2bUgNVl6Iqe1bntUwHwYDVR0j
BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy
TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG
RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmcUJkbldUVVVQMXJacHhwdm5tYlRzS0JQRVVOanoxZlNNd1ZVOThmck5kLzEv
MzEzOTMxMmUzMjM0MzMyZTMyMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/zzDANBgkqhkiG9w0BAQsFAAOCAQEAN9f7
iAUn8UjZ2VYTcRQzoswJyJdQ3tQusEbg5xNyxVGpFm1VE0LA4rlNQL32pWqUYEtd
zo0hn8ktCUrvLtoJ/pbQ2suLJzwwnLZyMJYrcvm75gcb8RWZrqpEeSaSUkc/UIea
F/4e8Zv6Yh4x4LcdMWOx+N0Nm0xijk++2c7R+B9wFvB6s+XcIFDldm7WbV/JMOHx
a0+z54k+/fMZoiK6brAGOK3hWpHv2SptqQB3KyMsWQ6oOyaf97XCh3ICIQWCClab
eSpEUEKE4OdI5pWD+qQhZqZPoC1Bp/jm4WuXwjVIXYl+GKaKMBkDOoyo9SQORrpU
reHCFDegO6YQ53ZtCA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:38 2025 by rpki-client