Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230362e302f32332d3233203d3e20323633353132.roa
File:                     3139312e3234332e3230362e302f32332d3233203d3e20323633353132.roa (raw, json)
Hash identifier:          CxTz01H5MqHyQSJQgzSL37uKunIMov/MVx0GkTzx74w=
Subject key identifier:   38:9A:06:A0:63:D3:B3:D5:7B:23:12:9B:96:06:B2:A9:25:61:1B:A4
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       454ABE379DA3DABE132922372C9765EE09B1BCF4
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230362e302f32332d3233203d3e20323633353132.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     263512
IP address blocks:        191.243.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4a:be:37:9d:a3:da:be:13:29:22:37:2c:97:65:ee:09:b1:bc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=389A06A063D3B3D57B23129B9606B2A925611BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:18:08:a9:99:c0:1b:68:c8:30:1d:73:e7:
                    3d:84:33:c7:87:4f:0b:f0:71:25:c0:d7:20:35:fc:
                    4a:d8:a3:e0:0d:65:ab:98:c6:ce:74:0a:8d:47:31:
                    9b:6a:3d:6e:b7:30:3f:f4:97:9b:39:90:f7:a7:95:
                    b6:34:e2:f2:fa:20:68:5f:22:c8:bf:7d:12:18:34:
                    5d:88:d1:cc:56:89:a7:fb:6a:9c:57:67:38:86:c0:
                    c1:31:96:d7:5a:66:39:ba:5c:25:b4:9b:b3:7f:1f:
                    11:6a:4c:fe:59:85:1c:68:bd:7a:d2:b9:09:d6:6e:
                    fe:d7:32:cd:c2:f2:46:54:4e:00:37:59:b1:aa:6f:
                    ae:24:ad:3f:6d:72:ef:35:06:d3:20:02:a4:48:8e:
                    eb:7d:b8:0f:75:a7:5d:bb:40:a1:0a:46:19:fa:b4:
                    da:63:6b:54:be:c4:03:1c:e2:22:82:8e:ee:17:10:
                    21:6b:16:b2:b4:93:7d:d6:bb:14:d0:62:8f:9f:e0:
                    af:2c:02:17:58:c0:84:6e:e5:ec:7d:89:2c:82:61:
                    9b:0b:71:65:71:15:73:38:5c:d9:96:71:80:4b:e4:
                    6b:b4:9e:f0:dc:cb:76:2b:4c:1f:e4:01:37:48:e6:
                    b2:33:9e:b6:cb:af:09:29:12:49:6a:1f:06:3b:8e:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:06:A0:63:D3:B3:D5:7B:23:12:9B:96:06:B2:A9:25:61:1B:A4
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230362e302f32332d3233203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:80:2a:c9:5a:91:95:c5:af:61:64:2f:db:6f:86:8b:98:
         c0:20:7f:6b:12:a4:e0:c8:7a:65:00:2d:af:32:35:c9:da:2e:
         7f:82:1c:2f:b6:d0:0e:01:37:d7:4e:d9:94:7c:53:f7:f2:c7:
         91:12:1e:03:22:45:1d:95:c1:1c:01:2b:82:1a:16:d8:75:76:
         e4:d5:5e:d5:0c:49:64:7e:68:97:5e:bf:90:9d:7a:d2:d2:1b:
         5c:22:b7:a5:10:e7:e6:00:3f:98:cb:c5:7c:be:f6:5c:de:d8:
         cb:43:bd:6a:03:0e:77:58:8b:16:21:ba:57:c9:22:12:d6:33:
         28:d0:1f:fd:f3:5c:c5:80:f6:b6:1c:98:2d:64:1d:38:88:a2:
         47:7e:7b:48:67:4c:9c:b2:b2:c3:e5:40:56:62:90:9b:d6:19:
         bb:f6:af:c8:84:53:7b:bd:40:68:0b:5a:27:ff:41:ae:06:1a:
         27:93:9e:51:de:f3:ce:97:a3:9d:86:01:3c:e6:2e:4c:d3:cb:
         b2:a7:b1:93:53:65:75:ce:9c:d4:15:3d:73:56:0a:b3:91:cd:
         1b:35:a3:f5:55:f7:9e:20:f3:ed:d3:e8:3a:7b:33:99:6c:45:
         16:e4:be:ec:3a:bb:54:98:5a:07:d6:d5:70:75:14:d8:82:e7:
         e6:a9:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:50 2025 by rpki-client