Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa
File:                     3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa (raw, json)
Hash identifier:          8VduWI6q3z2//+F/2lXJ91+usvdBT+2WkfCrAhcQiQc=
Subject key identifier:   1B:4A:49:AD:8A:82:E1:A3:6D:C3:C7:E9:26:1E:D0:B1:2B:E1:28:F9
Certificate issuer:       /CN=D72D3F46524FD32B12A8857ADA6A36351587C90E
Certificate serial:       0699F24AD6C581D77BE70056E37AD61A0B2C90BC
Authority key identifier: D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa
Signing time:             Tue 13 May 2025 15:06:23 +0000
ROA not before:           Tue 13 May 2025 15:01:23 +0000
ROA not after:            Tue 12 May 2026 15:06:23 +0000
asID:                     263526
IP address blocks:        191.253.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl
                          rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:99:f2:4a:d6:c5:81:d7:7b:e7:00:56:e3:7a:d6:1a:0b:2c:90:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D72D3F46524FD32B12A8857ADA6A36351587C90E
        Validity
            Not Before: May 13 15:01:23 2025 GMT
            Not After : May 12 15:06:23 2026 GMT
        Subject: CN=1B4A49AD8A82E1A36DC3C7E9261ED0B12BE128F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2f:72:68:5c:af:61:aa:ca:ee:0c:56:f2:6d:
                    ec:96:56:3b:70:de:0b:ef:80:ea:7e:89:4a:4c:be:
                    dd:35:17:85:a9:79:10:04:ad:96:c3:41:09:1e:71:
                    93:b5:65:d8:ad:fb:fe:9c:cb:63:df:05:e9:9c:21:
                    13:3d:a0:c5:41:bc:22:de:3c:96:b5:ed:5e:96:7f:
                    7b:87:d7:ed:ef:d1:f2:7f:b8:d4:b6:cf:4b:dd:59:
                    84:87:00:e9:af:c2:82:94:14:cf:86:8d:74:72:8a:
                    2d:42:63:d6:6c:de:ad:66:ce:8b:5d:b0:e4:2f:26:
                    44:f6:34:34:b6:1b:f1:7e:02:25:fe:9e:f5:ac:b8:
                    ac:3b:44:aa:5b:b9:c1:15:81:00:d8:fa:ca:cd:0d:
                    3b:88:71:1d:97:3e:00:26:11:29:39:5a:c4:7c:c2:
                    d4:01:3b:0b:64:b8:a0:52:27:6e:4f:1b:0b:3c:c7:
                    ef:27:6c:08:c7:ea:56:ed:e8:00:14:3f:45:10:13:
                    c7:fa:34:b6:12:c5:66:28:55:64:93:d1:3c:69:3c:
                    79:70:cd:d8:f1:c0:c8:99:77:92:7f:a4:f6:d3:04:
                    73:e6:ca:37:ee:38:de:1b:f5:15:18:6e:cb:1a:b3:
                    5e:b5:4e:bc:b1:ca:a6:0b:a7:6b:4f:85:0a:75:f0:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4A:49:AD:8A:82:E1:A3:6D:C3:C7:E9:26:1E:D0:B1:2B:E1:28:F9
            X509v3 Authority Key Identifier:
                keyid:D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:c1:67:d2:ff:3b:be:58:0a:94:1d:c1:e4:f8:85:0d:6d:
         c7:d0:fa:7e:a1:f4:3b:84:04:bf:95:a3:15:f7:ae:14:f0:69:
         1a:f5:a5:08:ee:ba:0f:5a:7f:9b:ff:9b:21:ec:d2:2f:28:80:
         28:27:cc:5d:59:e0:55:37:7f:f5:76:71:fa:93:fd:fe:8a:43:
         94:6a:9a:f4:25:b8:5c:58:9f:77:85:23:b7:58:70:7a:a7:e7:
         17:81:df:8b:0f:8a:5c:5d:58:37:7c:c1:7e:a4:0f:a0:3e:1f:
         90:a5:29:63:b8:cb:81:e5:0a:f1:1d:10:cd:8b:7b:ba:b7:72:
         50:5b:3a:a9:fb:62:43:2d:ac:0b:c3:ce:3d:06:fa:da:36:cb:
         b9:77:af:ee:c5:a6:99:0e:d6:df:ac:ff:f5:1f:23:7a:cf:82:
         5b:e6:4f:df:49:86:2f:8d:85:95:23:17:08:c8:32:c6:30:14:
         d9:30:a1:d1:54:43:7b:3b:b2:c6:d8:eb:e1:ae:76:fe:91:9c:
         2c:ed:ca:f8:ea:3d:53:60:5b:f0:54:6f:b2:86:95:79:95:92:
         92:7e:60:3f:69:84:25:d0:db:ca:88:be:71:f6:7e:33:19:3e:
         b8:d5:d8:80:e5:01:3c:0e:0f:69:25:f2:3d:1f:99:50:5c:28:
         6a:c4:9d:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBpnyStbFgdd75wBW43rWGgsskLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcyRDNGNDY1MjRGRDMyQjEyQTg4NTdBREE2QTM2MzUx
NTg3QzkwRTAeFw0yNTA1MTMxNTAxMjNaFw0yNjA1MTIxNTA2MjNaMDMxMTAvBgNV
BAMTKDFCNEE0OUFEOEE4MkUxQTM2REMzQzdFOTI2MUVEMEIxMkJFMTI4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyL3JoXK9hqsruDFbybeyWVjtw
3gvvgOp+iUpMvt01F4WpeRAErZbDQQkecZO1Zdit+/6cy2PfBemcIRM9oMVBvCLe
PJa17V6Wf3uH1+3v0fJ/uNS2z0vdWYSHAOmvwoKUFM+GjXRyii1CY9Zs3q1mzotd
sOQvJkT2NDS2G/F+AiX+nvWsuKw7RKpbucEVgQDY+srNDTuIcR2XPgAmESk5WsR8
wtQBOwtkuKBSJ25PGws8x+8nbAjH6lbt6AAUP0UQE8f6NLYSxWYoVWST0TxpPHlw
zdjxwMiZd5J/pPbTBHPmyjfuON4b9RUYbssas161TryxyqYLp2tPhQp18MUbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUG0pJrYqC4aNtw8fpJh7QsSvhKPkwHwYDVR0j
BBgwFoAU1y0/RlJP0ysSqIV62mo2NRWHyQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBj
YXEvMC9ENzJEM0Y0NjUyNEZEMzJCMTJBODg1N0FEQTZBMzYzNTE1ODdDOTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MkQzRjQ2NTI0RkQzMkIx
MkE4ODU3QURBNkEzNjM1MTU4N0M5MEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlqamZNeHFLVU1LNDZlYnlkVkFqclRYVGV4aUVHbkhqQmhHVmFVV1ZwY2FxLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK//RQwDQYJKoZIhvcNAQELBQADggEBAG/BwWfS
/zu+WAqUHcHk+IUNbcfQ+n6h9DuEBL+VoxX3rhTwaRr1pQjuug9af5v/myHs0i8o
gCgnzF1Z4FU3f/V2cfqT/f6KQ5RqmvQluFxYn3eFI7dYcHqn5xeB34sPilxdWDd8
wX6kD6A+H5ClKWO4y4HlCvEdEM2Le7q3clBbOqn7YkMtrAvDzj0G+to2y7l3r+7F
ppkO1t+s//UfI3rPglvmT99Jhi+NhZUjFwjIMsYwFNkwodFUQ3s7ssbY6+Gudv6R
nCztyvjqPVNgW/BUb7KGlXmVkpJ+YD9phCXQ28qIvnH2fjMZPrjV2IDlATwOD2kl
8j0fmVBcKGrEnUs=
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:12:13 2025 by rpki-client