Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3139312e352e38302e302f32302d3234203d3e203238323031.roa
File:                     3139312e352e38302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          sn+CxRX2zJx6aS0HZmiRJipUf34zXeCdWuGVmMMh828=
Subject key identifier:   DD:8F:CA:C8:D2:2C:B0:CD:A8:34:90:66:A4:24:C1:1F:C2:21:AA:B2
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       45CB390B73F9DCF40310824205FD1B121EA5F5A2
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3139312e352e38302e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 12 Mar 2025 12:33:12 +0000
ROA not before:           Wed 12 Mar 2025 12:28:12 +0000
ROA not after:            Wed 11 Mar 2026 12:33:12 +0000
asID:                     28201
IP address blocks:        191.5.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cb:39:0b:73:f9:dc:f4:03:10:82:42:05:fd:1b:12:1e:a5:f5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Mar 12 12:28:12 2025 GMT
            Not After : Mar 11 12:33:12 2026 GMT
        Subject: CN=DD8FCAC8D22CB0CDA8349066A424C11FC221AAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:37:a6:19:c3:07:0a:fa:10:90:32:06:08:
                    47:1c:11:6c:53:63:30:a1:0e:e8:3c:3c:76:aa:2a:
                    bf:ec:f5:9e:48:be:08:63:67:07:ed:4f:1d:cb:df:
                    73:08:80:18:b9:59:03:28:25:af:bd:50:b0:71:06:
                    88:ac:62:b4:c9:a8:f6:ed:90:9d:5d:43:f8:e8:35:
                    fb:86:eb:dc:39:28:6b:a0:f0:05:43:ec:38:86:46:
                    df:d9:a5:f9:b7:2c:67:68:24:7f:ae:28:d1:05:43:
                    61:79:28:fd:e5:bb:36:70:03:be:60:2d:8d:80:73:
                    f4:c5:b8:74:45:59:1e:fe:8f:ab:b8:57:72:76:22:
                    73:72:fa:70:00:d6:65:cf:44:bf:d5:8f:91:f3:01:
                    ea:d0:5b:d5:61:19:f9:38:cf:f8:09:69:58:90:ba:
                    ac:f6:9d:b6:18:da:e8:a3:42:b4:ce:b4:22:60:76:
                    22:0d:d2:d6:f6:9e:1b:03:4a:fa:aa:03:7f:37:cb:
                    91:bd:a8:d8:80:10:1b:d5:38:ef:b8:1a:59:e5:15:
                    58:4e:17:8f:6a:2c:f4:17:8b:90:46:7e:c2:51:2d:
                    88:6c:bd:37:15:96:f9:f3:f9:d8:b3:8d:53:46:41:
                    28:a5:56:02:30:20:2f:11:70:61:ec:be:02:70:d9:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8F:CA:C8:D2:2C:B0:CD:A8:34:90:66:A4:24:C1:1F:C2:21:AA:B2
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3139312e352e38302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:73:61:30:20:0d:54:fb:91:bd:2e:c9:52:a1:0a:95:95:d9:
         72:7c:5c:22:e0:fa:8d:a0:83:ee:24:75:c8:a0:a9:e3:a8:f1:
         8a:df:8c:04:b4:ac:47:7b:de:d4:c2:a5:42:75:c1:63:cc:39:
         7c:a0:a5:53:a9:f2:3e:df:db:53:19:76:cf:1b:23:ff:f3:ad:
         e2:9c:54:3f:16:ab:6f:ed:61:eb:b9:82:07:7a:18:e8:2b:1d:
         b3:53:ea:7b:9e:25:ab:17:35:4c:ca:f6:20:ba:39:c4:8a:23:
         0e:29:b2:0a:03:f9:11:31:25:e7:29:77:58:f7:08:9f:ac:0f:
         14:a5:fc:31:09:1c:75:a4:10:6e:46:c8:60:94:ba:1a:d1:5a:
         71:4e:b6:11:8c:3e:ec:7c:1b:50:36:3d:ca:bf:d4:25:a9:2e:
         d6:41:78:ed:cb:9e:ad:60:2b:61:7f:90:59:d9:00:0a:85:05:
         65:a6:0c:24:03:a3:6b:ef:23:fb:49:bc:80:56:74:5b:5f:f2:
         2a:6a:77:a1:52:ca:09:57:7d:74:00:2d:4c:79:72:f8:95:23:
         de:c7:32:26:8a:76:30:31:84:cc:54:e9:32:4e:7a:81:ce:7e:
         90:24:93:18:5a:63:6b:d5:f2:cb:c8:47:be:5d:77:06:be:81:
         41:39:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:28:26 2025 by rpki-client