Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa
File:                     3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa (raw, json)
Hash identifier:          /uqypYomoT7Xbxt0+2mgFAwZGz/9u3SWK8Mzi6KGPqM=
Subject key identifier:   67:5E:69:64:46:82:E0:78:4B:A7:31:A9:D7:53:85:E6:A8:EB:AC:6F
Certificate issuer:       /CN=1E25984D718583699E6F98027D46C4F064FED1A8
Certificate serial:       705715434690AFF605BEE5AF5A95995BE57642FF
Authority key identifier: 1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa
Signing time:             Fri 02 May 2025 19:00:01 +0000
ROA not before:           Fri 02 May 2025 18:55:01 +0000
ROA not after:            Fri 01 May 2026 19:00:01 +0000
asID:                     263676
IP address blocks:        191.241.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl
                          rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 21:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:57:15:43:46:90:af:f6:05:be:e5:af:5a:95:99:5b:e5:76:42:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Validity
            Not Before: May  2 18:55:01 2025 GMT
            Not After : May  1 19:00:01 2026 GMT
        Subject: CN=675E69644682E0784BA731A9D75385E6A8EBAC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:6b:20:91:40:3e:10:2e:74:00:d4:56:e2:
                    59:fa:84:d1:cc:2a:f8:eb:00:bb:d7:3e:93:45:81:
                    d0:6f:cc:89:43:ff:83:8f:48:46:9c:1f:cc:30:54:
                    4d:33:7d:fc:f1:bc:98:7c:2f:95:a1:b0:82:4c:9c:
                    2d:c2:99:31:b4:c0:cd:ec:17:09:8b:02:2c:6b:8e:
                    b2:79:87:e6:63:aa:16:b3:34:3a:f8:0b:b0:13:30:
                    c2:2c:33:ee:df:9d:6b:7c:e5:26:21:9c:73:18:34:
                    66:7c:d5:94:31:8d:a1:0b:36:ab:c0:f7:8f:fc:f9:
                    1c:6b:28:b0:66:fc:f0:e1:1b:42:46:a3:33:e7:ec:
                    3a:fe:e7:00:d0:57:14:ad:c0:01:d2:ae:db:80:ce:
                    2e:64:8b:8a:ae:3c:c5:c3:3e:3b:2f:15:ee:7b:7d:
                    42:70:75:b9:44:5c:b3:37:69:5a:bf:34:ed:92:95:
                    53:72:59:8c:e1:db:74:5c:d6:e1:8a:cd:d5:b5:e6:
                    b3:12:38:12:4b:aa:28:39:27:a2:c3:b2:15:dc:41:
                    c7:83:37:8a:8f:8c:52:84:56:e2:31:48:0d:e0:93:
                    47:06:ce:97:56:e4:ee:b0:9f:b4:06:d6:1f:ad:57:
                    e3:1a:dd:0a:42:b2:65:6d:4d:27:77:5d:fd:0e:fd:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5E:69:64:46:82:E0:78:4B:A7:31:A9:D7:53:85:E6:A8:EB:AC:6F
            X509v3 Authority Key Identifier:
                keyid:1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:06:f5:d0:8d:e4:e5:3f:82:28:d2:64:f4:c9:b4:cf:77:65:
         48:96:21:ab:d5:16:99:20:00:87:7b:c1:05:8d:48:65:28:db:
         7c:aa:c5:04:73:ba:88:dc:79:0a:6c:a6:04:8a:3f:7a:22:d7:
         52:33:67:32:9d:f1:29:70:18:e7:74:a2:a5:8d:7f:da:70:f0:
         90:8b:de:1e:df:58:ba:0b:87:fb:b6:da:46:06:72:85:1f:3d:
         da:a4:27:34:f2:0d:3b:90:e0:fb:8f:54:f7:67:15:b5:50:30:
         36:d9:42:6f:1b:a9:b9:79:f5:50:4f:c0:20:a0:1a:47:44:b6:
         ca:55:5c:80:f4:78:3f:5d:0b:5d:95:77:02:be:a9:08:3f:8c:
         62:33:6c:77:95:84:c0:25:50:19:0d:e6:86:2a:3f:fc:1c:2a:
         e8:1b:d9:2e:8f:da:07:c7:12:97:2b:5a:b0:a4:b7:28:6d:70:
         db:08:39:11:52:3b:3b:91:a8:81:3c:6a:f9:f8:15:c5:77:29:
         7f:16:a0:e0:e2:80:e8:19:07:8b:d6:a1:f5:80:ee:10:85:cf:
         f3:35:e9:a9:cb:25:2a:9d:15:74:c4:97:aa:f5:39:e5:ed:cb:
         f8:e5:2c:97:71:ef:fb:92:e1:9b:85:c8:ab:6b:b2:ae:97:d1:
         a9:5b:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:11:27 2025 by rpki-client