Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa
File:                     3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa (raw, json)
Hash identifier:          b9wsKYq5erHquZE6Op6Jcbt6QAtYV75xNDBj0athA44=
Subject key identifier:   4A:7B:CD:86:50:99:02:AA:00:6B:62:54:75:B5:8F:B1:7E:DA:28:1E
Certificate issuer:       /CN=D04A2BA80F368597BB2029B3E31276E45382A900
Certificate serial:       687B039DEE3AF0E22600E3836BFC4A4AAEFE489D
Authority key identifier: D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa
Signing time:             Mon 14 Apr 2025 22:58:27 +0000
ROA not before:           Mon 14 Apr 2025 22:53:27 +0000
ROA not after:            Mon 13 Apr 2026 22:58:27 +0000
asID:                     263362
IP address blocks:        191.37.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.crl
                          rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7b:03:9d:ee:3a:f0:e2:26:00:e3:83:6b:fc:4a:4a:ae:fe:48:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04A2BA80F368597BB2029B3E31276E45382A900
        Validity
            Not Before: Apr 14 22:53:27 2025 GMT
            Not After : Apr 13 22:58:27 2026 GMT
        Subject: CN=4A7BCD86509902AA006B625475B58FB17EDA281E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:7e:cd:18:80:c9:fc:18:8d:ca:28:6c:88:
                    41:e8:f9:39:0a:34:5e:af:ff:6c:9d:7d:a2:c0:f1:
                    bb:75:95:c0:4a:fb:ec:6e:d8:22:6a:80:69:f5:c6:
                    01:16:a1:b8:3e:96:1d:a0:4a:aa:3b:b3:82:89:da:
                    09:ab:ef:16:1d:ac:50:ba:56:59:d0:74:49:08:93:
                    33:43:34:72:d3:90:09:e8:2a:f5:3f:34:3e:87:d9:
                    73:ed:80:19:6f:2a:8f:b3:2f:3b:0f:61:3f:da:99:
                    d4:96:aa:9e:53:52:c4:cf:20:b8:14:03:2e:84:52:
                    d9:1c:26:78:0c:2d:45:b8:cb:1d:bf:eb:fc:23:de:
                    f1:38:75:13:4a:f4:fb:d0:50:bf:c3:d5:2d:be:21:
                    b2:ba:4b:23:4a:26:8e:7d:08:2e:65:43:ef:5c:e0:
                    f6:5c:1e:09:11:08:f7:06:7c:e6:2a:3f:58:e6:92:
                    1d:0e:dc:03:48:63:8f:ca:26:2d:75:45:93:25:32:
                    c0:61:18:6e:fe:6f:86:bc:8a:4d:2a:ce:38:e4:e3:
                    02:d7:99:26:5e:50:2e:a7:79:12:3f:0c:3a:fb:f4:
                    e1:91:de:a4:3a:ec:d3:14:dd:0b:17:7d:4b:e0:6a:
                    3f:cf:7d:15:20:e4:7a:f9:8e:4d:aa:f9:87:86:a2:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7B:CD:86:50:99:02:AA:00:6B:62:54:75:B5:8F:B1:7E:DA:28:1E
            X509v3 Authority Key Identifier:
                keyid:D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:c1:b4:03:5a:13:14:4b:ba:27:98:4f:23:9a:06:31:87:4e:
         e0:59:8f:b4:19:9b:7c:f1:c5:2c:e5:7c:4e:85:87:74:0c:bc:
         2d:1f:21:20:bc:9b:71:63:46:5a:db:5e:ca:83:f5:6b:33:75:
         5d:64:4d:f7:64:d7:a3:82:b0:fb:26:37:db:ec:55:c2:9a:2d:
         30:1c:38:5f:7e:8e:ea:f6:c0:a0:fd:e6:1c:50:61:f5:d2:39:
         55:5b:69:9c:42:44:87:60:07:93:b5:26:7e:f9:89:a0:14:f6:
         20:b7:0c:6d:4a:0f:da:48:ec:21:ad:7b:ee:cb:b9:fc:5e:23:
         df:bd:36:28:f5:57:53:c4:2b:85:5b:0a:2b:88:26:57:a9:d6:
         00:f8:ce:7d:2d:f6:20:3b:99:46:b9:68:1c:27:1e:14:3c:53:
         83:c0:2c:ac:94:96:c2:ae:ef:17:92:5c:41:3f:2e:a9:c4:33:
         36:35:d6:e1:87:4d:d5:23:5f:21:0a:75:a6:c9:04:e7:1c:43:
         3a:96:25:64:2c:c6:66:d1:78:2e:17:37:cb:71:87:02:a4:df:
         dd:27:5e:82:55:81:69:7a:42:d2:c4:ad:9a:e9:79:6b:ff:02:
         d2:b2:ab:59:ac:68:55:2f:7a:4a:09:8d:25:08:f0:2e:3b:8f:
         1e:e6:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:46:08 2025 by rpki-client