Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/3136302e3233382e3139322e302f32322d3234203d3e20323636353439.roa
File:                     3136302e3233382e3139322e302f32322d3234203d3e20323636353439.roa (raw, json)
Hash identifier:          Ntob8Oru9XqvdY0Z0psVfhL9TlAY8SLhUuxCnJAbLMo=
Subject key identifier:   FF:9D:2C:5E:61:B7:24:3E:28:B7:4E:0C:09:48:7F:8A:2E:3F:64:D5
Certificate issuer:       /CN=61574561822D905288C1F5E879EE79AE9F1D5FB0
Certificate serial:       494733E2C29BD2A58867E9BEA63FA1D8E0D6CFBF
Authority key identifier: 61:57:45:61:82:2D:90:52:88:C1:F5:E8:79:EE:79:AE:9F:1D:5F:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61574561822D905288C1F5E879EE79AE9F1D5FB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/3136302e3233382e3139322e302f32322d3234203d3e20323636353439.roa
Signing time:             Wed 18 Dec 2024 14:30:57 +0000
ROA not before:           Wed 18 Dec 2024 14:25:57 +0000
ROA not after:            Wed 17 Dec 2025 14:30:57 +0000
asID:                     266549
IP address blocks:        160.238.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/61574561822D905288C1F5E879EE79AE9F1D5FB0.crl
                          rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/61574561822D905288C1F5E879EE79AE9F1D5FB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61574561822D905288C1F5E879EE79AE9F1D5FB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:47:33:e2:c2:9b:d2:a5:88:67:e9:be:a6:3f:a1:d8:e0:d6:cf:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61574561822D905288C1F5E879EE79AE9F1D5FB0
        Validity
            Not Before: Dec 18 14:25:57 2024 GMT
            Not After : Dec 17 14:30:57 2025 GMT
        Subject: CN=FF9D2C5E61B7243E28B74E0C09487F8A2E3F64D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:ee:00:d2:fa:bf:d2:50:35:43:8c:68:f2:
                    0d:c9:6f:5b:d4:23:f5:c1:24:1c:d1:ea:6e:95:68:
                    af:07:ba:4c:94:ad:65:72:03:45:03:e0:c9:4b:18:
                    69:4c:c0:c9:41:93:b5:67:b0:2f:c8:d1:89:a8:34:
                    3a:9e:cc:78:db:61:fc:90:55:69:5c:8b:d8:8f:66:
                    51:27:dc:ac:c7:c6:04:e0:84:6c:15:d5:02:64:06:
                    51:db:1e:36:72:f1:17:58:7b:28:de:a1:22:c5:d0:
                    60:15:31:71:52:5d:87:6f:cc:ef:8c:47:af:6c:32:
                    86:8d:68:08:c2:cc:a3:7e:e0:3c:e0:42:65:f2:fd:
                    45:d0:c5:5c:45:8b:4b:9c:66:87:b0:7c:0e:12:9c:
                    02:cd:70:66:53:43:41:a8:ee:4f:f8:09:50:ce:cd:
                    09:8b:2b:fc:a4:8e:70:1e:02:df:a8:8b:30:3d:74:
                    fe:e7:b4:ea:6c:a5:6f:04:3f:40:a5:13:2c:f9:91:
                    ab:a9:66:53:c3:72:59:41:5f:6e:a3:e4:1b:08:0d:
                    a9:b6:78:d3:51:a0:fc:9f:81:6d:1c:b6:df:11:38:
                    59:44:50:b7:cf:d2:cb:dc:2a:d9:b6:00:68:19:48:
                    88:14:89:9d:15:24:bf:f7:57:c4:87:e5:00:19:5c:
                    9f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9D:2C:5E:61:B7:24:3E:28:B7:4E:0C:09:48:7F:8A:2E:3F:64:D5
            X509v3 Authority Key Identifier:
                keyid:61:57:45:61:82:2D:90:52:88:C1:F5:E8:79:EE:79:AE:9F:1D:5F:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/61574561822D905288C1F5E879EE79AE9F1D5FB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61574561822D905288C1F5E879EE79AE9F1D5FB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/3136302e3233382e3139322e302f32322d3234203d3e20323636353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:0e:07:bf:57:8b:9c:01:39:2e:74:95:a7:4b:c0:28:37:9c:
         36:75:78:3f:34:a4:9a:6b:38:a5:ab:6f:3c:c5:5d:64:d4:ec:
         77:da:19:79:d1:a7:65:82:b5:28:a8:a6:13:99:06:cd:77:b6:
         7c:ca:97:64:c2:09:5a:4d:cb:51:a4:cd:70:57:2b:5f:a4:4c:
         cd:bd:3c:bf:dc:52:7b:e8:fc:a6:07:77:93:13:b3:c0:7e:fb:
         71:9a:51:ce:56:50:f0:03:5d:1d:51:66:84:38:c4:b8:95:8a:
         6d:9f:6c:97:ab:c9:6f:a7:90:bf:1a:bd:f1:7a:23:f0:ca:73:
         b2:66:45:f0:da:c6:e6:43:67:38:15:29:83:cc:3c:86:28:e1:
         43:3d:d2:8a:f1:5b:86:64:b7:77:51:05:dc:00:7d:36:e5:46:
         27:b9:4c:dc:ea:2e:2e:ba:de:3d:d4:6c:44:95:44:75:ff:fa:
         2b:c0:f4:71:fc:b4:30:07:c0:b1:8b:aa:42:6f:da:89:2e:a5:
         36:86:f5:b0:db:5c:b5:94:c0:14:bc:67:01:4f:a1:0b:07:3d:
         60:e8:73:19:e0:8c:2d:ee:72:8f:b4:a0:01:bf:25:82:14:db:
         e6:b8:e1:69:5d:53:74:ac:67:f7:8a:30:7a:7f:e0:ae:7c:22:
         ad:a6:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:52:37 2025 by rpki-client