Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233332e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233332e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          RKZjmApO0zV7TTSSxXgQ0QxyqS7+Ks85vd5d7HFTdC8=
Subject key identifier:   CE:99:3E:B7:F8:06:0E:9C:59:A2:E0:44:43:E3:68:D3:CD:7B:91:ED
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       4F291C98CC8FB1D232FE08FE81D0170EC2971B9A
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233332e302f32342d3234203d3e20323633343834.roa
Signing time:             Thu 03 Apr 2025 13:48:37 +0000
ROA not before:           Thu 03 Apr 2025 13:43:37 +0000
ROA not after:            Thu 02 Apr 2026 13:48:37 +0000
asID:                     263484
IP address blocks:        191.242.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:29:1c:98:cc:8f:b1:d2:32:fe:08:fe:81:d0:17:0e:c2:97:1b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Apr  3 13:43:37 2025 GMT
            Not After : Apr  2 13:48:37 2026 GMT
        Subject: CN=CE993EB7F8060E9C59A2E04443E368D3CD7B91ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:c4:4d:ea:11:1a:b2:ec:c9:a4:73:2b:bd:
                    33:10:80:6f:18:5e:21:fa:52:79:8d:bf:94:34:78:
                    ba:0d:07:7e:72:b3:17:6d:c6:d0:59:92:0a:8f:0b:
                    da:53:82:00:3d:20:d2:cf:21:af:60:55:7c:7c:8f:
                    2c:f9:d4:7b:7c:0b:cb:17:d0:4c:bd:9c:49:cf:b7:
                    90:ea:b7:7c:94:24:79:a5:c6:6e:4c:5a:c8:f7:47:
                    1a:8f:30:e1:ef:60:e6:13:0c:d0:e8:f6:ba:26:35:
                    a7:31:33:dc:14:06:fe:76:b8:0d:6b:81:cb:44:35:
                    0f:c2:b0:7b:e3:00:b1:c3:fc:81:9a:85:94:7a:15:
                    b7:e1:a2:fc:06:6b:32:75:80:6e:8a:ca:8d:07:c8:
                    b1:86:e0:b3:44:d8:9d:28:6e:c1:22:5e:87:44:2e:
                    5e:80:d6:32:6b:81:75:41:dd:f2:f4:3c:b2:93:df:
                    80:7b:f6:b7:68:15:5c:d3:1f:f4:04:2d:15:dd:26:
                    16:2e:10:6b:cc:48:4b:1b:fe:d6:b1:8f:62:49:98:
                    20:0d:96:41:75:4a:68:a0:69:8b:90:41:0e:f5:52:
                    9e:f2:d6:55:03:54:8a:3d:bd:f3:bd:7a:0d:0a:72:
                    4a:51:63:27:39:01:d6:0c:bc:c1:b6:4d:2e:b4:fa:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:3E:B7:F8:06:0E:9C:59:A2:E0:44:43:E3:68:D3:CD:7B:91:ED
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233332e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:86:0c:eb:a8:ce:0b:8e:26:92:cc:67:ae:cf:38:34:fd:0b:
         ca:1d:d3:f0:db:62:db:25:22:81:2e:a3:73:1c:75:ba:f2:ce:
         f8:e2:27:3b:54:d7:d7:34:1b:ca:c6:9c:58:73:3e:58:5c:a2:
         31:24:ba:d2:34:42:0d:10:46:07:f4:70:9a:d2:b1:f4:e5:69:
         66:91:ac:1b:7d:e1:d8:60:ee:e3:b2:94:d1:aa:a0:27:82:05:
         d0:df:c8:a9:34:4f:0f:e0:91:c7:d2:e7:e8:56:e3:50:91:3e:
         37:a6:8b:36:e3:37:61:a1:ac:bb:f1:6e:4a:6d:08:c6:d5:bc:
         94:56:da:39:72:43:20:27:4a:07:9b:09:ba:27:b3:89:25:1f:
         56:2f:cc:d2:da:9c:d7:b8:6e:c1:53:1a:49:00:e3:f0:9f:e2:
         a0:d9:28:e4:a5:06:c5:27:41:3e:70:28:6f:80:d8:f4:29:29:
         c0:e7:2d:76:62:8e:79:1c:40:ad:e2:72:c2:22:50:0b:d8:42:
         35:7f:47:ec:e4:4f:0b:9e:6a:f8:2e:d9:84:8a:10:f0:69:e1:
         e4:54:f6:3a:77:56:69:1a:f7:5a:23:5d:c9:95:27:db:ed:13:
         eb:fd:4b:d5:e9:5b:1d:d9:4e:6b:d0:da:40:79:25:66:a0:b6:
         b5:46:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:27:44 2025 by rpki-client