Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3136382e3139372e36342e302f32322d3234203d3e20323632393739.roa
File:                     3136382e3139372e36342e302f32322d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          o1APx19Z8jCLajTrTQsIgxmAK2MDleDG9QHV9i7M1Dg=
Subject key identifier:   30:D1:97:73:3C:29:E3:5B:71:B9:90:79:34:0D:E4:F1:58:70:02:79
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       0739DCEE12C901752F3862FC3B37D978FF5B133F
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3136382e3139372e36342e302f32322d3234203d3e20323632393739.roa
Signing time:             Thu 06 Mar 2025 06:47:37 +0000
ROA not before:           Thu 06 Mar 2025 06:42:37 +0000
ROA not after:            Thu 05 Mar 2026 06:47:37 +0000
asID:                     262979
IP address blocks:        168.197.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:39:dc:ee:12:c9:01:75:2f:38:62:fc:3b:37:d9:78:ff:5b:13:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Mar  6 06:42:37 2025 GMT
            Not After : Mar  5 06:47:37 2026 GMT
        Subject: CN=30D197733C29E35B71B99079340DE4F158700279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:e1:2d:6c:0d:cd:74:37:5f:90:ae:a7:82:
                    3e:dd:e4:40:c2:28:4a:4f:26:28:56:1f:e1:60:d8:
                    52:c4:6a:2b:38:04:e2:97:7f:3e:0c:5c:ff:d8:fc:
                    bf:d0:73:6b:89:42:16:b1:55:ef:e4:90:99:eb:9c:
                    8d:fa:e6:c5:29:a9:8a:04:69:e3:96:4e:7b:31:d2:
                    c1:d7:c0:f7:8e:2a:19:c5:70:fa:a3:77:f5:09:91:
                    2a:96:8b:a6:f7:b9:69:8d:d7:94:89:05:b1:0c:06:
                    43:5e:16:34:31:7c:17:6e:67:c7:ba:d8:76:2e:6a:
                    b7:97:d6:d7:c3:77:75:0e:0d:c7:b7:98:a4:05:be:
                    33:0a:5a:d2:80:c0:95:a8:66:39:4d:c6:53:8f:51:
                    86:e5:03:13:52:84:67:f5:91:8e:02:19:36:6f:17:
                    44:14:ca:59:e6:28:26:0f:a1:6d:ce:a2:d6:08:fb:
                    30:58:f1:16:b4:68:18:85:0f:7c:b8:e3:ea:0e:7c:
                    f7:1b:79:26:80:68:e9:62:d0:0c:d6:5f:fb:4b:32:
                    df:77:af:ca:75:61:1e:12:6c:35:b3:34:27:1e:0a:
                    77:d5:c8:4b:6f:b6:39:e2:37:11:71:27:ac:80:fb:
                    73:82:cc:71:ab:05:40:34:aa:21:ea:cd:5e:e5:78:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D1:97:73:3C:29:E3:5B:71:B9:90:79:34:0D:E4:F1:58:70:02:79
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3136382e3139372e36342e302f32322d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:78:38:61:9d:58:98:61:c5:1a:ca:37:fe:ed:23:17:0e:82:
         b1:d4:34:bc:2b:ce:d0:7d:70:dd:da:23:a1:4f:52:4c:fb:de:
         62:40:14:46:de:a0:3c:74:12:88:76:6f:c2:99:e3:d6:0c:f5:
         89:36:46:c7:92:62:06:dd:2e:20:e8:55:5a:44:e2:3f:a5:40:
         cd:c0:9f:16:ad:93:73:85:e8:cc:05:e6:6e:de:ce:14:9e:53:
         bc:c2:fd:77:0e:69:14:cf:3c:73:89:be:06:ca:05:eb:85:cb:
         3e:e4:d7:ea:f0:e8:fd:05:44:16:11:35:14:8d:60:44:98:94:
         30:2a:e5:f3:f3:ca:eb:b6:bf:d0:86:cc:46:8b:cf:c9:67:97:
         ce:65:f7:1b:74:f3:b8:74:80:3b:d5:8c:91:28:58:a7:42:e3:
         fe:da:9e:67:23:6e:cf:6a:51:d3:b3:8e:4f:50:3e:33:bf:f4:
         19:eb:1a:82:ef:73:2f:83:31:7f:5e:1a:a9:2e:44:ad:1e:05:
         ad:37:db:bb:3f:ee:b8:52:32:45:94:32:89:74:d3:1c:7e:fc:
         76:21:91:8a:0d:19:1e:90:03:46:64:0e:1a:da:d4:e6:cf:9f:
         87:51:58:a1:85:9b:d1:c8:8a:51:59:50:7e:b1:fe:3d:3e:2f:
         17:12:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:39:55 2025 by rpki-client