Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa
File:                     3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (raw, json)
Hash identifier:          2YCS6Yb/9D0/n8xix6Bzd5N6XCOxnBclmTpI31jfQuw=
Subject key identifier:   1E:DF:B4:94:CC:51:70:BE:20:5F:4A:0F:D6:C1:6D:06:2B:1A:11:D4
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       65847231DB01F19A45E5D26B98D8CEF19B921AA5
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa
Signing time:             Wed 16 Apr 2025 10:37:24 +0000
ROA not before:           Wed 16 Apr 2025 10:32:24 +0000
ROA not after:            Wed 15 Apr 2026 10:37:24 +0000
asID:                     263509
IP address blocks:        191.243.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:84:72:31:db:01:f1:9a:45:e5:d2:6b:98:d8:ce:f1:9b:92:1a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Apr 16 10:32:24 2025 GMT
            Not After : Apr 15 10:37:24 2026 GMT
        Subject: CN=1EDFB494CC5170BE205F4A0FD6C16D062B1A11D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:6a:b5:35:2d:ab:68:29:84:10:34:3f:fb:
                    30:21:26:ce:f6:54:55:de:bc:3b:71:17:7e:32:74:
                    ca:04:73:51:78:13:e2:af:62:cb:1d:0f:54:75:b1:
                    60:31:20:44:15:15:ba:92:66:cf:5d:e0:7a:d3:52:
                    21:83:5e:7c:d4:ec:c0:73:3e:11:c2:4e:31:90:8e:
                    3d:8c:76:93:e2:32:e0:79:e0:c5:98:42:c2:5e:d6:
                    5a:5d:76:a0:b6:1e:06:a9:35:a9:86:39:69:54:08:
                    95:60:21:59:2d:89:9d:85:c5:87:f3:f1:f9:3b:9d:
                    d9:73:79:40:36:97:96:db:9b:24:f3:81:9c:05:68:
                    eb:6e:a2:65:13:a0:2a:f8:31:8d:84:5f:e6:b3:33:
                    4c:1b:e9:77:d7:a4:79:63:13:9b:ba:bb:ae:c5:b9:
                    15:7d:49:7e:97:93:3c:56:4f:9a:5d:45:6e:a0:ce:
                    84:1d:83:57:b6:90:c3:bb:a6:ad:2b:78:62:87:4e:
                    87:14:88:bc:16:db:3e:40:5b:52:ef:70:3a:0b:2a:
                    bf:f9:4e:2b:1c:6a:aa:a9:67:40:40:ae:f4:3e:54:
                    e2:d4:b7:61:9e:18:92:ce:0b:f0:2b:af:b8:bc:ba:
                    42:91:fa:a8:9a:68:5e:2b:b2:84:37:18:89:d9:27:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DF:B4:94:CC:51:70:BE:20:5F:4A:0F:D6:C1:6D:06:2B:1A:11:D4
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:41:9d:dd:88:ac:98:ee:05:5a:ce:40:4e:a6:e8:f5:ed:be:
         da:92:3a:ad:bd:ac:86:90:d5:6f:d5:1d:02:e6:5f:d7:91:2c:
         5b:64:78:27:d0:08:c2:30:20:dc:5a:52:5e:7c:a5:79:38:9d:
         91:44:53:9f:af:0e:10:d8:b6:e2:ad:34:93:da:85:f8:31:74:
         5a:1a:81:d1:b7:80:b1:2e:e9:55:21:c6:99:75:cc:0e:77:1d:
         68:c6:b6:99:51:40:68:b6:7d:0a:51:af:ce:33:bd:6b:cd:76:
         83:94:c9:a1:87:71:c4:7c:4b:ed:e7:f5:4b:cc:47:d3:94:20:
         cf:94:22:d3:e4:90:4a:62:53:49:a9:71:c7:62:13:51:2a:8f:
         2d:d5:32:1c:08:15:f3:ed:54:36:f6:49:1f:61:5b:87:16:63:
         0b:c4:1c:34:ab:6f:ca:b0:94:0e:38:99:b4:76:cf:39:f7:69:
         f0:01:0a:dc:a3:c2:d2:d4:5b:6b:2c:3f:81:f9:bd:d1:4f:14:
         fe:bf:36:ff:65:82:bf:bb:2e:5b:bd:c7:47:f1:72:8b:df:68:
         41:18:5e:ff:5f:61:28:dc:49:79:a7:c0:14:b3:30:34:12:01:
         d9:a5:9a:19:79:10:58:5f:44:37:5f:7c:f5:0c:3c:ae:2b:7a:
         ef:7d:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:55 2025 by rpki-client