Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e302e302f32342d3234203d3e20323730333139.roa
File:                     3139302e38332e302e302f32342d3234203d3e20323730333139.roa (raw, json)
Hash identifier:          AKshzH9UoKz+8zSND+4+uMCSkyAKQNocsGtnfnkviiA=
Subject key identifier:   8D:52:D7:8A:47:A1:D5:86:63:D1:0B:47:9C:5A:66:BC:53:F6:97:14
Certificate issuer:       /CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
Certificate serial:       4F05DFB9023783AC0487F8BCEF089919F0F6B967
Authority key identifier: 47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e302e302f32342d3234203d3e20323730333139.roa
Signing time:             Wed 05 Mar 2025 20:58:12 +0000
ROA not before:           Wed 05 Mar 2025 20:53:12 +0000
ROA not after:            Wed 04 Mar 2026 20:58:12 +0000
asID:                     270319
IP address blocks:        190.83.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl
                          rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 00:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:05:df:b9:02:37:83:ac:04:87:f8:bc:ef:08:99:19:f0:f6:b9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
        Validity
            Not Before: Mar  5 20:53:12 2025 GMT
            Not After : Mar  4 20:58:12 2026 GMT
        Subject: CN=8D52D78A47A1D58663D10B479C5A66BC53F69714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:04:d3:61:0d:f0:1a:86:28:3b:a0:cf:13:
                    8e:6d:be:05:90:2a:1f:74:d2:69:80:72:59:1c:31:
                    6a:01:2c:a8:9e:5b:e5:cd:62:af:c2:ed:7b:7e:3c:
                    44:cc:83:96:5b:5a:5f:9e:95:f6:ea:73:a3:3a:1d:
                    2c:65:f7:2d:d6:40:40:a3:0a:1d:59:8e:40:e1:8e:
                    17:9b:84:89:7a:cb:3a:e6:b1:0c:9d:00:d9:32:95:
                    c9:29:f8:8d:01:a6:e0:61:86:de:fe:68:70:13:52:
                    e9:3d:aa:e4:c3:c5:5d:4a:a1:39:21:bc:b8:7a:54:
                    f6:83:db:d8:e3:04:6e:8f:23:38:4e:91:ee:ee:4e:
                    13:90:39:87:e1:bf:35:20:f6:3a:83:e1:5d:15:39:
                    13:63:84:a7:a6:eb:89:85:b3:fc:62:66:01:38:be:
                    b5:ab:fa:97:64:2c:7a:17:44:cd:c2:45:74:bd:1b:
                    9c:cc:db:c8:66:b2:9e:ab:3b:20:cc:80:74:bc:0e:
                    53:7e:c8:b2:33:5e:76:1f:c4:e7:bf:7e:b5:b0:78:
                    2d:35:16:44:e2:7b:6a:e3:c7:b3:9d:8e:c4:58:f9:
                    33:cc:d7:f1:1b:1c:b9:6f:fd:0a:4f:d0:dc:2f:dd:
                    ca:c4:8e:b8:ea:ee:49:2f:19:1c:40:ef:fa:88:7c:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:52:D7:8A:47:A1:D5:86:63:D1:0B:47:9C:5A:66:BC:53:F6:97:14
            X509v3 Authority Key Identifier:
                keyid:47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e302e302f32342d3234203d3e20323730333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:0a:6d:10:2d:c9:67:82:e6:b9:9f:f3:59:d0:af:1e:40:
         19:63:8e:d8:0f:2e:49:66:60:11:06:b3:f5:64:40:d1:15:1c:
         c7:37:04:a5:18:91:d6:e8:2e:4e:17:03:37:85:c4:c0:1b:3c:
         d2:c8:e0:30:2b:e4:ac:ed:bc:40:62:c7:82:99:ec:8f:8a:cb:
         cd:e0:3a:ab:2a:d1:cb:f7:6b:55:7e:0c:26:97:3a:e0:69:c6:
         6d:36:ff:9e:5e:c5:d5:38:9f:da:ef:a4:2e:4d:57:9d:d5:d2:
         0a:fa:b3:f5:f9:fe:e7:09:87:12:c9:0c:13:3c:24:6d:b1:3e:
         4a:3a:44:97:40:c3:d5:fd:65:df:7e:dc:4a:05:a2:99:12:13:
         de:b0:40:36:2e:c3:10:96:30:3f:5f:66:1e:68:45:d0:f7:3e:
         46:aa:ab:a5:a9:c8:0d:77:11:10:82:c6:52:11:64:16:cc:18:
         9b:d0:f9:26:c1:3d:4c:3a:d8:68:7e:d8:4a:9a:e1:13:ff:78:
         b4:25:cd:b0:03:0f:2b:78:da:3b:df:c8:97:63:c0:f6:fe:1f:
         0c:8c:73:1b:f5:d8:43:67:af:17:b3:07:91:96:a4:4f:d4:5d:
         9e:52:28:e7:c6:30:42:38:39:a4:e1:d3:76:38:1c:cf:44:f8:
         eb:b4:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:08 2025 by rpki-client