Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/3139302e3131352e38382e302f32322d3332203d3e20323730343437.roa
File:                     3139302e3131352e38382e302f32322d3332203d3e20323730343437.roa (raw, json)
Hash identifier:          YDJJYAlcpeXdKh3/U6MEx2jUv/4DwQcLdf0Z+WaQyNA=
Subject key identifier:   80:69:89:90:78:A9:0F:70:85:73:FE:76:28:D4:A8:80:C2:30:9B:4F
Certificate issuer:       /CN=31B5F96F3B9191256E666BEB1B1FAD77B363E20A
Certificate serial:       64791EDC52BE1772ED324964DB83B3A6507F1ABF
Authority key identifier: 31:B5:F9:6F:3B:91:91:25:6E:66:6B:EB:1B:1F:AD:77:B3:63:E2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/3139302e3131352e38382e302f32322d3332203d3e20323730343437.roa
Signing time:             Fri 21 Mar 2025 10:56:19 +0000
ROA not before:           Fri 21 Mar 2025 10:51:19 +0000
ROA not after:            Fri 20 Mar 2026 10:56:19 +0000
asID:                     270447
IP address blocks:        190.115.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.crl
                          rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:79:1e:dc:52:be:17:72:ed:32:49:64:db:83:b3:a6:50:7f:1a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31B5F96F3B9191256E666BEB1B1FAD77B363E20A
        Validity
            Not Before: Mar 21 10:51:19 2025 GMT
            Not After : Mar 20 10:56:19 2026 GMT
        Subject: CN=8069899078A90F708573FE7628D4A880C2309B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:3c:ef:91:45:70:f8:f2:40:49:30:9d:17:
                    7c:34:ad:4f:6b:3b:f6:e8:b9:c1:f1:41:d2:3a:51:
                    6e:c7:a8:76:4c:44:85:f3:a7:d5:5b:69:cd:08:d8:
                    71:fc:a3:d4:2f:72:e2:1e:35:bc:e4:03:a9:22:71:
                    24:5d:1b:d2:df:32:71:c2:b6:95:87:3d:24:9b:dd:
                    c5:8b:04:4f:5b:83:91:39:7f:c7:9e:a7:8f:79:1a:
                    c2:4a:9c:1c:b4:e1:ca:d0:e2:ff:3d:01:74:bd:0f:
                    06:7a:98:d3:13:c0:b5:0a:ea:d5:46:37:59:81:ce:
                    99:ef:86:36:3a:9f:7a:18:47:c1:72:b5:57:7a:09:
                    ac:86:a3:d9:a3:1a:82:e0:0e:2b:0b:c1:b1:00:81:
                    d7:c9:fe:be:7b:c8:e1:e4:19:96:33:bd:12:57:62:
                    d7:ed:89:92:a4:1a:4e:6c:0f:32:db:ca:9f:67:d5:
                    94:7d:2e:e7:47:74:c8:d9:0c:0c:e5:aa:ea:fb:66:
                    6f:57:00:50:13:2a:e4:0e:cb:ee:85:0e:59:04:01:
                    0a:2f:da:38:98:b9:5c:2f:34:0e:a0:5a:00:59:53:
                    7a:f8:4a:3a:04:34:2c:14:18:cc:9c:51:9c:9b:2b:
                    73:95:c5:1e:75:54:3e:6d:52:94:0f:42:fa:83:a3:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:69:89:90:78:A9:0F:70:85:73:FE:76:28:D4:A8:80:C2:30:9B:4F
            X509v3 Authority Key Identifier:
                keyid:31:B5:F9:6F:3B:91:91:25:6E:66:6B:EB:1B:1F:AD:77:B3:63:E2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/3139302e3131352e38382e302f32322d3332203d3e20323730343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:3a:47:61:47:16:93:20:b1:88:c6:8c:6c:9a:7c:05:95:ea:
         84:2b:d6:33:ee:e2:c7:2b:f0:1a:51:99:89:e3:20:61:3d:1b:
         06:63:8b:e7:a4:16:85:d7:1e:6c:8f:c0:96:78:2e:b3:f0:5d:
         f1:55:64:42:dc:e3:27:44:11:1f:3a:35:db:3d:b6:c8:97:0a:
         40:7e:9d:e3:58:74:d7:86:04:94:5e:0d:00:13:18:8b:9d:76:
         17:71:57:37:cb:f8:ae:7c:a9:de:2f:24:e7:5e:8e:60:29:7e:
         58:db:4a:ed:90:d3:40:90:8e:21:b3:cf:f6:81:b4:7d:48:70:
         9a:f0:0f:fa:48:ad:8b:4d:d3:a9:d4:e0:7e:e0:9b:22:a2:9e:
         fa:bc:ae:69:e5:8b:59:ec:c4:3b:f4:cb:43:06:65:93:b8:29:
         bf:66:40:ee:95:6d:d7:9c:2d:11:82:a9:22:76:09:fe:86:ba:
         38:46:0d:f2:88:1a:0a:4e:c4:d4:9e:a6:38:22:81:40:21:a8:
         d6:ec:06:51:43:95:b3:24:55:7a:13:8c:aa:69:ab:1f:8f:e7:
         a4:1c:9f:a8:21:b2:d5:92:4d:f2:7c:8b:8d:52:e6:be:82:f7:
         98:6a:56:8c:12:3d:a6:e6:62:3c:41:17:70:d9:74:9c:7c:00:
         4a:00:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:53:55 2025 by rpki-client