Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61946.roa
File:                     AS61946.roa (raw, json)
Hash identifier:          MHezp5ABff3K9mAC3u37SxDxJqkpY3OCZMH5EO6JpvI=
Subject key identifier:   F9:E2:FD:B8:08:CB:31:32:EB:41:D0:E9:B5:32:61:AA:90:DE:F8:42
Certificate issuer:       /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Certificate serial:       4B2381AC63B48F5BBE0A876282AF993E30C2227F
Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61946.roa
Signing time:             Thu 06 Mar 2025 08:42:17 +0000
ROA not before:           Thu 06 Mar 2025 08:37:17 +0000
ROA not after:            Thu 05 Mar 2026 08:42:17 +0000
asID:                     61946
IP address blocks:        201.139.184.0/21 maxlen: 21
                          201.139.184.0/23 maxlen: 23
                          201.139.186.0/23 maxlen: 23
                          201.139.188.0/23 maxlen: 23
                          201.139.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
                          rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:23:81:ac:63:b4:8f:5b:be:0a:87:62:82:af:99:3e:30:c2:22:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
        Validity
            Not Before: Mar  6 08:37:17 2025 GMT
            Not After : Mar  5 08:42:17 2026 GMT
        Subject: CN=F9E2FDB808CB3132EB41D0E9B53261AA90DEF842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ea:96:9d:9e:86:57:38:15:8c:61:8f:8a:82:
                    c4:c8:87:7f:d2:79:ee:ef:b9:11:2b:3d:8f:80:6e:
                    34:5e:81:d0:33:ed:79:5f:0a:93:88:cd:5b:ad:55:
                    31:e3:b5:f7:27:6d:1a:a3:d3:87:81:ae:3c:12:d1:
                    3c:a7:5f:db:9b:31:3d:fc:15:b1:e5:53:0c:78:6a:
                    74:0f:29:7a:ff:8c:0e:67:e3:32:93:b4:d4:b6:6c:
                    29:b1:cc:92:3f:58:74:24:ce:91:bd:d6:16:cf:cd:
                    af:9b:e9:d7:2c:ee:da:1a:05:9f:9f:e3:05:d5:21:
                    fb:43:77:e7:aa:04:73:31:c3:40:a7:25:a5:1e:d8:
                    86:02:ed:ce:02:e7:17:39:c7:13:44:9a:d2:d7:4c:
                    b9:aa:44:ca:88:30:a4:b7:29:af:3c:b7:bc:4e:ab:
                    14:be:12:39:ca:a4:88:0d:d1:63:e8:b0:0c:6e:da:
                    16:fb:76:da:d1:b7:91:5d:66:89:71:23:d8:d8:b3:
                    52:8d:33:b8:a4:7e:2f:ee:62:37:d9:3c:34:6a:ad:
                    41:4c:cf:3a:e9:58:a3:b2:f9:47:fc:12:ba:f6:32:
                    4e:7c:b4:04:4e:66:69:e6:87:0d:30:26:fa:65:f2:
                    b8:2c:9f:88:59:ca:a5:43:7e:09:fa:95:a7:b3:64:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E2:FD:B8:08:CB:31:32:EB:41:D0:E9:B5:32:61:AA:90:DE:F8:42
            X509v3 Authority Key Identifier:
                keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61946.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:1c:6d:b1:ac:37:05:f5:e1:c3:c7:8a:57:09:0c:f8:e5:22:
         3b:b9:a9:4f:15:15:57:c3:4b:cc:98:5a:07:b5:35:a4:32:59:
         48:5c:d0:33:23:7b:73:61:69:bf:8b:57:de:51:51:02:5e:34:
         cc:69:f6:32:90:fb:ca:50:95:3d:37:72:d2:fe:e8:a6:f2:7d:
         b8:3c:b7:7f:44:9e:b1:e2:6d:86:29:5b:21:d8:d3:4f:87:8a:
         f0:42:ab:05:0e:15:c5:5c:58:a7:43:51:22:db:ab:f6:27:23:
         d2:2a:17:41:23:c2:30:fd:e9:d1:8a:3e:6e:65:e6:11:9f:6e:
         4b:c7:19:f0:ea:16:66:ab:6b:4d:ca:f7:47:89:20:42:27:7c:
         34:6e:f0:5c:34:65:b9:25:7f:cc:67:5c:04:65:55:c2:ac:9e:
         eb:e1:16:54:b0:bc:fe:c4:89:b2:1c:44:de:dd:3e:5d:0a:9a:
         29:50:9d:ff:ea:f3:5c:d7:d5:08:cf:af:a0:c5:32:bd:0d:2e:
         68:31:93:3c:4e:61:a0:b6:55:57:1a:eb:81:22:79:79:24:4a:
         35:6d:36:fa:0e:ce:d1:1e:74:81:c6:54:0f:91:cc:4e:93:35:
         0c:5e:e7:b2:2f:d5:7b:fc:81:86:49:a7:d9:5a:bd:72:60:fa:
         01:ea:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:24:43 2025 by rpki-client