Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa
File:                     3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          fG4mnGPTjS9Y4dCDhE/iVdKO/sBvOWMKDkrv6j+fQRU=
Subject key identifier:   A0:F8:59:E3:13:6D:E1:D8:C6:D2:EA:34:98:AE:20:36:D8:2B:7E:2C
Certificate issuer:       /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Certificate serial:       5FDCD275571F8B5B367F93AC10C9ABDCE995ED55
Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa
Signing time:             Thu 09 Jan 2025 14:07:27 +0000
ROA not before:           Thu 09 Jan 2025 14:02:27 +0000
ROA not after:            Thu 08 Jan 2026 14:07:27 +0000
asID:                     263541
IP address blocks:        191.241.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:d2:75:57:1f:8b:5b:36:7f:93:ac:10:c9:ab:dc:e9:95:ed:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
        Validity
            Not Before: Jan  9 14:02:27 2025 GMT
            Not After : Jan  8 14:07:27 2026 GMT
        Subject: CN=A0F859E3136DE1D8C6D2EA3498AE2036D82B7E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:95:b8:27:3f:0a:bd:9f:c4:2a:bf:91:3c:
                    25:d2:29:5a:ca:ea:86:f0:20:c9:0b:51:c4:04:ab:
                    fc:e5:ff:c3:34:e3:3f:11:ed:98:0e:c9:a5:03:ea:
                    26:de:cb:8a:e6:a3:07:7d:a1:8e:3e:47:ed:13:9c:
                    b0:48:36:d6:38:0b:82:d2:a5:ad:ec:1b:3f:e1:da:
                    ca:df:e4:d6:66:48:23:cb:f5:8c:28:8a:7c:f4:12:
                    c3:40:cc:0a:3f:58:bc:8e:5d:f2:6a:67:d0:74:32:
                    23:ab:aa:2d:57:fe:cd:ee:b1:2c:38:a8:84:b5:85:
                    8d:29:d7:d0:28:73:10:88:72:78:e6:c7:e7:82:6e:
                    2c:96:55:b8:b3:f2:1d:0d:17:0a:34:dd:9e:27:da:
                    ee:08:79:28:a7:22:c8:c0:ba:12:cb:63:9b:46:ab:
                    65:c1:34:47:e1:f1:10:ee:4d:94:96:d9:45:08:b8:
                    88:bd:16:5f:c9:40:65:f6:a5:1f:ed:dc:8a:5f:bc:
                    c8:54:4e:ec:f4:a2:d4:d3:2b:85:c7:e4:18:41:16:
                    f8:fb:22:eb:96:d1:99:d7:78:a2:9e:aa:45:13:be:
                    a6:a3:ac:fd:23:4f:e4:0a:3b:cf:8b:7a:35:6f:85:
                    a9:3a:f4:8d:0b:f4:37:95:6b:20:65:a7:15:7e:3a:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F8:59:E3:13:6D:E1:D8:C6:D2:EA:34:98:AE:20:36:D8:2B:7E:2C
            X509v3 Authority Key Identifier:
                keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:e5:1c:5b:c1:bd:5e:f8:ee:2b:b7:a8:cb:e0:5b:6c:8d:74:
         3b:25:76:bc:ca:f3:f0:34:a5:78:ee:e3:79:0c:c7:22:d3:e2:
         dc:6d:aa:99:78:11:2b:a1:d0:86:40:6b:97:98:2d:8a:84:be:
         df:3c:0b:20:2f:2a:23:31:6e:10:3d:64:db:6d:0f:aa:61:25:
         07:2d:be:60:64:5a:d5:4c:6d:eb:b4:2d:57:23:1a:aa:1e:b6:
         ad:8a:13:be:21:7b:32:d8:0d:6e:6c:07:90:59:71:a9:7c:57:
         6e:a2:fb:a5:ee:fa:4e:02:0f:b9:66:0d:82:5c:17:16:79:6c:
         1a:43:72:d7:42:4b:e8:17:b0:cd:40:75:3d:c8:ff:88:25:cc:
         9f:4d:59:28:c8:73:46:49:1e:72:31:ec:04:88:e6:cf:e7:16:
         e4:51:8a:a2:69:c0:38:a1:0a:b0:c8:a1:3c:5d:73:d7:ca:dd:
         f8:4f:b4:8c:fc:60:9c:7d:28:40:d9:90:c2:a8:1e:06:aa:1e:
         9e:37:39:4c:3b:68:6b:db:65:8a:11:fd:8f:a0:cc:12:a7:11:
         5e:68:79:34:7a:03:05:1e:44:9a:58:f0:5d:18:c0:f2:fe:46:
         3f:b3:e9:a3:0b:a3:b3:bb:6f:4a:bf:be:7c:62:5f:44:b5:e7:
         0d:fc:2b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:35:38 2025 by rpki-client