Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa
File:                     3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa (raw, json)
Hash identifier:          yjukKX2qFl+ag4oBXkInGjhNeRNYgSEFnV9bYH+/uuY=
Subject key identifier:   53:21:52:31:62:1D:95:E6:1D:5A:C6:A3:DE:6E:C7:18:8D:AF:97:66
Certificate issuer:       /CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418
Certificate serial:       5FC47FFB01C1AAB58A344228E339C2F9CD2695AE
Authority key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa
Signing time:             Thu 06 Mar 2025 12:16:59 +0000
ROA not before:           Thu 06 Mar 2025 12:11:59 +0000
ROA not after:            Thu 05 Mar 2026 12:16:59 +0000
asID:                     266387
IP address blocks:        191.37.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl
                          rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c4:7f:fb:01:c1:aa:b5:8a:34:42:28:e3:39:c2:f9:cd:26:95:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418
        Validity
            Not Before: Mar  6 12:11:59 2025 GMT
            Not After : Mar  5 12:16:59 2026 GMT
        Subject: CN=53215231621D95E61D5AC6A3DE6EC7188DAF9766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:85:5c:71:13:55:d6:9e:91:db:51:98:26:
                    49:de:a3:0c:ad:f4:f8:6a:08:24:cf:d4:68:93:ae:
                    7d:1f:f8:34:5e:98:d9:51:49:03:f0:a2:df:58:f0:
                    a7:12:27:fc:ec:4e:e9:49:71:3c:16:ba:1d:88:2b:
                    57:7b:b8:a6:7a:10:38:19:fb:1d:33:ca:6a:cf:c7:
                    0d:70:ae:de:3d:01:1e:a4:1c:69:6b:c3:d8:81:97:
                    18:6c:1d:7f:63:ab:29:47:bc:1f:f0:c9:8b:3d:00:
                    56:f9:92:65:89:3e:4f:37:78:77:87:b5:50:2f:42:
                    fc:5a:24:44:e5:db:12:c0:ab:70:e7:dd:84:42:5a:
                    fe:43:9f:72:0f:12:b8:5d:3f:d6:5e:13:2a:46:2b:
                    2f:60:98:85:e6:8c:fb:57:e6:4e:c1:d7:6f:03:aa:
                    ea:5d:3c:8b:48:c5:67:b8:cb:e9:65:2f:ca:92:2f:
                    c5:7e:ce:2d:2e:ff:db:83:a0:40:67:96:02:0e:d8:
                    58:94:5c:da:83:96:e5:ee:57:c0:ce:f2:1d:71:38:
                    54:38:92:b7:ab:69:0b:61:00:1b:53:2e:08:77:d2:
                    0b:c9:4d:c2:c0:f1:51:bf:11:24:c2:33:39:71:7c:
                    7e:e7:88:ee:c3:d1:e8:37:63:d2:ea:6c:a2:9e:1b:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:52:31:62:1D:95:E6:1D:5A:C6:A3:DE:6E:C7:18:8D:AF:97:66
            X509v3 Authority Key Identifier:
                keyid:A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:58:ba:aa:40:e5:12:40:e4:74:fb:09:56:45:22:ba:31:3d:
         39:22:94:fb:20:1d:5d:2e:38:b2:3b:46:65:c6:79:0f:c8:aa:
         cf:8c:69:51:38:95:09:d9:16:59:e6:b7:4a:ea:d7:68:03:75:
         ee:4b:5a:b7:11:31:cb:56:72:a1:e8:0e:c2:db:05:b5:2c:52:
         c1:29:49:40:07:6b:f1:0c:db:99:ae:5e:19:11:f7:d7:61:1e:
         fb:53:05:20:1a:6b:e1:4e:08:00:66:70:44:a0:59:c7:98:29:
         11:45:e3:99:57:53:36:c1:1c:b2:6c:8b:ff:fd:87:5b:36:e3:
         b5:18:a9:8a:d8:f9:28:bd:23:03:c5:63:8f:ff:6c:97:ab:78:
         ed:19:34:94:f5:7e:a7:80:de:c7:23:dc:59:61:1b:3e:cd:94:
         b5:77:4b:8f:bb:c5:92:b3:95:a0:90:e4:cb:41:b2:b2:e9:f4:
         91:d9:a8:1f:d7:48:26:bf:2b:1c:6e:9b:6c:88:8d:df:08:c1:
         9e:aa:40:64:5b:f5:c4:79:aa:03:54:79:07:24:60:6c:d8:80:
         00:1c:75:e1:1c:05:5a:98:41:bd:78:a9:10:3a:5d:c4:27:ed:
         ae:39:32:24:1e:0a:d2:11:d7:a3:0e:ca:04:9e:c5:e8:81:98:
         35:ff:a2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:26:18 2025 by rpki-client