Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa
File:                     3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (raw, json)
Hash identifier:          OnKIYKJargD/FTIo6Z54sfeV3foda7Z1vivFEJao5xA=
Subject key identifier:   44:A5:28:99:22:B6:6D:EF:BD:77:90:56:E5:EB:D7:BE:0E:3D:8E:7A
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       1159C2DCD7C354376962E106FDBE12B2C2D4A65E
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     263492
IP address blocks:        191.243.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:59:c2:dc:d7:c3:54:37:69:62:e1:06:fd:be:12:b2:c2:d4:a6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=44A5289922B66DEFBD779056E5EBD7BE0E3D8E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:e4:d0:4c:4e:c2:e0:07:8f:5b:b2:37:91:
                    cd:b6:99:fe:58:8e:72:5d:c8:16:07:d9:69:87:42:
                    39:b8:8f:28:07:21:6f:c3:28:b0:20:ae:c7:91:45:
                    5f:f1:c4:a6:33:7f:6e:f7:d9:7f:bc:1f:b4:b9:ad:
                    c4:a9:ed:53:ae:e8:f7:8f:53:97:cc:77:f3:f3:d8:
                    63:a2:29:a1:70:75:c1:c5:ee:4a:1a:68:d7:6d:00:
                    85:8f:f7:c0:3e:8d:c7:0d:b5:e3:68:78:b1:29:64:
                    6d:97:47:f5:e1:60:01:43:a1:07:ab:0d:83:3c:16:
                    04:36:00:49:a9:2e:2e:b0:95:db:88:3c:90:5f:36:
                    03:b7:fc:a9:cf:49:e3:0b:9e:e8:da:32:08:86:9b:
                    83:9d:93:9b:15:c7:38:a7:85:e1:f1:5e:ac:45:07:
                    b5:c5:00:47:54:c5:a9:9e:e8:16:de:cc:e4:fb:29:
                    ab:c1:20:c8:a9:6c:5a:af:f1:01:98:00:25:0d:9f:
                    96:07:d6:ac:be:88:ab:15:bd:43:a4:3f:e5:ff:c3:
                    50:ee:fb:ea:c2:b8:10:15:a5:02:8b:a1:1e:62:b7:
                    c2:25:cc:1a:c3:58:26:67:a8:6a:26:34:c3:47:11:
                    d2:59:9c:fa:e7:26:21:09:82:35:40:bb:2c:2f:ac:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A5:28:99:22:B6:6D:EF:BD:77:90:56:E5:EB:D7:BE:0E:3D:8E:7A
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:96:3c:4d:f3:01:06:f5:1a:82:36:b2:cc:39:3e:3d:22:
         6c:9c:2f:22:e0:32:ae:48:06:2b:93:68:2e:a2:54:85:d2:03:
         bd:9b:65:65:7c:83:81:27:a6:21:bf:e6:7d:60:af:f3:13:1b:
         7e:c5:bc:8f:61:56:f0:38:a7:f9:bb:25:65:fd:2e:48:34:2c:
         f8:19:89:6d:bd:e4:16:36:19:e4:3a:2d:e6:d6:85:d6:b7:2d:
         f0:b5:04:c0:78:9b:fa:67:4d:da:4e:c6:e1:ee:86:ac:f2:44:
         9f:a9:b0:e8:18:13:f8:af:55:90:a1:db:41:4b:92:70:5d:f8:
         6f:e0:63:27:dc:23:21:66:8a:ee:33:78:df:cf:f5:5b:91:98:
         2a:4a:c5:f2:8b:84:ec:7b:45:e2:b6:76:ff:c3:36:a7:f8:ff:
         57:87:e2:a7:dc:6d:a5:d2:bd:9b:59:78:70:32:49:a6:83:ca:
         84:86:e8:56:34:16:19:c1:a4:df:46:dd:97:bd:18:3f:60:91:
         ba:40:53:ef:cf:9e:a9:e8:d1:b3:af:9d:59:b9:50:ec:00:0c:
         f6:8a:38:6b:e6:b5:84:16:c3:50:ab:26:4f:4a:57:10:51:09:
         61:5c:74:e3:fe:b5:4a:9a:f1:0a:bd:d2:cf:de:c4:b2:78:4c:
         a8:97:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:17:34 2025 by rpki-client