Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa
File:                     3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (raw, json)
Hash identifier:          fyv559suoxOTWuZ+x7F4q8+xix1OaSFY/Rn/K8Tm6UI=
Subject key identifier:   15:1B:52:BB:53:88:96:C0:A9:54:36:00:E1:12:37:DF:55:CE:D0:8A
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       1643A108F7C0BC3A61ABE6854E0C4FFBD677A5A7
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     263492
IP address blocks:        191.243.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:43:a1:08:f7:c0:bc:3a:61:ab:e6:85:4e:0c:4f:fb:d6:77:a5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=151B52BB538896C0A9543600E11237DF55CED08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:2b:f3:87:bf:bf:72:17:07:64:9e:1e:f5:
                    0b:32:4a:33:2c:45:de:85:b5:49:92:33:e8:1f:a4:
                    de:8c:41:10:43:c1:4e:de:e6:49:47:d6:3e:47:25:
                    22:b4:ef:48:df:c9:c7:5d:97:fc:31:4e:3c:16:1e:
                    e9:c7:c8:35:f1:a2:be:e7:78:d2:c4:90:5f:e8:e5:
                    31:89:21:1f:2c:19:b6:f6:e1:10:c5:ef:4d:fd:f9:
                    39:5c:e8:65:c7:94:c7:bd:67:b5:5e:a0:10:9f:cf:
                    e8:4a:6f:aa:e1:a2:47:c1:f5:3a:f8:a5:98:97:9d:
                    6f:5f:98:0c:b0:bd:3f:13:19:8c:d7:a2:0f:b8:98:
                    a9:31:cb:9a:2c:7b:1a:bb:d1:df:88:30:c7:d9:2b:
                    68:41:c0:af:f8:f1:f0:cb:84:10:3e:5d:dc:3a:c9:
                    c7:bd:a3:f4:c0:49:d8:3f:b7:be:5a:13:ca:87:fe:
                    a7:88:5f:db:50:d1:9b:fb:2f:92:23:87:dd:89:69:
                    59:7d:7d:1f:cc:bd:74:2c:15:61:f8:3b:f3:65:ce:
                    f4:c8:1e:2c:41:60:3d:00:51:9b:97:a9:9a:c1:1d:
                    b5:05:8d:03:8f:07:d2:7a:50:2b:f8:06:33:b8:16:
                    69:11:ce:a9:7a:98:f1:cb:99:cf:04:4a:d5:81:d1:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1B:52:BB:53:88:96:C0:A9:54:36:00:E1:12:37:DF:55:CE:D0:8A
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:e3:95:11:b4:44:a9:86:ee:bd:ee:ed:30:d8:fe:03:df:64:
         2c:9d:c5:c9:64:eb:f8:ee:05:21:7f:7f:e1:28:36:e2:7a:c8:
         cf:83:a8:ff:c0:d9:13:46:ff:72:f2:73:e4:77:a4:ea:bd:5c:
         05:cb:9a:6d:bf:17:3b:0d:b0:9f:6e:a2:73:ca:e2:a2:f7:4f:
         5f:df:ac:f3:e0:90:24:0c:f7:ff:ff:25:0b:95:61:11:7e:ff:
         15:25:64:f5:50:01:88:a4:ca:51:77:d9:a8:81:2d:b7:49:9a:
         26:e8:19:ef:c9:ba:bc:78:a8:b9:50:3d:d0:d3:70:ab:0a:e7:
         05:b3:0d:7b:b6:29:ea:16:65:f4:60:33:cf:6e:63:0e:36:fa:
         10:88:bb:d6:95:18:e1:10:82:00:b8:20:b6:ef:8a:39:9b:9d:
         c9:a3:ea:de:0a:55:78:6f:4f:d4:22:e1:4c:1c:a1:cf:c5:dc:
         c3:19:6d:72:ab:c1:46:97:ac:d2:c5:2b:db:65:46:03:34:c3:
         54:4c:d1:d5:5c:d3:b6:31:92:c8:36:fe:32:02:2e:31:88:99:
         53:a3:a4:1a:a7:64:87:f5:61:74:94:1d:a0:7b:9f:54:d3:6c:
         bc:06:67:da:42:b1:07:1d:83:da:9a:28:f8:29:98:b5:1d:8d:
         4a:cf:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:17:32 2025 by rpki-client