Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa
File:                     3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (raw, json)
Hash identifier:          8MSaZGp/oQ19MDpNrNYIwOMH8Rvub228ncf8cGi5UrA=
Subject key identifier:   BF:B5:A2:4E:0B:BD:18:AE:78:C2:B3:19:34:3F:07:62:1C:2F:9E:B4
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       2FF4DD183F72671FA1245D96CF06F979ABD0DB4A
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     263492
IP address blocks:        191.243.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f4:dd:18:3f:72:67:1f:a1:24:5d:96:cf:06:f9:79:ab:d0:db:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=BFB5A24E0BBD18AE78C2B319343F07621C2F9EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:08:35:e3:dc:fb:64:cf:03:e1:7f:b6:5f:
                    f6:01:26:92:e5:44:65:6b:99:cd:2e:2e:06:0e:8e:
                    fa:b1:01:bd:a6:f7:ba:17:f7:5b:8c:a9:0a:73:9e:
                    c0:f4:9b:1c:78:75:b9:22:f8:21:fe:90:95:4d:ee:
                    ef:6e:4b:36:59:0f:9f:dc:9c:ad:e1:5d:b7:ff:7d:
                    70:5e:01:df:73:57:2c:47:b4:ff:31:a8:f0:a1:f6:
                    74:bc:ab:2a:ac:ff:d3:a4:ab:68:90:72:79:cd:ee:
                    d9:0f:7d:d6:e6:a1:e9:4d:e5:87:70:d7:6e:88:5e:
                    70:d5:68:0d:42:b1:30:07:c1:23:b5:70:c0:96:e4:
                    89:57:e1:f9:c8:8a:44:e8:89:97:e0:b3:a9:ca:40:
                    d2:2f:00:05:1e:4f:fa:06:16:e6:ce:5c:85:7d:b9:
                    ab:90:cd:51:90:18:f3:95:1b:ca:2e:e8:8c:07:9b:
                    86:27:6d:14:5b:78:4d:01:9b:e8:1c:50:ec:fd:34:
                    4a:9f:97:bc:d6:e3:d1:de:ac:ae:79:c6:cb:93:8e:
                    1f:92:47:5e:a5:e8:d7:d2:82:53:d3:0a:d7:ea:3d:
                    f1:df:57:aa:45:95:45:bd:05:8d:a9:3d:2c:89:41:
                    51:68:84:81:6a:c5:59:16:50:71:1f:f2:99:53:ff:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B5:A2:4E:0B:BD:18:AE:78:C2:B3:19:34:3F:07:62:1C:2F:9E:B4
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a3:1e:f6:98:ea:bc:af:2f:07:6f:46:39:e2:d4:7c:62:9e:
         9d:1f:10:fa:62:8b:6c:c4:a3:95:cf:a3:97:f4:26:4a:51:63:
         a2:2a:f5:f6:60:bd:96:74:fa:01:ff:5b:a0:0d:02:7f:d3:56:
         f5:4e:37:e3:86:a6:19:b2:55:c8:40:94:82:88:7e:f0:a0:04:
         10:b6:e0:0e:45:1a:1e:76:ad:e2:07:43:a9:ed:e3:fd:0b:ae:
         87:12:7c:07:58:4b:f2:a7:dc:0a:a7:12:e7:f7:75:b4:d5:93:
         7c:cd:a0:34:e3:bd:5e:9d:77:9a:a8:55:f4:71:00:44:be:99:
         f9:a9:38:59:34:49:4e:cb:7d:6a:f7:12:6d:9c:6b:a6:c7:c1:
         ec:f8:e4:7e:5e:82:2f:61:7d:0d:a6:8e:b0:ae:3b:9a:bf:ce:
         5d:3f:20:25:d0:02:00:28:0f:20:0e:af:d3:f4:30:88:51:94:
         23:16:bd:0f:87:46:eb:d8:49:ac:03:8e:ab:da:5d:30:83:94:
         bc:67:3e:80:aa:2c:c4:8e:90:18:26:1d:5b:40:f2:05:53:3b:
         6e:72:ae:22:c8:e4:51:3d:f4:16:34:87:04:f9:bc:56:34:23:
         5e:c1:f4:a1:82:d4:ad:2f:d2:fb:2a:d6:b8:7b:34:46:5d:bd:
         d4:37:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:17:31 2025 by rpki-client