Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa
File:                     3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (raw, json)
Hash identifier:          1QaaHGZII86d9mGbjqzaZ+SrF2kGCAd2kLcMFDLAtT0=
Subject key identifier:   BA:BA:62:D6:E7:17:DF:E2:2D:C8:19:06:64:FB:24:F5:37:72:7B:3E
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       0B85297B3B3FEB7196A1B7DC4A9C4D8E83EEA831
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     263492
IP address blocks:        191.243.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:85:29:7b:3b:3f:eb:71:96:a1:b7:dc:4a:9c:4d:8e:83:ee:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=BABA62D6E717DFE22DC8190664FB24F537727B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:69:5c:38:c5:b5:29:7e:1b:db:17:73:cc:
                    c7:31:30:e6:8a:36:b6:e4:a3:12:2d:55:f3:60:6c:
                    7c:0e:19:de:90:5e:ee:ac:79:55:1a:42:f3:0e:f8:
                    e2:21:98:22:df:fd:57:4f:9f:bf:3a:6f:b4:fd:ec:
                    dd:4f:d3:0d:15:06:24:30:a7:c0:e2:10:ac:24:a1:
                    23:a5:83:84:3b:fa:d2:aa:e6:a9:7a:ca:f0:76:dd:
                    f4:37:e3:f5:bb:ce:6a:3d:33:86:ed:37:c9:29:a7:
                    ad:81:4d:94:46:fb:34:cf:62:b1:df:d2:fa:5c:27:
                    2e:42:b9:25:09:e2:cc:04:42:3a:8b:a8:ce:51:c3:
                    b7:12:c7:3b:f6:85:32:a9:91:78:17:ef:39:8f:b2:
                    5c:b3:06:f9:00:6f:a6:3e:36:b4:dc:56:02:5b:06:
                    32:16:7a:5b:60:74:f2:9c:35:88:7a:ce:42:8e:75:
                    b8:22:cb:02:62:1d:65:99:4f:50:ae:48:02:d9:c9:
                    65:7b:38:09:9d:2c:fb:ba:8f:38:e4:b2:5f:0d:3a:
                    d0:e0:6c:55:00:36:96:50:60:8b:2f:e3:e4:8e:de:
                    f0:bb:d1:3b:3a:a0:7b:69:84:9d:49:a8:c6:d3:4e:
                    1d:12:2b:b4:e5:eb:e3:31:93:fa:c4:a7:0a:e1:f0:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:62:D6:E7:17:DF:E2:2D:C8:19:06:64:FB:24:F5:37:72:7B:3E
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:bd:d9:76:4b:98:22:a7:3c:b7:01:3c:f0:ec:d9:10:49:4e:
         70:ac:53:d2:30:0f:8c:e0:9c:b4:1f:1c:19:ad:82:c2:bd:10:
         e0:29:7c:71:c4:0b:29:b5:d3:84:9c:29:ac:c7:0d:98:62:45:
         52:47:5b:02:92:95:40:fa:0f:19:11:80:1f:ec:75:1b:88:a7:
         73:5c:7c:35:7a:01:73:81:97:42:4b:20:bb:1a:72:ca:e3:61:
         f1:48:bd:d1:78:40:7c:0f:05:bb:37:e4:cd:0b:b7:79:44:71:
         6d:67:72:d0:af:37:32:f9:e5:3f:57:e9:b6:51:14:41:aa:4e:
         d0:17:33:0f:68:0f:74:3e:b7:47:78:a9:aa:2a:af:11:b1:18:
         f1:47:9c:e2:bf:e4:2b:8f:7e:59:9d:7b:94:a2:6c:e8:19:fe:
         6d:37:cc:db:90:2b:82:7d:b2:ef:4d:b6:fd:a3:c6:9a:9d:0b:
         b4:b2:cd:f4:15:b3:a5:d5:cb:76:86:4e:2a:6c:fa:8e:8f:82:
         71:af:bc:06:a6:d5:8a:09:47:a7:e5:00:04:df:04:48:fe:9c:
         9d:53:92:0e:47:6d:4d:15:b3:ab:0f:6b:c8:ea:ac:3d:09:9c:
         70:ab:f9:5d:9b:9a:da:4d:43:0f:d2:40:52:50:59:35:f6:4c:
         13:bb:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:17:33 2025 by rpki-client