Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa
File:                     3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (raw, json)
Hash identifier:          h1+BPE8QKGkGQjlwrOwfbil3+GmL9t/TZ5FhPjfP0Ys=
Subject key identifier:   A2:9A:A2:1F:4E:65:0F:02:50:9C:98:C1:21:8D:D4:73:94:68:F9:21
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       140EB49CFB6F1D1D78B69D3329AED5D5C6525EFF
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     263492
IP address blocks:        191.243.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0e:b4:9c:fb:6f:1d:1d:78:b6:9d:33:29:ae:d5:d5:c6:52:5e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=A29AA21F4E650F02509C98C1218DD4739468F921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:2a:d7:f3:91:9e:49:f8:ed:79:3f:6b:47:
                    e5:43:8c:e1:0c:5e:43:5e:61:96:32:c8:23:23:8e:
                    34:ad:2f:c5:71:6d:c9:cd:fa:79:89:c8:ee:08:60:
                    d9:5b:0e:8f:ac:a5:7d:13:ac:2e:23:2d:88:bf:45:
                    21:98:b4:f9:ab:d5:d0:3e:f6:72:53:48:49:6e:51:
                    54:49:99:5a:0a:48:68:f8:30:18:06:0f:7b:e6:80:
                    1a:84:55:a8:1e:9d:2c:c4:ca:0c:6d:b9:28:70:f1:
                    35:a9:bf:8a:45:b2:36:5e:8a:12:0b:9e:86:90:80:
                    05:1e:95:90:c6:95:5a:9f:29:a1:2e:e5:d9:96:e2:
                    1a:2c:56:f2:68:07:32:84:d2:32:3c:e5:bc:9b:19:
                    42:d0:f1:5c:f1:67:a7:33:45:93:09:e7:23:ce:4f:
                    a7:d6:4d:d8:b4:6f:2c:d9:3b:15:95:22:e7:3c:3f:
                    43:af:31:6a:0b:4c:0e:5c:db:ca:65:db:f4:a8:23:
                    dd:6c:33:62:3e:53:5a:e1:ee:ff:bd:45:ac:95:0b:
                    ae:56:c6:5a:ef:c6:1b:1e:63:05:5e:8b:5b:0a:a2:
                    34:7a:17:21:ca:57:ef:5c:f0:19:c1:50:94:4d:14:
                    98:fc:ad:3e:1e:03:23:02:b1:26:49:1e:d9:48:12:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9A:A2:1F:4E:65:0F:02:50:9C:98:C1:21:8D:D4:73:94:68:F9:21
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f0:b4:17:68:6f:fa:71:dd:d9:7b:67:1a:85:e8:82:f4:9d:
         8e:9f:8d:0d:07:d2:4a:42:72:a1:21:49:fd:4e:ec:06:33:77:
         9f:42:45:e2:05:6b:c6:fa:a2:ae:96:d4:17:4d:9c:a5:98:4d:
         c8:0a:91:32:d3:05:e9:9b:dd:7f:d6:dd:42:7f:dc:3e:67:65:
         76:c0:4f:4f:cb:ef:61:f2:93:b6:40:1a:96:95:a9:df:f9:5a:
         77:91:9b:09:e8:f3:d0:90:dc:42:65:bb:89:58:a5:76:d4:11:
         d0:c0:51:b6:ee:c4:1b:41:75:80:8f:30:b6:3e:b3:73:ca:3e:
         b3:19:17:ee:f4:89:c9:63:38:d6:de:10:c5:f7:9b:27:23:39:
         90:a1:8f:14:3f:8a:ff:74:56:9e:c0:9d:65:44:b9:29:cb:d5:
         56:b9:b2:27:82:37:67:f9:e5:a1:b1:08:7f:06:06:84:82:ae:
         05:ac:aa:e4:74:c5:05:5a:55:fb:e7:ec:9a:08:bd:0b:53:da:
         56:c2:af:5a:7d:3e:a2:56:33:4a:7e:77:33:78:65:fd:99:1f:
         45:00:c8:83:c3:eb:d7:bf:db:70:53:ae:56:9e:14:a9:74:d7:
         fd:c2:2d:e9:47:bc:48:4f:2a:6d:d1:ce:04:ad:b5:97:e8:b1:
         88:89:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:17:30 2025 by rpki-client