Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3232203d3e20323633343833.roa
File:                     3139312e3234322e3232342e302f32322d3232203d3e20323633343833.roa (raw, json)
Hash identifier:          ZbLk1JMeTOXhGbsNtd9Jn+fyltIDVVTM51d5qDPbGNg=
Subject key identifier:   2C:E6:7B:F1:56:20:9B:BA:7F:AF:AD:19:45:2A:46:63:B1:29:DA:72
Certificate issuer:       /CN=4DD41C755595E90FA7710BB5773D9E9130E7279B
Certificate serial:       62D1A41FAB65995C8335A39E8956C95ACF0E2142
Authority key identifier: 4D:D4:1C:75:55:95:E9:0F:A7:71:0B:B5:77:3D:9E:91:30:E7:27:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD41C755595E90FA7710BB5773D9E9130E7279B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3232203d3e20323633343833.roa
Signing time:             Mon 05 May 2025 18:45:22 +0000
ROA not before:           Mon 05 May 2025 18:40:22 +0000
ROA not after:            Mon 04 May 2026 18:45:22 +0000
asID:                     263483
IP address blocks:        191.242.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/4DD41C755595E90FA7710BB5773D9E9130E7279B.crl
                          rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/4DD41C755595E90FA7710BB5773D9E9130E7279B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD41C755595E90FA7710BB5773D9E9130E7279B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 16:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d1:a4:1f:ab:65:99:5c:83:35:a3:9e:89:56:c9:5a:cf:0e:21:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD41C755595E90FA7710BB5773D9E9130E7279B
        Validity
            Not Before: May  5 18:40:22 2025 GMT
            Not After : May  4 18:45:22 2026 GMT
        Subject: CN=2CE67BF156209BBA7FAFAD19452A4663B129DA72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:c2:37:7b:a5:92:be:30:d1:e2:37:8d:af:
                    45:8d:26:42:30:da:03:fa:7d:c6:97:74:07:cc:22:
                    bf:14:c0:04:d2:f4:f4:07:94:23:aa:ee:7b:3e:47:
                    8f:d7:09:6a:03:e9:fb:89:73:b0:95:a2:95:76:98:
                    bd:69:74:23:99:b1:f2:1f:bd:be:d6:68:86:94:e6:
                    82:f1:41:b9:10:85:ab:09:6b:4f:68:8d:94:a9:01:
                    fe:72:8c:b3:ef:df:86:53:d5:b5:c8:d9:30:7b:31:
                    59:12:27:68:70:c3:dd:f8:d4:43:d1:70:af:51:12:
                    1b:01:1e:99:44:47:32:b1:f9:57:74:c3:e1:62:8b:
                    25:5e:45:38:4d:cc:35:27:28:18:bf:85:20:f1:55:
                    0e:9d:2c:0e:3b:d2:af:67:fe:c6:ec:f3:02:66:b1:
                    67:36:9e:c5:d6:88:24:a4:fe:36:3c:4a:8a:bc:a8:
                    18:b3:50:42:f1:ce:a9:0e:5c:cf:63:4a:6c:78:cb:
                    29:27:6c:64:e3:84:fe:fc:5b:4f:85:55:cc:e5:62:
                    53:0f:8c:53:3d:38:20:30:8d:8a:48:b4:4e:39:a6:
                    f0:58:78:4e:38:39:f5:2b:60:11:44:7b:5d:ce:d3:
                    d4:e0:9a:b2:c6:98:dc:66:b2:22:90:f1:68:9e:36:
                    37:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E6:7B:F1:56:20:9B:BA:7F:AF:AD:19:45:2A:46:63:B1:29:DA:72
            X509v3 Authority Key Identifier:
                keyid:4D:D4:1C:75:55:95:E9:0F:A7:71:0B:B5:77:3D:9E:91:30:E7:27:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/4DD41C755595E90FA7710BB5773D9E9130E7279B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD41C755595E90FA7710BB5773D9E9130E7279B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3232203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:81:30:20:8e:00:14:dc:5b:2c:67:4c:c5:2b:4d:c3:a7:
         5c:b0:e3:39:f1:05:3d:81:19:81:b1:1a:94:56:04:39:70:96:
         35:2f:87:32:e5:2b:58:20:1a:55:38:cf:ab:dd:ce:fa:da:bf:
         1d:71:e8:10:a2:67:07:c7:f7:a8:04:0f:94:9c:6e:51:d5:0e:
         7f:27:a3:5a:58:6f:7a:db:2a:a7:39:b6:4c:1f:a7:04:61:e9:
         1c:48:bd:3a:05:31:2c:92:d3:59:ac:5d:2a:64:ae:31:23:f5:
         b3:ac:2a:af:f2:ab:bf:23:ac:72:1f:b8:e3:ac:f0:a6:11:6d:
         22:93:ae:a0:52:b9:f2:85:17:db:5a:e4:1e:0c:a1:9f:70:d4:
         51:8f:37:c1:f1:cf:30:6f:2e:58:2b:60:bc:e2:0b:cc:24:61:
         3f:d3:68:7a:f0:7c:41:05:dd:84:a3:06:09:e2:8f:3e:c8:6a:
         85:48:a1:0a:9c:2e:38:a9:2f:20:0e:18:54:5e:5d:c6:fe:1b:
         da:29:c9:37:6e:54:fa:42:01:d6:5a:a4:97:16:e9:0a:b3:07:
         82:00:2d:69:4d:11:14:3f:4f:9c:cb:19:8f:8c:67:b3:76:6d:
         70:ed:86:13:07:67:be:26:3b:65:73:9b:b7:3a:ca:79:a1:ed:
         ec:67:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:04:40 2025 by rpki-client