Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa
File:                     3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa (raw, json)
Hash identifier:          GWKkTNtEG1a63Qu8OhR6vF+4t4EKoI1EZSj7BNhuiYw=
Subject key identifier:   F2:1E:B7:55:EE:95:5E:6B:AD:23:D0:A8:30:65:89:9D:E3:19:11:54
Certificate issuer:       /CN=BDE43E626C927270D334976A9B665C443892DF57
Certificate serial:       75ACEE19C7149DAD220A36142CC20B07FC1B3414
Authority key identifier: BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa
Signing time:             Sat 30 Nov 2024 23:40:28 +0000
ROA not before:           Sat 30 Nov 2024 23:35:28 +0000
ROA not after:            Sat 29 Nov 2025 23:40:28 +0000
asID:                     267542
IP address blocks:        192.141.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl
                          rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ac:ee:19:c7:14:9d:ad:22:0a:36:14:2c:c2:0b:07:fc:1b:34:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE43E626C927270D334976A9B665C443892DF57
        Validity
            Not Before: Nov 30 23:35:28 2024 GMT
            Not After : Nov 29 23:40:28 2025 GMT
        Subject: CN=F21EB755EE955E6BAD23D0A83065899DE3191154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:cc:1c:b2:27:d7:cb:b2:8a:25:46:3b:c4:
                    f6:da:8a:e2:9d:0f:c6:f1:07:40:88:04:f5:c8:f0:
                    3e:76:7f:83:d6:c4:11:73:41:33:5f:42:94:2d:53:
                    53:29:86:dd:a8:21:47:0e:75:18:73:af:3e:f4:cb:
                    c3:d0:bd:19:5b:99:45:38:7c:86:60:4d:c4:4e:94:
                    78:2e:56:b3:22:8e:cd:23:05:65:85:d0:a6:5e:f2:
                    a1:48:eb:20:1d:ed:d5:6e:8e:d6:60:a4:a3:1c:ee:
                    b8:38:ea:67:49:38:2f:dd:48:20:bb:e3:55:3c:65:
                    ed:d8:6c:ef:08:b5:80:a6:5f:0b:38:45:0b:dc:61:
                    2b:01:61:24:74:6c:c5:01:75:c7:93:5c:c4:90:12:
                    53:2e:ff:ab:33:98:2e:67:c5:49:a3:bb:1c:e0:cb:
                    05:de:c6:62:63:2b:27:c3:15:f1:a3:e4:71:4c:5e:
                    2d:d1:af:5c:8a:00:3d:0b:24:b5:b0:93:6a:a4:b4:
                    a2:56:07:d5:8d:82:5b:63:be:b2:2f:6d:54:6c:5c:
                    a7:f5:ef:ea:8c:40:1c:b2:00:ec:9b:52:97:f4:7d:
                    57:b1:80:a9:b1:35:c9:2a:e6:ab:cb:4d:93:68:2e:
                    bd:af:10:e8:45:e1:af:53:f4:33:92:c1:07:ec:98:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1E:B7:55:EE:95:5E:6B:AD:23:D0:A8:30:65:89:9D:E3:19:11:54
            X509v3 Authority Key Identifier:
                keyid:BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:30:22:12:97:cc:4c:8e:f9:a2:17:9b:26:cb:a0:e9:85:27:
         d3:85:83:c1:9f:f5:20:47:f7:6e:63:c3:d3:19:b6:60:3b:ae:
         e9:96:32:f1:c9:0c:4b:67:67:7d:a6:3c:65:73:f6:5d:5e:ef:
         ee:d7:d4:d3:aa:5e:2a:2a:f5:8f:af:14:4c:b9:07:c4:31:0b:
         99:78:d1:c2:99:2c:29:f1:d1:41:c1:d7:d3:1e:2c:91:59:99:
         34:44:c4:6f:62:26:e6:70:3c:8d:6c:c5:6f:1d:ab:68:10:97:
         f7:7a:bc:a0:ff:88:f7:7b:ef:7c:43:7e:b0:cc:c2:26:bd:31:
         ec:c3:32:b4:cc:06:eb:67:2f:9f:90:46:7f:e3:1e:76:9b:39:
         83:14:fd:bf:ea:b4:fb:7f:b2:a0:60:ff:c7:22:06:d6:28:fe:
         30:cd:b5:b8:d4:8b:8b:8a:e2:9b:8e:41:03:0c:9b:29:b4:00:
         b2:d1:ee:6e:03:59:36:22:14:6c:7f:29:e7:a5:d4:50:19:29:
         cf:20:5a:08:94:e5:97:09:25:01:d5:e1:5c:2e:ee:c6:91:1f:
         41:33:0a:c6:fe:c9:fe:b1:15:57:fc:23:47:29:c6:c4:41:e3:
         cd:1b:72:f0:00:c0:e5:e9:6b:d3:d2:18:8e:c1:8c:7b:89:5e:
         3c:64:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:25:10 2025 by rpki-client