Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa
File:                     3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa (raw, json)
Hash identifier:          UMqTK9reUzNNnwRwMXBy/vvN20ODpBYMLm+4Fschui4=
Subject key identifier:   EC:5D:06:56:FF:D7:18:FC:5A:12:FA:36:59:D4:E5:BE:1F:0A:31:C9
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       6A0E0D25176901DDF760D82BA71927FFB183DB6F
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa
Signing time:             Thu 06 Mar 2025 04:00:14 +0000
ROA not before:           Thu 06 Mar 2025 03:55:14 +0000
ROA not after:            Thu 05 Mar 2026 04:00:14 +0000
asID:                     270899
IP address blocks:        177.91.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0e:0d:25:17:69:01:dd:f7:60:d8:2b:a7:19:27:ff:b1:83:db:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Mar  6 03:55:14 2025 GMT
            Not After : Mar  5 04:00:14 2026 GMT
        Subject: CN=EC5D0656FFD718FC5A12FA3659D4E5BE1F0A31C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:b9:b9:14:9d:29:1d:38:da:26:5c:67:6b:
                    27:9e:f5:1a:99:8b:af:91:95:2c:15:50:c3:e9:f5:
                    8e:d1:3e:7d:9e:1b:10:2a:aa:0a:45:42:39:8e:01:
                    5b:64:d3:10:7f:a7:08:89:6d:e1:db:6c:15:17:24:
                    c6:cb:25:8c:34:bb:e4:6c:d4:ef:e8:6b:44:96:fa:
                    42:89:6e:15:28:19:18:77:05:2c:2b:20:2f:49:76:
                    31:c3:7f:96:eb:17:d4:09:e9:4e:c2:94:a8:cc:eb:
                    d3:8b:73:a0:82:4a:c6:d5:e5:26:c0:b5:62:b2:23:
                    7e:3d:93:b1:7d:b2:7b:87:d7:25:95:48:51:8f:ce:
                    8a:8c:c3:a9:a3:81:78:ab:3a:dc:0c:59:b3:ea:c6:
                    35:6d:48:0b:00:f5:03:2d:6a:e1:96:e6:ea:a0:02:
                    e5:3f:53:a4:b5:d4:1d:68:43:1a:0f:97:22:ca:71:
                    ce:fc:fc:f2:c2:60:94:69:e3:0c:d4:5e:9b:d5:c4:
                    93:22:cb:fc:b0:c7:a0:67:55:ca:be:13:ac:99:da:
                    b4:28:c3:40:5d:ce:0b:2c:d8:67:fb:99:a2:da:97:
                    ca:d8:b9:3b:86:d9:66:d0:70:ef:67:64:6e:a3:fb:
                    f7:4a:9e:a2:6e:0a:e7:74:a8:3a:7f:40:64:13:59:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5D:06:56:FF:D7:18:FC:5A:12:FA:36:59:D4:E5:BE:1F:0A:31:C9
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:2c:5b:53:9a:14:ce:7f:1f:f8:96:75:1e:e6:c9:3c:0e:6c:
         3f:af:88:4b:62:9d:58:f5:3f:14:96:91:c8:03:6c:8e:24:1e:
         25:8e:74:e8:c2:6d:22:7e:cf:46:ff:37:b3:5a:27:68:c2:92:
         5a:77:d9:16:3d:1e:da:49:f8:bf:38:b0:58:19:66:70:09:05:
         3d:56:51:55:5e:57:ae:7a:e1:f4:48:01:02:b5:0d:05:98:65:
         12:90:02:d5:a4:5b:13:a9:7f:38:bb:8d:92:33:c4:ed:ac:5e:
         53:38:f7:93:4a:dd:78:af:95:d2:d4:10:75:f9:2b:c0:1c:76:
         e5:05:05:70:c0:61:d2:c2:e2:8f:c6:63:a0:b0:8d:6e:5c:54:
         fa:01:82:cb:f2:4b:a4:91:29:58:de:d0:5b:e7:19:02:89:f7:
         b7:08:b1:e4:b2:cb:ed:90:f5:a5:df:a6:17:33:48:ee:9b:4d:
         15:04:7e:a6:02:60:94:f2:b9:c0:e8:e5:f9:35:49:7b:a9:88:
         ad:9e:c4:be:4d:94:92:15:47:cc:e2:cf:4c:5f:d4:68:bc:e5:
         e7:48:a4:85:4b:9c:80:b7:fb:86:09:e2:d4:5b:7c:00:a9:43:
         da:2c:40:0f:64:9a:57:bc:ff:a8:11:87:5c:e6:8f:6e:0d:e3:
         26:70:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:38 2025 by rpki-client