Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa
File:                     3139302e38392e31322e302f32322d3235203d3e20323730333437.roa (raw, json)
Hash identifier:          S2sCvjEu7mysFPo/AxOSDj/0O95xaO4fPKjUgfNMu38=
Subject key identifier:   19:AE:5B:D7:E9:82:AC:1F:13:11:89:4F:B0:73:9D:8F:7C:AA:65:94
Certificate issuer:       /CN=59176FF2F9921A875762F2166723B5CD48599A49
Certificate serial:       5DEBE02A9C5CD00FA5C77F2A278AEEA91E572FDC
Authority key identifier: 59:17:6F:F2:F9:92:1A:87:57:62:F2:16:67:23:B5:CD:48:59:9A:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa
Signing time:             Thu 06 Mar 2025 23:46:08 +0000
ROA not before:           Thu 06 Mar 2025 23:41:08 +0000
ROA not after:            Thu 05 Mar 2026 23:46:08 +0000
asID:                     270347
IP address blocks:        190.89.12.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.crl
                          rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:eb:e0:2a:9c:5c:d0:0f:a5:c7:7f:2a:27:8a:ee:a9:1e:57:2f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59176FF2F9921A875762F2166723B5CD48599A49
        Validity
            Not Before: Mar  6 23:41:08 2025 GMT
            Not After : Mar  5 23:46:08 2026 GMT
        Subject: CN=19AE5BD7E982AC1F1311894FB0739D8F7CAA6594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:6e:28:e4:58:cf:44:7e:5f:9e:c3:ae:0d:
                    d8:58:ce:9b:d1:1b:eb:a3:a5:d4:a6:4d:66:56:1c:
                    39:48:7b:0a:69:28:11:c0:ba:45:c2:a2:7b:e4:7f:
                    3e:d0:7e:9d:fb:53:33:84:7a:36:ae:e7:8c:99:ea:
                    d8:46:0c:07:dc:d4:a8:1c:0f:13:db:2d:bc:29:54:
                    a5:ab:19:1d:ef:a4:7d:ba:ef:04:26:8f:b3:3a:22:
                    86:44:18:d8:44:21:ec:b9:85:53:21:03:7e:30:ea:
                    ed:5c:10:bf:7b:40:16:4c:9b:b5:aa:bb:ae:06:41:
                    55:2c:44:6d:22:57:99:1d:a5:30:1c:9a:11:64:25:
                    ab:01:d1:5b:b4:4b:37:42:db:24:c7:55:74:55:d5:
                    cb:f8:d1:9c:d4:f1:da:c5:b2:97:73:44:f2:0a:f8:
                    a6:1c:ca:d4:2b:40:6b:3c:94:9c:a6:7f:65:78:54:
                    bc:2b:3e:9b:1a:62:6c:8a:80:ed:31:c2:8e:b7:4b:
                    8e:fc:4c:34:50:1e:bf:fa:7e:b3:2a:65:e6:f2:bc:
                    74:04:bb:4b:ec:2d:52:0e:1c:13:5a:ee:f0:66:ea:
                    fb:47:45:51:ce:1a:9a:cf:23:66:59:2a:65:ef:42:
                    16:4f:45:a6:fa:a9:d7:cc:fe:2b:55:a4:c0:73:1f:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AE:5B:D7:E9:82:AC:1F:13:11:89:4F:B0:73:9D:8F:7C:AA:65:94
            X509v3 Authority Key Identifier:
                keyid:59:17:6F:F2:F9:92:1A:87:57:62:F2:16:67:23:B5:CD:48:59:9A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:b9:9a:50:d8:66:0a:ef:19:d9:7c:6e:91:d2:1b:6c:3d:
         f2:40:a8:80:e3:01:bd:2a:91:2b:66:c6:ac:06:f0:55:69:b8:
         cf:e8:0f:cf:d4:75:93:6b:fc:1e:6f:6e:ee:0f:c8:a6:ac:de:
         b5:ce:65:0e:2e:0c:95:0d:c3:3c:5d:4d:26:88:60:84:f3:6b:
         36:31:09:89:8b:f4:34:49:12:81:66:4f:7d:ce:84:26:9f:e4:
         85:1c:3d:f6:49:b7:de:00:a6:d7:39:e0:c5:08:84:a9:8f:1c:
         bd:84:3a:46:41:b3:e2:f4:27:aa:5a:8f:14:2f:2b:22:9a:ef:
         db:02:43:2e:ef:07:fc:49:5e:a7:7f:9d:71:75:12:51:f8:2b:
         cf:8c:2b:f9:05:de:94:30:a3:f8:58:ab:df:38:80:9f:54:b7:
         bf:03:81:f0:a0:90:f4:3f:73:3e:19:a6:c0:43:32:af:7c:9d:
         fe:a2:65:58:bd:72:46:31:65:e7:dd:38:da:d3:9a:12:8e:55:
         9b:3c:1e:82:12:33:ea:fa:a8:11:4a:11:9e:68:b2:41:23:92:
         f5:ae:82:8a:e5:63:c5:5e:ed:30:95:a6:1b:f0:18:fc:b2:60:
         76:0b:15:30:54:c4:f2:4d:c1:21:cc:34:b4:74:e3:d6:17:89:
         5a:bd:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:49:20 2025 by rpki-client