Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
File:                     3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (raw, json)
Hash identifier:          xYKUjGDvB4ohftGmPkBCTmPGZBuO+nqUhKkaIhxMrJg=
Subject key identifier:   AC:14:BF:75:BE:B8:5F:38:4E:F8:6C:E8:36:13:BE:84:4D:A4:D6:01
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       07BAECEFA567C21C3C2FEE6E9B5F1E205747DAA5
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
Signing time:             Fri 07 Mar 2025 04:11:27 +0000
ROA not before:           Fri 07 Mar 2025 04:06:27 +0000
ROA not after:            Fri 06 Mar 2026 04:11:27 +0000
asID:                     267546
IP address blocks:        191.241.88.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ba:ec:ef:a5:67:c2:1c:3c:2f:ee:6e:9b:5f:1e:20:57:47:da:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Mar  7 04:06:27 2025 GMT
            Not After : Mar  6 04:11:27 2026 GMT
        Subject: CN=AC14BF75BEB85F384EF86CE83613BE844DA4D601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:bb:aa:e0:c2:77:14:cd:66:fb:2f:af:0b:
                    3d:a5:73:cf:ae:e5:f9:0c:2a:34:0e:71:b5:50:6c:
                    54:35:e7:ab:60:ee:9e:eb:24:ed:d5:78:bf:c2:13:
                    8f:94:1e:60:cf:3f:03:05:dc:d1:e5:62:fa:ef:69:
                    d6:bf:1a:db:d3:ce:94:7c:94:0c:46:39:e4:4f:b0:
                    f6:59:cc:8c:48:72:9b:22:71:1a:08:ec:ef:62:90:
                    09:c8:4d:c9:5e:61:8b:5f:a0:52:9d:16:f3:d2:3e:
                    a8:82:d0:ca:4e:78:21:c9:da:42:eb:eb:e6:3f:81:
                    a8:b0:1c:f6:25:53:bc:71:24:6b:f9:d7:f0:0b:b7:
                    ad:5c:20:e1:a9:80:69:f2:56:20:33:12:27:01:e2:
                    6e:25:7c:22:dc:b9:6f:8e:1c:85:28:ca:99:ec:46:
                    a7:c3:1a:5a:d4:76:4d:88:b7:12:e0:89:72:8f:73:
                    b1:f0:6f:a2:4a:da:cf:ab:87:bf:0f:b5:f4:b0:ec:
                    c0:85:56:5e:40:a8:4f:5f:6a:d2:90:df:f4:a5:c7:
                    d3:80:11:51:cd:8d:60:a8:44:90:66:d8:a3:b7:4a:
                    4c:2c:b2:9d:f4:ea:9b:dc:77:7d:fd:60:8c:88:08:
                    08:5b:ac:16:1b:0e:84:b5:53:62:0c:a3:77:12:d5:
                    68:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:14:BF:75:BE:B8:5F:38:4E:F8:6C:E8:36:13:BE:84:4D:A4:D6:01
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:23:01:43:cd:95:3c:ad:bb:88:c2:e4:1f:2a:85:84:39:9c:
         b9:fb:3a:a5:b3:c5:ef:6a:10:d9:a9:95:7e:23:c2:65:16:df:
         bb:4b:30:29:e6:2c:21:47:48:75:52:ce:02:a1:bd:7d:10:d8:
         8e:75:e8:4c:28:91:c6:6e:9a:9a:be:2b:5d:9a:94:de:58:43:
         9b:f1:c3:cd:87:83:ee:a7:57:2b:e1:30:0c:74:99:ba:22:11:
         05:42:d2:0e:c2:c0:9e:dd:f0:bc:95:b3:4e:4c:f6:84:f9:28:
         be:d3:40:40:94:55:ef:65:71:97:13:b4:01:ef:6a:57:29:20:
         59:6c:96:ff:1c:a7:bf:e1:67:0a:86:29:13:25:b1:ae:a9:66:
         37:03:a1:12:99:5c:25:90:19:33:08:e6:2a:68:75:73:73:91:
         10:09:b5:65:8f:f0:f5:a3:24:38:1a:a9:e8:84:c9:98:81:8a:
         93:bc:0e:a3:99:9e:68:19:de:48:24:ec:9f:57:1b:86:0e:bf:
         ba:b6:ea:5b:94:93:5f:f4:26:b7:55:c3:3a:56:1a:ad:a7:5b:
         8a:59:18:c1:d4:ea:21:ba:50:d9:01:a8:46:e3:87:a8:9a:6e:
         84:b9:08:7b:9b:0c:a6:b3:9a:00:26:fa:2b:8e:7a:ba:6c:69:
         39:4a:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:54:00 2025 by rpki-client