Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          YsbVucD86DDUMgf/oNq1NqGOQWG8QVY869axUDqL2lU=
Subject key identifier:   12:4D:D6:FF:35:83:A9:D6:A4:DF:59:49:A9:6D:FD:F2:EF:99:23:96
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       787F57E2F20EB833DEA15694DADAF462DCE85389
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 27 Mar 2025 17:28:51 +0000
ROA not before:           Thu 27 Mar 2025 17:23:51 +0000
ROA not after:            Thu 26 Mar 2026 17:28:51 +0000
asID:                     263518
IP address blocks:        191.243.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 23:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7f:57:e2:f2:0e:b8:33:de:a1:56:94:da:da:f4:62:dc:e8:53:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Mar 27 17:23:51 2025 GMT
            Not After : Mar 26 17:28:51 2026 GMT
        Subject: CN=124DD6FF3583A9D6A4DF5949A96DFDF2EF992396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:bd:e4:8d:2a:29:10:8b:fc:c1:50:ec:6b:
                    5e:94:8c:98:1b:7f:27:f2:50:cd:d7:51:b1:f3:4a:
                    4a:34:90:12:73:9e:c1:56:2e:88:7b:47:c1:ec:8d:
                    59:5d:8e:2c:d4:58:e1:53:08:de:cc:50:ad:96:1d:
                    e1:39:a2:db:e1:88:fc:c4:ad:ff:22:de:0c:2c:eb:
                    0a:13:ac:db:e3:0d:41:42:57:bb:a0:2a:a5:2a:3f:
                    30:b1:72:ff:5c:96:b2:e6:6a:a1:36:cd:3d:e6:26:
                    dc:37:5c:0f:99:ac:30:c5:c4:a8:e3:ec:6c:80:18:
                    9d:a0:e3:4a:74:80:50:95:d8:aa:dc:13:aa:dc:a7:
                    90:9c:9e:10:12:6f:6a:bb:74:1b:c8:53:81:d2:09:
                    e8:88:02:04:c4:8f:8b:7a:31:2b:1c:c0:1d:be:ed:
                    65:32:31:04:a0:18:c8:f7:f3:b2:1c:42:df:a5:70:
                    89:2c:de:6f:12:03:10:53:b3:80:15:e5:20:4f:2c:
                    b3:8e:04:04:be:70:30:14:2e:cc:30:51:85:53:8a:
                    0d:99:51:74:3d:5f:c8:1a:8d:53:db:5c:15:a0:06:
                    af:a7:8d:b2:98:23:be:32:20:81:2f:ef:e3:8f:60:
                    b2:44:4e:28:9c:fa:09:3e:04:0c:0f:2b:62:b6:43:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:D6:FF:35:83:A9:D6:A4:DF:59:49:A9:6D:FD:F2:EF:99:23:96
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:63:e7:00:49:1f:e6:5d:4f:15:53:b7:f5:d6:a1:fa:9d:50:
         fd:4b:ef:f8:21:03:c8:86:0a:b5:22:47:3a:cb:dc:02:d5:1c:
         b8:eb:c7:df:4f:c9:2d:ca:38:f8:0a:15:85:fa:80:a9:38:04:
         39:fb:ba:18:2d:71:d8:0f:bd:16:5c:99:48:73:1a:c6:47:a6:
         ba:57:75:f5:b7:7f:cb:7c:52:1f:62:6c:17:2e:67:80:b8:08:
         36:6e:41:f6:50:02:7b:43:8a:38:b2:60:67:4c:73:21:8f:5d:
         af:f1:53:41:bb:15:d2:0c:2b:cb:8c:0e:af:94:85:06:b8:6a:
         61:2c:ba:3e:38:ea:44:4a:0a:b2:3d:c6:a2:23:2d:c4:82:06:
         a1:28:79:04:8b:40:d7:34:6c:50:66:ba:dc:f5:5d:79:03:ec:
         a1:bf:ab:12:db:ec:03:d4:b8:77:62:ad:1d:7a:54:69:79:85:
         ff:3d:3f:d1:49:3b:5b:ff:eb:b2:59:de:4c:2c:e4:d2:10:3c:
         b6:84:6a:6c:1d:4f:32:56:24:a6:ff:1f:db:37:3a:14:46:f0:
         a1:8d:1e:d7:ec:21:8e:b5:fd:ec:1b:0d:a2:c8:f1:4c:39:45:
         fb:38:9f:65:74:36:65:be:7a:ea:e4:a9:57:0b:07:5b:d8:e5:
         1d:0b:53:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:44:00 2025 by rpki-client