Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          mfdaYJWyK8QKbHs4u1TlLiSM5ui7jpoJBjjlccAVG3o=
Subject key identifier:   49:F8:11:A0:C5:75:7E:C6:67:D5:BC:36:59:F6:F4:C5:E7:A8:64:EB
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       2C834282231ADA3ABD5B64C32A132A8BA3D7CB06
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 23 Jan 2025 20:46:13 +0000
ROA not before:           Thu 23 Jan 2025 20:41:13 +0000
ROA not after:            Thu 22 Jan 2026 20:46:13 +0000
asID:                     263518
IP address blocks:        191.243.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 22:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:42:82:23:1a:da:3a:bd:5b:64:c3:2a:13:2a:8b:a3:d7:cb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Jan 23 20:41:13 2025 GMT
            Not After : Jan 22 20:46:13 2026 GMT
        Subject: CN=49F811A0C5757EC667D5BC3659F6F4C5E7A864EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:f8:b4:80:5d:92:fa:35:6b:39:4b:fe:07:
                    ba:81:6a:44:e4:b8:45:04:61:b1:17:f9:f8:16:15:
                    a7:13:59:67:69:47:eb:2c:dd:37:31:cd:7c:1b:ba:
                    c8:9b:e1:60:50:6c:cb:ae:f3:a5:85:ec:19:d0:6c:
                    94:a6:94:08:ea:cd:1f:f4:23:b7:e8:76:e8:8d:51:
                    2f:78:c6:c7:ac:95:0c:4b:65:9b:60:b2:67:e9:6b:
                    44:ef:b0:d8:84:35:4f:98:0e:89:31:04:03:42:13:
                    04:53:0a:1c:56:96:e8:f3:e5:9d:56:26:4b:c8:b6:
                    f5:9d:5d:7c:d1:8f:59:8d:3e:19:35:15:fc:cd:53:
                    f8:f0:a6:84:3e:49:6f:71:03:b2:85:c8:5e:bc:d1:
                    ab:04:b3:9c:e6:f1:98:2d:c2:60:70:13:72:80:d9:
                    ff:33:db:cb:63:20:a8:1e:e6:3e:92:07:7d:05:83:
                    98:e5:39:84:34:a0:6b:dd:1e:57:a5:16:c6:95:3a:
                    70:ca:5d:bf:f8:ba:a6:87:dd:4d:dd:29:44:fb:20:
                    92:18:c3:24:bf:0a:f2:12:8a:b2:97:f2:c5:c9:2c:
                    9f:3b:e1:5e:16:15:22:31:10:36:26:2c:99:74:71:
                    ec:54:72:9c:56:72:bc:a4:0b:f0:18:9c:6a:8e:53:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:11:A0:C5:75:7E:C6:67:D5:BC:36:59:F6:F4:C5:E7:A8:64:EB
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:09:c4:d1:cb:88:70:a7:32:5b:43:17:b1:30:2b:32:e5:73:
         f7:45:a8:ab:ae:15:2d:e7:11:dd:4c:d0:6c:a5:e5:67:c1:b1:
         bd:4b:5c:a4:6e:6f:ea:38:be:68:5d:1f:66:91:3d:06:58:a4:
         6e:8b:49:2c:1e:b5:0e:8c:77:9f:a3:55:46:57:16:d7:02:c4:
         b4:02:23:f2:7a:4c:34:e6:ad:3e:96:7f:cd:19:36:d3:b5:af:
         7b:1e:c6:d7:21:b4:0e:1b:34:2d:e0:ca:de:49:f2:95:a8:38:
         6b:3f:1e:d9:88:66:68:f6:5e:f1:73:4b:f1:b4:90:b1:d8:07:
         14:18:76:fa:ba:df:32:70:35:ae:35:2f:a0:f2:4a:72:c8:45:
         0e:c4:f3:81:3c:c5:7d:dd:0d:e0:e0:cf:6f:d3:44:c7:d6:60:
         f6:aa:7e:2d:66:80:2d:ad:08:64:58:73:b8:58:29:51:8a:70:
         40:ca:e0:24:2d:2f:6a:02:c7:a7:0a:71:64:7f:44:1d:2c:75:
         e1:b4:80:9f:55:53:42:5f:b0:41:b2:9c:9e:0d:a7:b9:ab:98:
         eb:cf:4f:68:a6:be:3e:49:00:d7:f4:27:91:26:03:42:ee:4d:
         65:57:5e:7e:f2:d6:2b:9c:df:9f:4d:e1:b9:57:46:d6:7a:be:
         e6:85:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:05 2025 by rpki-client