Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          498S3U3C2/cQsV1JBKOdA/O4nf/JhIueA/XJTJAK5no=
Subject key identifier:   A6:72:0D:F9:64:87:4E:DC:DC:A2:A6:A4:DF:4E:AE:D3:E2:17:3C:8A
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       507A3E45C598690F249863061F6B4E04B404C3FB
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:04 +0000
ROA not before:           Thu 29 May 2025 14:24:04 +0000
ROA not after:            Thu 28 May 2026 14:29:04 +0000
asID:                     263518
IP address blocks:        191.243.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7a:3e:45:c5:98:69:0f:24:98:63:06:1f:6b:4e:04:b4:04:c3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:04 2025 GMT
            Not After : May 28 14:29:04 2026 GMT
        Subject: CN=A6720DF964874EDCDCA2A6A4DF4EAED3E2173C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:60:ab:24:f5:e7:9c:da:46:32:93:4f:70:
                    d4:ed:53:3d:fb:f4:a6:13:c0:5f:7f:b6:ae:cd:12:
                    38:7b:b6:fd:0c:fa:23:5e:86:9d:be:04:b1:bd:6d:
                    c4:52:35:cf:e1:c9:cd:cd:b0:42:9c:0b:64:a7:d7:
                    9c:71:eb:18:86:c3:cb:3c:4d:29:77:08:9c:4a:5d:
                    60:a7:bd:34:23:f1:2b:06:ac:11:e9:61:4f:8d:6f:
                    78:fb:c8:0e:33:67:0d:54:d4:3d:11:c8:df:01:dd:
                    6b:c4:7f:de:c8:84:11:06:6b:91:04:07:3f:94:5f:
                    73:04:52:51:54:8e:95:37:dc:36:e1:84:06:b9:d7:
                    4c:7c:de:1c:af:9e:ba:f5:33:53:02:35:66:7d:06:
                    5c:8e:b3:a8:f4:ef:1d:76:92:85:ea:17:50:ec:c2:
                    72:e1:b7:d3:ac:49:1e:3d:71:51:59:f4:9f:93:b0:
                    f3:26:39:6e:a3:e7:91:a3:ce:80:6d:c4:78:bb:2c:
                    9c:a0:7c:81:fc:c7:63:83:ea:3e:3a:af:1b:82:df:
                    57:c7:ad:59:93:16:d3:ea:69:95:e7:06:f2:e0:dd:
                    84:51:84:6b:63:cc:19:18:c3:6f:31:7e:b2:a9:5f:
                    0a:6a:9d:7d:6d:e4:fb:06:b8:86:0f:96:5d:68:38:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:72:0D:F9:64:87:4E:DC:DC:A2:A6:A4:DF:4E:AE:D3:E2:17:3C:8A
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:fe:1c:97:53:d3:de:25:db:3d:ea:76:ed:86:92:db:28:
         5d:9a:e2:a7:3a:52:f6:7a:ae:d9:51:50:f1:b4:fa:15:f3:eb:
         7b:3d:0f:60:a5:a3:ee:14:8f:d6:cb:05:41:97:39:2c:5d:7e:
         9d:fb:c0:4d:18:e0:73:c2:46:a4:24:18:9a:ad:07:d4:d5:7e:
         bb:46:77:5f:0a:70:d5:62:7b:5c:1e:d9:fd:1b:29:a2:59:66:
         09:fe:87:61:1a:9a:44:e6:31:a8:9b:cc:2e:35:07:56:46:55:
         c7:6f:83:f8:1d:52:c7:1f:6a:72:7f:ca:01:4b:f9:72:df:22:
         cd:e2:56:3f:4d:66:5d:64:72:f4:22:63:d1:d5:65:aa:72:ff:
         62:e7:9a:3a:34:fa:05:5a:46:da:46:07:ea:6f:eb:5f:15:aa:
         8e:43:65:cc:d2:f0:51:7e:75:50:de:c8:79:6d:df:f4:c7:79:
         1b:de:e9:73:14:b7:a5:ac:24:57:00:b2:a4:44:df:0f:de:6d:
         23:c3:bd:e2:36:62:3a:b6:34:61:23:88:a1:74:c0:44:e8:3d:
         5d:5b:f9:ab:71:b2:9c:c2:18:a7:f7:8b:0e:1a:84:96:37:35:
         50:a0:58:c7:4f:99:5b:fa:25:e4:03:6b:fd:3c:20:f2:17:72:
         f8:a3:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:42:33 2025 by rpki-client