Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          VaNrDdP/1m7tzyf+QtpnuU09E+iH/bGgCLxsova8LuY=
Subject key identifier:   BC:F9:4C:BC:F2:A6:46:8F:1E:BB:0E:57:A5:CD:14:BE:E1:EC:6E:5A
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       0F4678C5BB6104142214D69FA05DD72B22067ADE
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:04 +0000
ROA not before:           Thu 29 May 2025 14:24:04 +0000
ROA not after:            Thu 28 May 2026 14:29:04 +0000
asID:                     263518
IP address blocks:        191.243.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 18:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:46:78:c5:bb:61:04:14:22:14:d6:9f:a0:5d:d7:2b:22:06:7a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:04 2025 GMT
            Not After : May 28 14:29:04 2026 GMT
        Subject: CN=BCF94CBCF2A6468F1EBB0E57A5CD14BEE1EC6E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:5a:6b:39:b7:3f:03:e8:fa:cc:56:66:80:
                    f5:11:96:10:21:c0:8a:33:60:32:7f:7e:00:15:ec:
                    87:04:98:79:7b:89:17:b5:99:32:eb:c1:cb:d2:70:
                    83:f8:5a:4a:d4:d7:9f:57:a3:c9:59:90:15:b3:c3:
                    6d:28:28:76:e8:a3:57:00:76:8c:84:7b:ad:5e:42:
                    a5:cf:1c:19:97:5c:78:29:11:b6:14:1d:83:df:c1:
                    42:37:aa:61:32:22:69:20:a1:9c:2b:b1:39:09:51:
                    a2:d8:bc:f3:1d:dc:1c:9c:9d:a9:de:48:94:25:2b:
                    50:f1:1e:c7:22:0c:14:df:25:cd:36:7e:78:26:b3:
                    90:df:28:38:d3:e5:5e:52:6d:ab:6a:9e:86:21:e1:
                    10:7e:40:29:72:29:e9:13:eb:07:cc:26:89:fd:ca:
                    c7:b9:d8:e6:a2:28:dd:18:17:20:6e:bf:89:82:85:
                    f5:3f:a6:96:24:f6:f6:9e:86:40:4e:5d:73:34:d3:
                    54:03:2f:cc:8e:8f:cc:1d:06:de:99:44:49:fe:a8:
                    64:cb:9d:c1:4e:a1:72:ef:19:8f:9f:9f:cc:84:46:
                    62:a6:1b:e4:7e:86:7a:7f:c9:33:05:50:fb:a2:9c:
                    88:32:26:5d:5a:e8:9f:ac:62:f3:c2:e6:72:d2:a2:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F9:4C:BC:F2:A6:46:8F:1E:BB:0E:57:A5:CD:14:BE:E1:EC:6E:5A
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:cf:84:3c:35:05:b0:f1:7b:f5:9c:52:be:97:04:0c:b3:63:
         07:32:78:ce:19:18:e4:d9:8e:9c:b5:62:92:28:0a:d5:06:ba:
         a6:90:d9:29:82:c8:ac:e6:58:2b:a0:d1:bb:29:6b:e5:58:d2:
         05:6b:df:53:cc:b0:3c:0e:bc:09:d3:ec:6b:32:db:bf:45:47:
         d5:1b:05:0a:65:53:1f:93:30:cb:d6:12:3b:81:25:20:52:11:
         ab:03:e2:ff:ae:5f:ce:5f:85:45:1e:6c:b6:10:df:da:c7:6a:
         7b:77:0b:9b:3a:f1:f9:36:fd:bd:c4:d8:be:70:40:7c:06:d3:
         0c:78:3d:2a:fd:35:37:df:52:0b:c6:20:0f:7d:f5:14:17:e2:
         e1:7b:1d:c0:2d:b2:bb:87:ad:5c:6b:bf:a5:aa:40:09:75:28:
         96:fc:fa:43:e1:a1:ec:27:c0:11:30:27:ae:f6:93:c6:6d:70:
         5e:09:6b:60:32:5a:7a:26:40:c5:be:12:5b:8d:1a:f8:4f:c2:
         fd:d8:c9:b9:1b:a1:51:ec:c2:e4:c5:10:9f:41:bf:40:a0:8b:
         b4:ab:6f:5e:99:69:c4:28:af:ad:bd:a9:bb:9e:20:a9:34:19:
         48:e2:94:d9:b7:fe:c1:93:65:f9:9c:99:1d:60:c6:66:6e:25:
         a2:79:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:24 2025 by rpki-client