Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/3139322e3134312e38342e302f32322d3234203d3e20323637343632.roa
File:                     3139322e3134312e38342e302f32322d3234203d3e20323637343632.roa (raw, json)
Hash identifier:          r+NNydIpCtfWxH/ttZZBW28lVPRKzevHWyjcjpj7OmM=
Subject key identifier:   2C:75:05:76:38:36:8D:FB:B7:02:DA:83:EB:1A:DB:81:DE:66:6A:88
Certificate issuer:       /CN=1527C597A58C3A12588A6C8A96ED78E2C0EC76D0
Certificate serial:       1187A3B28989D8E312B88C9BB30F05BA972E88D9
Authority key identifier: 15:27:C5:97:A5:8C:3A:12:58:8A:6C:8A:96:ED:78:E2:C0:EC:76:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/3139322e3134312e38342e302f32322d3234203d3e20323637343632.roa
Signing time:             Fri 28 Mar 2025 16:29:25 +0000
ROA not before:           Fri 28 Mar 2025 16:24:25 +0000
ROA not after:            Fri 27 Mar 2026 16:29:25 +0000
asID:                     267462
IP address blocks:        192.141.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.crl
                          rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 10:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:87:a3:b2:89:89:d8:e3:12:b8:8c:9b:b3:0f:05:ba:97:2e:88:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1527C597A58C3A12588A6C8A96ED78E2C0EC76D0
        Validity
            Not Before: Mar 28 16:24:25 2025 GMT
            Not After : Mar 27 16:29:25 2026 GMT
        Subject: CN=2C75057638368DFBB702DA83EB1ADB81DE666A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:e4:4d:6a:2f:e4:23:c2:99:29:66:66:3b:
                    c2:1c:f7:8d:83:2a:6a:73:37:0c:c0:b7:49:7a:6a:
                    a4:06:27:11:c8:82:fb:63:0d:6f:d6:6e:2a:e5:35:
                    8f:19:43:a5:39:94:f2:8d:1f:00:c0:32:9d:39:50:
                    01:fd:47:d6:62:cc:2a:13:82:00:55:ed:3b:4d:16:
                    9c:28:2b:41:15:9f:01:b3:9a:d6:01:92:87:30:ed:
                    df:05:c9:40:3d:ea:73:0c:55:65:b5:81:0d:df:7d:
                    79:75:86:de:ef:37:06:c4:60:f5:0d:32:4d:5e:23:
                    9b:4f:db:b6:84:b3:35:aa:5e:a9:af:1d:3c:e8:27:
                    7f:82:e1:0b:e5:da:a4:d6:cf:63:f5:06:2d:15:d6:
                    bf:b7:8a:e0:09:92:31:f9:9f:31:db:ec:42:c4:0c:
                    dc:16:3c:e2:9c:e4:7f:f8:0e:a7:e4:16:9b:7e:df:
                    99:a7:41:5a:9b:ea:73:a4:38:57:dd:ad:9e:f1:20:
                    7a:0a:7a:0e:77:0a:bc:26:07:13:e4:90:3a:1e:60:
                    d3:6d:8c:d9:0a:2f:a0:79:be:dc:b6:d2:bb:e9:7c:
                    1c:17:cc:17:21:18:d4:34:be:1d:24:33:d3:a1:81:
                    80:70:96:20:78:62:61:17:4a:d8:f4:e3:93:45:34:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:75:05:76:38:36:8D:FB:B7:02:DA:83:EB:1A:DB:81:DE:66:6A:88
            X509v3 Authority Key Identifier:
                keyid:15:27:C5:97:A5:8C:3A:12:58:8A:6C:8A:96:ED:78:E2:C0:EC:76:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/3139322e3134312e38342e302f32322d3234203d3e20323637343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:8c:8d:d7:0f:e3:83:b0:c0:3a:40:ff:e4:13:f2:8e:ff:
         9f:39:f5:3a:f7:1b:3d:e0:9a:80:7b:53:ca:2b:3b:c4:b9:51:
         4b:e8:1b:22:0e:71:df:ef:c7:51:40:05:a2:b5:48:17:de:ad:
         48:38:38:7c:01:79:fe:6f:64:2d:d1:c9:22:99:55:0e:b4:35:
         25:2c:b0:90:62:f5:7b:03:64:db:a6:07:59:30:a3:5e:34:55:
         e6:7e:78:42:dd:8d:3b:0f:68:5c:81:1d:2b:bd:6f:4b:bd:f5:
         56:53:97:1e:16:c3:e4:2d:2e:cd:5f:83:5a:7c:a4:7a:33:84:
         98:33:49:a4:af:f3:ab:35:7c:43:73:0b:be:6a:dd:f4:35:d8:
         50:1a:d9:e1:fc:74:cb:ab:d4:cf:fe:0f:47:76:03:bf:6d:59:
         ef:5e:aa:49:47:1e:21:42:72:dd:ac:5c:b0:47:60:b4:93:11:
         99:06:a2:bb:db:ab:1f:33:58:51:d1:83:e3:13:88:81:4a:ed:
         b1:53:c6:f4:36:27:e8:41:08:95:4e:0d:c6:bd:2c:62:62:44:
         87:7e:fc:ed:8f:75:13:02:f3:7f:45:57:68:38:48:08:8f:a6:
         41:1c:ba:e3:84:df:85:47:c4:cb:9e:e4:fe:8c:5b:ef:23:99:
         e6:2f:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:07 2025 by rpki-client