Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32322d3232203d3e20323636323536.roa
File:                     3139322e3134302e3130302e302f32322d3232203d3e20323636323536.roa (raw, json)
Hash identifier:          k0OrmM/A/2HUw3UeMOcajfPBnuK9ZmeUj2lX0rk+wL4=
Subject key identifier:   6E:04:77:7F:AD:8F:25:46:90:51:C1:E6:AF:98:65:74:9D:7F:E4:AB
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       196A0BE1B7E2A535D21A6FCDFCC6C903E57DA636
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32322d3232203d3e20323636323536.roa
Signing time:             Thu 06 Mar 2025 02:51:47 +0000
ROA not before:           Thu 06 Mar 2025 02:46:47 +0000
ROA not after:            Thu 05 Mar 2026 02:51:47 +0000
asID:                     266256
IP address blocks:        192.140.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6a:0b:e1:b7:e2:a5:35:d2:1a:6f:cd:fc:c6:c9:03:e5:7d:a6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Mar  6 02:46:47 2025 GMT
            Not After : Mar  5 02:51:47 2026 GMT
        Subject: CN=6E04777FAD8F25469051C1E6AF9865749D7FE4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:e6:8e:c3:87:00:f9:83:a0:b9:08:0b:97:
                    9d:a2:ab:29:de:d5:4c:aa:12:b1:06:7e:64:58:43:
                    ad:f9:39:3c:ae:60:41:60:44:c9:55:53:77:2d:87:
                    e3:0a:aa:88:bb:ff:84:ac:20:02:cb:5d:d3:09:d5:
                    da:d1:84:73:c3:f3:c3:9c:bc:10:7e:e3:57:e5:a3:
                    08:4e:b3:72:da:e9:19:43:4b:3e:83:f1:24:f8:99:
                    f8:3b:7c:30:29:2d:c2:3b:ea:f0:1b:b1:ec:7b:3f:
                    1d:2b:76:af:6c:62:f3:29:77:fd:e0:47:d7:f7:bb:
                    e3:99:94:be:90:9c:1a:7e:8e:9a:cb:62:87:a7:8b:
                    96:d4:1e:1f:b6:b9:4d:54:ec:4f:df:65:fa:a4:55:
                    0d:e2:42:36:e3:42:6b:ee:65:88:2e:33:eb:03:de:
                    f0:5a:f6:2d:ed:80:12:94:9f:72:7d:7b:3d:27:4e:
                    0e:c6:52:a6:f4:76:af:db:f8:e9:e9:96:24:87:15:
                    7f:24:2b:47:f5:78:2c:7f:2a:96:92:0c:46:e3:cd:
                    cd:7a:f2:84:3d:33:db:12:93:8d:c4:06:71:ed:af:
                    c0:db:4b:b0:04:82:fd:a7:86:24:11:0f:17:fd:43:
                    18:eb:01:6d:14:28:b3:0e:77:62:91:35:00:e8:b9:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:04:77:7F:AD:8F:25:46:90:51:C1:E6:AF:98:65:74:9D:7F:E4:AB
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32322d3232203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:db:13:39:d5:e6:22:59:3e:a3:1a:da:b5:3d:5f:67:56:e4:
         0f:c6:31:e8:6f:6d:5f:2a:07:af:db:0c:fd:d9:97:97:54:41:
         a3:a4:b0:12:19:3b:b8:d0:f1:d9:87:3c:b8:20:ec:9f:91:5e:
         63:10:ac:22:6d:77:0c:14:89:f4:51:ae:2e:a0:2c:23:c1:d1:
         ec:c7:fc:81:76:69:c7:8a:30:a2:89:68:95:3e:c8:c7:fa:38:
         0f:ed:3d:5d:3d:3c:1b:5e:61:37:76:bc:b4:d2:b9:87:38:03:
         5e:e4:60:3b:39:c6:87:d8:a5:99:bc:5e:e5:0b:9a:53:28:b5:
         b5:45:fe:5c:23:31:07:c7:60:5b:66:39:35:fd:98:9f:80:39:
         3e:85:37:a5:4d:16:ac:90:c6:62:21:71:f5:f2:2d:db:cd:02:
         2d:8c:99:b2:bb:1b:80:68:d1:37:e4:13:d2:8c:05:35:fa:46:
         4d:a6:a0:e4:37:67:49:09:ef:f0:de:01:01:d6:4e:ab:8a:75:
         7b:a3:f1:c2:62:d6:97:ae:69:1c:40:b3:c5:92:b3:79:f5:28:
         3b:7d:8f:6e:91:b5:b6:87:09:03:b7:23:f6:73:1e:fe:4b:21:
         83:f3:17:2c:8e:31:9a:d2:3e:22:19:3f:02:b7:f9:8a:54:d4:
         7f:7c:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:32:34 2025 by rpki-client