Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130332e302f32342d3234203d3e20323636323536.roa
File:                     3139322e3134302e3130332e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier:          UZ8uDWROPcSMBvSe0XBCSv1sTFTU61lzTZQ/2C5v62k=
Subject key identifier:   56:62:36:CD:D6:69:7C:95:55:2F:44:06:75:65:44:3D:1F:14:B0:90
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       22D375E59395A277E987B1B4C9AFF233EB92F198
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130332e302f32342d3234203d3e20323636323536.roa
Signing time:             Thu 06 Mar 2025 02:51:47 +0000
ROA not before:           Thu 06 Mar 2025 02:46:47 +0000
ROA not after:            Thu 05 Mar 2026 02:51:47 +0000
asID:                     266256
IP address blocks:        192.140.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d3:75:e5:93:95:a2:77:e9:87:b1:b4:c9:af:f2:33:eb:92:f1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Mar  6 02:46:47 2025 GMT
            Not After : Mar  5 02:51:47 2026 GMT
        Subject: CN=566236CDD6697C95552F44067565443D1F14B090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:15:8f:5b:db:5c:1f:c5:81:cb:bd:f0:d6:
                    34:ca:54:ac:7f:01:b9:48:c3:cc:f4:ad:f8:c9:05:
                    84:72:5f:34:ed:0a:98:3f:93:29:ac:27:d7:5e:dd:
                    eb:8b:4e:82:9d:a0:c1:4a:23:07:35:20:d1:ef:6f:
                    c6:a6:ec:12:25:24:69:2d:df:90:20:9f:12:2d:33:
                    9a:f9:83:89:33:38:d3:a9:c3:fd:dd:ff:3b:bb:c9:
                    0e:df:0c:a3:08:87:b6:f7:64:17:36:e3:5d:dc:99:
                    86:35:07:18:ea:63:e3:16:0b:f5:07:8c:df:5b:b9:
                    c7:bd:28:ff:df:f9:61:08:be:0f:18:ad:da:60:00:
                    d3:6c:1b:0d:42:da:93:58:f4:3a:f5:4c:52:16:5a:
                    a2:bb:43:e8:8f:2c:9b:5e:9a:c5:cc:60:76:d0:7b:
                    dc:52:a4:43:2c:f1:df:21:51:22:e0:93:64:49:7e:
                    6d:99:a5:d4:84:93:8f:25:0c:62:fc:67:cd:ac:67:
                    04:36:10:de:fc:5c:6b:a2:81:c8:25:5d:36:d7:5f:
                    37:4c:cf:c2:cb:32:53:37:39:e9:31:aa:e6:ca:b5:
                    d9:d6:a7:cc:06:2f:eb:35:41:e3:c9:fe:7d:dc:ae:
                    e7:0e:96:e8:13:ba:0c:52:3c:b8:6a:a7:16:02:c2:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:62:36:CD:D6:69:7C:95:55:2F:44:06:75:65:44:3D:1F:14:B0:90
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130332e302f32342d3234203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:78:86:bc:61:e6:f6:2f:95:47:2d:1b:be:56:9f:ee:25:80:
         3b:d4:c8:dd:b9:67:6a:72:05:cd:c8:bc:77:3c:c0:be:a1:54:
         96:8d:a0:78:e9:b6:fb:36:3e:92:ba:1a:de:7e:5c:f3:86:34:
         13:65:ff:55:98:0b:37:57:9d:48:ab:47:f9:06:76:f5:47:22:
         24:6c:9a:6a:54:27:b8:3c:f8:88:97:df:0c:2a:b7:b3:15:72:
         fb:74:f3:2e:00:bb:c2:6d:71:f4:fe:f2:e9:b2:45:f6:55:3e:
         e8:f3:d0:21:f1:4d:c3:3f:72:0d:fd:f7:d5:c2:0d:15:07:6a:
         66:7a:04:92:d2:37:72:b4:c0:25:47:96:51:e3:66:b8:93:cc:
         69:70:d4:7f:dd:bd:79:51:fb:ac:bc:28:68:02:b9:42:30:13:
         c1:0e:2f:2d:25:a7:33:22:67:bf:7e:ea:5a:9a:ea:66:a6:e6:
         26:e1:7c:c8:00:e6:b3:59:8a:97:54:63:7d:ba:e2:45:74:f0:
         e9:92:ec:3c:09:2a:fd:3c:72:ac:e1:54:d9:f8:f3:2d:72:ec:
         84:ca:73:1b:ce:b4:0b:8b:29:72:ee:77:1d:78:e5:36:f2:04:
         c3:60:ce:1d:c9:0e:68:52:47:94:86:d0:07:26:9a:41:58:08:
         b4:13:8e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:30:00 2025 by rpki-client