Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/3139312e3235332e35362e302f32322d3234203d3e20323733343531.roa
File:                     3139312e3235332e35362e302f32322d3234203d3e20323733343531.roa (raw, json)
Hash identifier:          sFJz3ZKgXEHV47TupsLlb79/24xRprCkQsyQ5MNeW1A=
Subject key identifier:   6F:D8:E3:C4:85:D2:A2:00:A3:A7:D4:AA:EF:D9:24:99:8B:8F:CA:F9
Certificate issuer:       /CN=C11E9EB14496B44C233C294F320837F642CF9602
Certificate serial:       2B16DDF1BE526782A94EB3414511DE97390B3256
Authority key identifier: C1:1E:9E:B1:44:96:B4:4C:23:3C:29:4F:32:08:37:F6:42:CF:96:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11E9EB14496B44C233C294F320837F642CF9602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/3139312e3235332e35362e302f32322d3234203d3e20323733343531.roa
Signing time:             Sun 15 Jun 2025 01:18:43 +0000
ROA not before:           Sun 15 Jun 2025 01:13:43 +0000
ROA not after:            Sun 14 Jun 2026 01:18:43 +0000
asID:                     273451
IP address blocks:        191.253.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/C11E9EB14496B44C233C294F320837F642CF9602.crl
                          rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/C11E9EB14496B44C233C294F320837F642CF9602.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11E9EB14496B44C233C294F320837F642CF9602.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:16:dd:f1:be:52:67:82:a9:4e:b3:41:45:11:de:97:39:0b:32:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11E9EB14496B44C233C294F320837F642CF9602
        Validity
            Not Before: Jun 15 01:13:43 2025 GMT
            Not After : Jun 14 01:18:43 2026 GMT
        Subject: CN=6FD8E3C485D2A200A3A7D4AAEFD924998B8FCAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c5:ad:30:63:72:c3:e2:e7:fe:fd:23:f7:ff:
                    c0:4c:ca:e4:ca:69:38:c4:5c:9b:fa:dd:1d:35:c7:
                    bc:05:c4:69:ac:12:64:42:6c:bb:71:ed:f2:81:d6:
                    02:40:34:4b:be:ed:67:7c:5a:f6:07:99:ed:8c:82:
                    39:6a:14:58:88:f5:89:52:ac:b5:f9:41:be:6d:61:
                    94:40:cb:22:cb:76:5f:e3:0e:ea:66:84:78:b8:07:
                    4c:83:fd:27:72:95:13:08:ca:81:16:0f:60:6c:5c:
                    36:99:52:dd:a0:15:a0:d3:c2:c8:0b:94:ce:fd:00:
                    ef:30:b6:50:ee:7e:64:6b:4d:51:dc:d6:2d:bb:c7:
                    74:9e:8a:f9:22:35:ee:8c:83:dc:97:c9:47:fc:dd:
                    69:f3:2d:71:58:c9:3d:e9:46:f2:49:34:b3:f8:fd:
                    1a:12:9a:ac:d7:5a:9d:58:f7:77:ec:75:eb:95:ea:
                    95:62:43:06:a6:3b:c1:9d:bd:35:29:4a:f3:fb:3d:
                    7d:72:11:a9:04:63:4f:32:1b:a2:48:3c:07:51:f7:
                    c2:24:20:0b:27:66:1b:c9:ab:36:56:1b:13:33:ea:
                    1e:ae:13:24:da:d6:c0:d8:60:c9:e8:d6:93:3f:6a:
                    92:ea:0e:87:05:55:f0:a1:2f:88:f9:5a:88:c9:e8:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D8:E3:C4:85:D2:A2:00:A3:A7:D4:AA:EF:D9:24:99:8B:8F:CA:F9
            X509v3 Authority Key Identifier:
                keyid:C1:1E:9E:B1:44:96:B4:4C:23:3C:29:4F:32:08:37:F6:42:CF:96:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/C11E9EB14496B44C233C294F320837F642CF9602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11E9EB14496B44C233C294F320837F642CF9602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XJdW6jMj6NcvWsCHPS1EmU3A3rBpsSajpRSoGLUWj47/0/3139312e3235332e35362e302f32322d3234203d3e20323733343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:fa:ff:af:71:34:24:6b:80:fa:fa:ba:25:37:4b:0c:2f:57:
         ab:0c:76:5b:f5:43:83:04:21:cd:b5:f6:19:ef:48:07:0b:cc:
         d2:b0:f3:8c:08:6c:95:c0:00:3b:9b:84:3b:f7:cb:4a:6e:4b:
         e5:ff:fd:c9:fc:08:14:a0:05:41:26:5d:69:a6:90:16:6f:69:
         5e:b9:86:99:e9:d3:80:5c:eb:eb:17:fd:7c:0e:fe:20:5b:a9:
         a1:54:fc:fe:76:a4:f2:b5:e9:2c:8f:c9:8e:6f:2b:03:40:7b:
         65:43:6c:3d:91:d3:b9:bb:c5:42:0a:ab:e0:70:89:dc:38:87:
         51:78:de:ae:f9:f4:7e:a2:6e:78:a2:59:2c:1c:db:25:27:d9:
         ad:77:65:fd:f8:5f:ef:77:78:0e:5a:af:f3:e9:d0:d7:c1:ac:
         c2:96:bd:02:5e:22:4f:a3:2e:e4:6e:61:73:e3:17:55:45:65:
         00:7e:bb:86:3a:a9:0a:31:76:98:37:2e:50:99:83:b8:6e:b6:
         42:2b:de:53:80:65:d4:36:ff:1b:98:0c:ad:c6:74:d6:ed:e1:
         d0:46:bf:7d:10:f8:ff:cb:d1:c1:45:f0:6e:89:8a:92:14:e1:
         08:dd:55:36:95:ee:a8:61:84:a7:db:d6:f2:78:cb:f8:33:88:
         db:17:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:01:51 2025 by rpki-client