Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa
File:                     3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa (raw, json)
Hash identifier:          znKyJp2aQj5YiSJE3xHITuZqf1pdvPp1xjrS/IglAoo=
Subject key identifier:   73:1A:02:59:09:7B:59:A6:64:47:6E:96:58:D4:BF:A9:7A:65:B6:72
Certificate issuer:       /CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
Certificate serial:       04774969F4EB2B37F195953C85CECC60FB7B3677
Authority key identifier: 70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa
Signing time:             Wed 19 Feb 2025 20:30:49 +0000
ROA not before:           Wed 19 Feb 2025 20:25:49 +0000
ROA not after:            Wed 18 Feb 2026 20:30:49 +0000
asID:                     270716
IP address blocks:        189.127.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.crl
                          rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 03:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:77:49:69:f4:eb:2b:37:f1:95:95:3c:85:ce:cc:60:fb:7b:36:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
        Validity
            Not Before: Feb 19 20:25:49 2025 GMT
            Not After : Feb 18 20:30:49 2026 GMT
        Subject: CN=731A0259097B59A664476E9658D4BFA97A65B672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:8d:09:05:26:92:0a:62:a9:ed:b0:21:64:
                    7e:7c:ff:62:5f:4c:12:b9:e2:36:b5:05:bd:af:72:
                    c7:84:81:9e:7c:9c:37:8b:47:9d:4f:50:20:fb:be:
                    2b:32:de:10:9b:ef:8a:87:6e:c8:6b:b6:fc:2d:1d:
                    ee:32:66:c8:99:73:1d:c2:1b:23:07:40:43:bc:ce:
                    3b:5d:f7:00:6e:f5:98:10:90:01:4d:c5:86:4f:0b:
                    cb:a6:ca:e5:ce:f8:94:10:b0:dc:36:72:eb:27:62:
                    0f:1c:21:d2:04:a9:a3:5c:7a:fc:02:b6:77:75:f7:
                    ec:30:65:f5:51:0d:c0:4a:10:d2:40:30:4f:6b:6c:
                    ae:fe:88:74:7c:20:d3:6c:90:83:51:9c:19:01:b7:
                    5d:ec:99:45:c9:c8:a5:00:d6:c3:6b:7c:af:1e:3a:
                    03:f2:fb:3a:5d:ea:00:de:bf:d2:73:a1:9d:96:81:
                    0c:e3:aa:7f:3a:c3:d0:20:fb:c1:fd:7b:90:36:70:
                    ed:ab:c0:f5:ad:0c:4a:28:1c:7d:c4:0e:61:50:77:
                    14:8f:48:7f:f2:14:91:43:ae:73:09:76:5b:8e:60:
                    a5:4f:f2:c4:91:eb:0a:05:9d:14:ba:f1:73:b6:e6:
                    6e:f6:7a:4a:19:a5:b1:ea:a7:51:e3:ba:72:3c:39:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1A:02:59:09:7B:59:A6:64:47:6E:96:58:D4:BF:A9:7A:65:B6:72
            X509v3 Authority Key Identifier:
                keyid:70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:d0:33:9a:78:6f:94:92:bc:c5:a9:63:33:ac:2c:50:cd:a5:
         79:b0:63:bc:69:1c:35:67:3e:d4:ef:bf:8b:61:33:bb:5d:fd:
         1a:4c:17:40:6b:70:93:8b:9d:32:e6:42:43:31:63:d1:5b:83:
         c5:e8:4b:12:ef:ff:38:e2:f3:9c:08:38:67:c3:be:2d:6c:13:
         ce:1b:0a:d6:45:66:11:6e:99:4f:1e:30:9d:20:62:de:1a:58:
         9c:81:1a:76:b6:33:27:d2:c6:9f:fd:9a:6c:42:0e:74:04:46:
         cd:42:3b:e6:9d:ef:7a:dc:a4:c7:5a:20:cd:8b:54:3c:d0:4d:
         e7:0f:84:7b:57:58:c2:7d:bc:71:47:a5:f5:aa:6e:21:bd:2c:
         9e:f2:b9:8a:db:5e:a7:07:30:fa:ef:d8:71:96:3d:e4:9e:d0:
         27:35:9a:29:2d:4f:fa:1b:1e:a8:ea:0e:92:e3:1a:8e:01:9f:
         b3:51:16:00:69:3a:cd:58:8d:6b:e6:08:ce:33:fe:65:f7:aa:
         f0:17:c1:0a:74:f0:09:a6:c0:4b:77:de:c3:10:bd:ee:e5:58:
         50:77:de:91:e3:69:71:aa:9c:d7:bc:27:d1:77:ff:b3:de:94:
         04:a6:e6:d7:f4:ff:fa:92:ea:3d:17:cb:4f:f9:df:3f:c5:af:
         63:5e:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:29:54 2025 by rpki-client