Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa
File:                     3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (raw, json)
Hash identifier:          O4umjiYVU7j4EsoyzkJkKmVp7SWzfxGg5KPRjQx133g=
Subject key identifier:   6B:DA:13:18:F7:F2:9B:D0:E6:E3:8E:4E:9D:E7:D5:5B:22:B9:07:E5
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       12774B65D1686CF92BE8092280B317DC5E8E1A1F
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa
Signing time:             Thu 06 Mar 2025 22:34:05 +0000
ROA not before:           Thu 06 Mar 2025 22:29:05 +0000
ROA not after:            Thu 05 Mar 2026 22:34:05 +0000
asID:                     263143
IP address blocks:        191.242.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:4b:65:d1:68:6c:f9:2b:e8:09:22:80:b3:17:dc:5e:8e:1a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Mar  6 22:29:05 2025 GMT
            Not After : Mar  5 22:34:05 2026 GMT
        Subject: CN=6BDA1318F7F29BD0E6E38E4E9DE7D55B22B907E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:a6:43:b6:93:8a:5d:a1:84:b1:f9:06:4d:
                    98:e1:e4:0a:5f:3f:eb:15:08:1a:65:08:84:df:46:
                    ab:f8:ac:4b:20:43:b1:71:80:64:bf:6b:fe:ac:21:
                    2b:16:83:2d:46:1d:1a:48:14:1b:24:7f:f7:e9:e3:
                    18:b7:29:3e:a8:fd:29:20:a9:e1:d7:0d:97:bd:33:
                    bd:09:97:1f:09:31:a1:f3:55:a1:b5:5e:4a:46:e6:
                    4a:58:8e:54:80:12:36:85:42:68:5a:ea:c9:4b:a8:
                    c5:76:95:03:88:d2:39:d9:9a:61:97:f6:af:81:d6:
                    67:cd:7a:e8:6a:f2:34:a0:4d:19:0f:d2:ab:2e:73:
                    c2:63:fc:6a:43:0c:a7:f3:35:1c:ff:a3:bd:40:7c:
                    72:9b:0e:01:aa:e7:0f:7b:a9:7a:b3:47:c8:23:42:
                    b4:fd:b8:7d:30:ca:0f:ac:3a:62:f5:c7:a0:69:42:
                    ef:04:72:1e:eb:35:ad:d4:75:bd:e0:03:b4:b1:1e:
                    73:81:33:2d:ca:95:d8:4d:4f:59:34:1e:f7:c4:33:
                    3f:1a:0e:5b:25:a7:67:a6:49:28:d3:42:f6:37:01:
                    ab:3c:39:32:0a:46:f7:a9:59:b5:88:c8:b2:45:a3:
                    bb:2a:c7:3d:37:59:d2:bd:41:b3:d1:24:05:c9:16:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DA:13:18:F7:F2:9B:D0:E6:E3:8E:4E:9D:E7:D5:5B:22:B9:07:E5
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:23:33:65:90:a2:4e:83:27:6e:60:1b:68:b8:71:27:87:
         95:dc:1a:31:83:3a:81:bd:bf:c0:c7:33:53:1b:a6:bb:c4:58:
         54:a2:6c:95:dd:a7:29:05:59:ca:66:e6:f5:d7:cf:8e:6a:0c:
         69:d4:2c:e0:aa:bd:2d:d0:ed:9c:6c:c4:a3:33:33:1f:0b:f0:
         3c:a7:a2:98:a1:03:da:07:d8:a6:e3:91:bd:14:47:36:9f:4f:
         c0:83:08:b2:06:bb:14:ff:7d:6c:14:06:7c:e4:08:8a:7d:1b:
         30:a7:59:8d:8d:70:bf:c5:b9:48:b2:14:6d:0d:a3:d3:2b:99:
         5b:de:41:7d:f3:62:2b:53:0f:59:c2:91:8f:d8:71:8a:1f:d6:
         ba:2b:31:61:c5:d2:4d:37:20:0d:6e:b6:d8:e3:76:ed:06:99:
         35:b2:8f:93:2a:1c:67:1c:9a:8d:0e:41:78:45:01:ab:43:3b:
         b3:79:99:34:23:e4:24:68:14:47:a7:98:d8:cd:39:7e:24:85:
         35:af:49:ea:f4:df:5d:dc:c1:7b:ef:c9:11:e9:9f:a5:77:5b:
         65:e4:ce:4b:10:1b:b9:60:10:19:ea:f1:bf:6d:7c:a7:8f:e9:
         44:19:60:5e:7b:7f:30:c2:c1:db:7d:e9:23:ec:80:12:11:15:
         78:5e:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:22:44 2025 by rpki-client