Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa
File:                     3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa (raw, json)
Hash identifier:          bwRfzRBEN6OCYcWYenNjpcybKLc7h5APupWGkAS6aoA=
Subject key identifier:   66:BC:96:ED:0D:60:A3:C3:8C:1A:1C:99:9C:30:DB:C9:24:F7:0C:E6
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       4B33C635A86F9259D01256164D4F2F9459498840
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa
Signing time:             Tue 27 May 2025 20:37:56 +0000
ROA not before:           Tue 27 May 2025 20:32:56 +0000
ROA not after:            Tue 26 May 2026 20:37:56 +0000
asID:                     263143
IP address blocks:        191.242.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 09:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:33:c6:35:a8:6f:92:59:d0:12:56:16:4d:4f:2f:94:59:49:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: May 27 20:32:56 2025 GMT
            Not After : May 26 20:37:56 2026 GMT
        Subject: CN=66BC96ED0D60A3C38C1A1C999C30DBC924F70CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:6b:d5:4c:49:f4:a5:d2:0c:c2:95:65:b2:
                    20:7e:89:f9:a9:ce:b4:a5:e2:db:d1:1e:b8:c1:0e:
                    d7:b0:2a:60:0e:c5:3d:cd:83:23:c1:5e:03:79:70:
                    fe:25:fe:c0:f1:de:f7:74:c7:a1:8b:98:e7:88:4a:
                    10:ee:17:5e:35:b0:2e:f4:a0:67:11:ab:ce:75:a6:
                    fe:72:0a:80:de:6e:07:dc:73:0b:37:61:62:4b:a9:
                    82:ce:95:fd:ce:b2:5f:f6:22:34:4b:cc:62:6d:a7:
                    59:52:ba:c5:7e:51:c5:2a:37:dc:dd:c3:9d:9a:9a:
                    b2:bf:90:01:67:99:bb:d6:41:33:03:29:92:9b:61:
                    69:de:3b:8e:af:be:89:ee:97:ef:48:29:e3:96:1d:
                    28:d8:67:54:d8:9d:af:a3:b7:8e:a6:bf:d5:66:23:
                    78:59:05:ae:88:0a:ff:95:76:cf:c7:80:36:8d:59:
                    96:3b:38:9b:c0:68:0f:0f:37:27:d2:78:56:55:1a:
                    6b:57:f4:a2:b6:36:ec:c5:d7:c2:71:30:0e:38:3d:
                    68:5c:38:fe:c1:88:fe:eb:31:dc:5b:d2:36:62:7e:
                    0a:6f:28:fb:9e:a5:57:cd:23:f8:7e:0b:30:ea:e7:
                    c6:a9:56:68:a8:a6:e3:46:ca:6e:25:44:0e:25:9a:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BC:96:ED:0D:60:A3:C3:8C:1A:1C:99:9C:30:DB:C9:24:F7:0C:E6
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:11:32:64:0b:e5:75:90:61:a4:03:4d:52:5a:4d:e7:ab:5f:
         50:66:e9:6e:17:fe:4f:0b:f2:88:90:0e:20:40:f5:2b:78:e4:
         c7:49:ef:31:87:56:eb:db:45:57:f0:25:86:2b:5d:4c:5a:ef:
         c1:b5:37:ab:b6:2c:e5:dd:d4:69:1d:06:0a:0f:a9:b9:97:ec:
         e4:c5:db:63:ec:bf:1d:64:3d:f5:80:ea:6d:ee:44:2f:56:ea:
         09:e3:e1:d8:e7:6b:a9:3a:8a:a0:29:58:8b:a8:93:e1:ff:42:
         61:d2:c7:aa:42:15:e9:24:d7:70:3d:91:42:ba:49:38:14:53:
         b3:c2:05:5b:41:fd:fd:18:56:01:17:58:7b:cf:a1:4b:ae:d3:
         7e:18:a0:33:c1:4d:f2:be:f6:1b:95:81:68:dd:02:83:31:4c:
         23:0f:27:fe:e6:45:3a:a1:7f:fd:89:5b:c7:8c:90:cd:e4:50:
         44:7c:55:56:71:81:7d:28:3e:6c:31:6f:99:31:ee:b5:75:32:
         a1:38:f0:11:a4:2a:d1:2c:5a:cc:d3:78:04:ef:28:bb:1b:9c:
         82:4a:de:7b:36:a9:0c:45:2a:02:10:74:76:fb:e7:36:4f:e2:
         1c:0a:58:ec:fd:71:96:31:85:b2:cf:65:8a:98:8b:08:49:3d:
         34:23:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:33:15 2025 by rpki-client