Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa
File:                     3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier:          qEUNQRMsYNR1m04gVAHTSFhJbxEs97UqSXwSoKGJ62o=
Subject key identifier:   F9:1A:0C:1E:86:C5:2D:0E:87:6A:3F:60:A9:15:33:BF:25:E5:BD:E4
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       66BB7CCAD5724635782DD43E4308781541E3F2C9
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa
Signing time:             Thu 06 Mar 2025 22:34:05 +0000
ROA not before:           Thu 06 Mar 2025 22:29:05 +0000
ROA not after:            Thu 05 Mar 2026 22:34:05 +0000
asID:                     263143
IP address blocks:        191.242.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bb:7c:ca:d5:72:46:35:78:2d:d4:3e:43:08:78:15:41:e3:f2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Mar  6 22:29:05 2025 GMT
            Not After : Mar  5 22:34:05 2026 GMT
        Subject: CN=F91A0C1E86C52D0E876A3F60A91533BF25E5BDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:31:60:7b:7b:75:c9:4a:51:91:c4:42:29:
                    7a:1c:18:9e:2a:51:13:02:03:1b:10:d7:13:fe:9b:
                    96:eb:91:79:dc:03:0d:e6:4f:50:bd:2c:fe:e2:a4:
                    13:cd:c6:64:e2:f6:dc:12:4f:77:74:a5:6b:c9:ae:
                    81:25:c8:3a:33:ca:dc:fd:1e:82:01:57:76:c5:84:
                    90:59:80:33:a1:d8:e1:68:56:02:c6:49:73:f7:26:
                    5f:d1:5c:e9:36:12:2a:64:a6:d0:ae:68:57:bb:33:
                    d9:51:3c:4e:b8:c1:e3:32:14:e2:ba:67:d5:73:ee:
                    1c:3e:85:4c:20:af:45:d1:32:27:e1:f6:0b:da:29:
                    52:d7:f3:0f:17:45:b8:8e:62:96:cd:f4:d7:f4:53:
                    43:46:4b:6f:e0:13:c6:d0:14:72:3f:14:43:d9:fa:
                    d9:17:3f:96:b3:fa:8a:bb:5c:de:d4:5b:32:71:a7:
                    77:d7:ed:98:05:00:60:58:38:f3:74:8b:42:39:74:
                    28:07:4a:06:e4:5b:fd:cf:92:31:67:c3:54:e9:0b:
                    69:ec:84:bd:f7:2e:9a:4f:12:65:8f:24:aa:51:d6:
                    fd:f3:6e:55:aa:4b:6c:dc:70:39:43:c8:6a:07:93:
                    68:25:7d:21:b6:c3:28:a6:38:5d:aa:8e:12:bf:b8:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:0C:1E:86:C5:2D:0E:87:6A:3F:60:A9:15:33:BF:25:E5:BD:E4
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d8:12:ab:00:25:6f:45:03:72:f8:2e:86:37:b0:8f:b6:e0:
         0d:8d:6e:71:ec:49:d2:69:ba:50:2c:c9:ed:d9:1d:17:e3:52:
         d7:26:22:4e:ee:f0:67:a9:51:1f:ea:67:23:ea:10:77:25:e4:
         fe:f1:b6:2d:3f:4f:46:91:3f:6d:7f:1f:50:5f:e8:5b:e7:4f:
         99:c8:73:9b:f3:3e:39:56:9b:c7:4c:90:aa:29:66:e8:4b:44:
         e2:36:af:97:a8:5b:f5:6f:29:86:92:fc:c2:ed:74:fb:22:94:
         1b:eb:c3:a0:cb:bf:b9:28:a2:d2:50:f2:14:18:37:09:be:c5:
         6a:40:83:0f:55:91:85:f1:ea:46:64:dc:b9:d4:a5:6f:1a:bb:
         f7:c0:b0:9e:d9:42:26:ed:d0:9b:59:b1:d1:a1:32:62:84:7d:
         aa:6f:1f:ba:2f:69:5a:65:ab:58:d0:4d:59:ec:e6:65:cc:31:
         e0:4d:74:9d:b7:60:22:3a:34:0f:0c:05:84:01:37:2e:90:9c:
         a1:a7:b6:e1:44:52:f4:52:9a:6d:2a:9f:ea:f1:d3:4c:55:5b:
         61:96:ea:ca:30:9b:c2:2d:2f:14:ba:a4:b6:cf:74:62:01:64:
         91:15:c4:f9:eb:c9:ce:4d:af:7e:cc:a2:11:c0:c9:64:21:a7:
         9e:60:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:41 2025 by rpki-client