Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/3139322e3134312e3235322e302f32322d3332203d3e20323637353033.roa
File:                     3139322e3134312e3235322e302f32322d3332203d3e20323637353033.roa (raw, json)
Hash identifier:          BApgtwiek5EN0+iwlWsGZMs5IswMsL7FMkxZBhqpISE=
Subject key identifier:   AD:03:ED:16:F6:0F:03:9D:10:B9:6B:B3:3C:65:FF:96:25:20:DB:F8
Certificate issuer:       /CN=EB258E43B37369C45A1A85EEBA98325264F76352
Certificate serial:       0F799084EFC97879DE7805F5760FCA0D144BFFAC
Authority key identifier: EB:25:8E:43:B3:73:69:C4:5A:1A:85:EE:BA:98:32:52:64:F7:63:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB258E43B37369C45A1A85EEBA98325264F76352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/3139322e3134312e3235322e302f32322d3332203d3e20323637353033.roa
Signing time:             Wed 12 Mar 2025 19:39:26 +0000
ROA not before:           Wed 12 Mar 2025 19:34:26 +0000
ROA not after:            Wed 11 Mar 2026 19:39:26 +0000
asID:                     267503
IP address blocks:        192.141.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.crl
                          rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB258E43B37369C45A1A85EEBA98325264F76352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:79:90:84:ef:c9:78:79:de:78:05:f5:76:0f:ca:0d:14:4b:ff:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB258E43B37369C45A1A85EEBA98325264F76352
        Validity
            Not Before: Mar 12 19:34:26 2025 GMT
            Not After : Mar 11 19:39:26 2026 GMT
        Subject: CN=AD03ED16F60F039D10B96BB33C65FF962520DBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:fc:5c:94:53:77:93:20:48:61:dc:f5:9c:
                    02:41:84:3d:21:91:d0:c7:c1:23:6c:d9:71:56:24:
                    5e:cc:75:a5:07:b5:ec:f9:f9:d4:37:05:54:99:24:
                    90:19:f2:c3:42:b0:4b:7b:e6:b6:ea:63:30:ba:51:
                    31:6a:ca:62:02:6e:a9:50:a9:19:fe:c1:be:9a:3e:
                    fd:12:2c:5c:ca:bd:9d:0b:b7:b3:90:f9:e8:d2:0d:
                    88:cd:22:41:5e:ae:5a:3e:ed:02:d7:5b:a7:d0:fb:
                    14:02:01:8d:43:84:d5:97:a1:1d:06:56:66:ec:9a:
                    46:19:11:c1:2f:70:f7:ba:9d:a1:77:29:83:b1:1e:
                    d4:7e:48:fd:e9:b4:a1:82:d0:73:60:5b:06:dc:7f:
                    11:83:4b:6c:5f:1b:42:d5:1c:e5:b9:6b:51:98:53:
                    c8:b6:2f:71:e8:8f:c8:3e:c7:a2:d0:0c:b1:1a:96:
                    81:4a:e5:50:24:53:9a:f8:4a:4d:8a:02:bf:e8:6b:
                    ee:f4:b6:5f:e1:df:0b:52:3b:9d:6b:02:1b:47:07:
                    d2:9c:69:fe:e8:fc:55:45:b3:23:21:43:31:d8:97:
                    21:1d:5d:84:15:15:0e:24:ef:e1:6e:1e:39:a9:19:
                    16:99:64:0f:44:8b:39:a9:31:2b:6f:5a:2d:c0:6d:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:ED:16:F6:0F:03:9D:10:B9:6B:B3:3C:65:FF:96:25:20:DB:F8
            X509v3 Authority Key Identifier:
                keyid:EB:25:8E:43:B3:73:69:C4:5A:1A:85:EE:BA:98:32:52:64:F7:63:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB258E43B37369C45A1A85EEBA98325264F76352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/3139322e3134312e3235322e302f32322d3332203d3e20323637353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:d9:55:f4:40:46:63:d6:6a:8b:67:61:b6:fe:e6:0d:f3:
         20:66:50:10:8e:58:be:0b:e3:95:c3:07:70:9f:ba:61:ae:d4:
         c5:b2:3f:4e:3d:e2:a3:9e:cf:57:ce:d4:79:08:99:9c:87:1c:
         7c:fc:85:a4:05:7e:d8:35:a6:ad:61:16:48:8c:34:e0:a3:89:
         12:71:26:0b:63:c0:71:0c:eb:88:b8:79:eb:0e:d0:55:90:fa:
         b7:04:85:16:e8:47:54:1b:fb:97:ab:cf:38:a6:a7:f8:cd:c5:
         40:31:5d:d8:b0:7a:66:83:4b:1e:a6:8a:c4:3c:84:5f:44:45:
         75:b1:7a:95:9e:cc:8a:e1:4d:c0:63:d0:1a:ae:38:75:6d:13:
         42:5d:43:a0:bb:72:5f:4a:c9:f4:4a:73:a1:11:de:69:f3:00:
         6b:35:f7:47:ba:40:d6:ad:8e:31:b0:c2:89:53:33:25:25:41:
         9e:cc:27:f2:af:63:e5:cf:ea:fa:f2:67:c2:b1:53:c9:6b:82:
         ff:a6:e7:67:e6:47:eb:f8:70:f1:a3:29:57:08:34:12:1c:35:
         c8:eb:b2:8a:4d:76:e2:25:be:fa:32:6f:d8:a3:16:0d:a7:c1:
         34:e0:d1:2d:e5:39:e9:0c:24:8b:2d:ab:9e:9e:ca:8e:32:15:
         b1:51:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:41:04 2025 by rpki-client