Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3332203d3e20323633353434.roa
File:                     3139312e352e3234302e302f32302d3332203d3e20323633353434.roa (raw, json)
Hash identifier:          JZvdcT9RhwOExA/2167deF3x0wqUQlBUo3cnRCnsE5A=
Subject key identifier:   CA:93:A8:D0:D5:C0:2F:36:8A:EA:05:B0:67:5E:63:6A:A2:20:54:D6
Certificate issuer:       /CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
Certificate serial:       6245AD0BE854108EC0F92D81B3CF1A7A687B700D
Authority key identifier: E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3332203d3e20323633353434.roa
Signing time:             Wed 28 May 2025 16:55:27 +0000
ROA not before:           Wed 28 May 2025 16:50:27 +0000
ROA not after:            Wed 27 May 2026 16:55:27 +0000
asID:                     263544
IP address blocks:        191.5.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 20:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:45:ad:0b:e8:54:10:8e:c0:f9:2d:81:b3:cf:1a:7a:68:7b:70:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
        Validity
            Not Before: May 28 16:50:27 2025 GMT
            Not After : May 27 16:55:27 2026 GMT
        Subject: CN=CA93A8D0D5C02F368AEA05B0675E636AA22054D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:a7:58:a6:91:d5:dc:ee:7e:f3:0e:16:43:
                    ee:6d:6f:aa:d4:17:ac:57:93:80:e3:3b:23:fb:10:
                    fb:6e:80:35:f4:f2:72:12:88:ce:7d:44:92:ce:c6:
                    05:eb:34:1f:37:c1:77:03:c0:6a:d1:e2:c9:ed:80:
                    2f:65:0b:f4:74:b5:cb:3f:39:a5:1c:8f:20:ac:04:
                    ff:6c:69:e7:0d:9f:f1:b4:22:6c:9e:04:aa:89:b1:
                    00:32:85:2a:97:93:6b:71:7c:57:84:d6:67:5e:bf:
                    34:dd:c3:3c:65:58:b1:7b:20:92:43:f0:73:41:78:
                    e9:6d:6e:2b:77:74:91:6b:49:7b:01:aa:a6:60:5c:
                    5c:91:26:6d:33:24:b5:f2:0d:1a:cd:77:5d:b9:d0:
                    d9:fa:8c:e7:82:59:91:85:ff:4b:8c:2c:43:b5:90:
                    33:a7:c4:20:3a:f1:a0:43:e2:0b:1c:12:02:83:08:
                    d1:90:60:0d:de:1e:6d:a0:c4:da:37:0c:7e:81:6a:
                    5b:5d:b9:93:de:cc:c9:6b:25:7f:d8:dd:77:08:07:
                    77:e6:d3:e1:04:16:69:c3:b8:71:68:32:be:f8:24:
                    e8:47:1b:15:69:3c:04:2a:fe:a5:46:8f:8a:41:67:
                    3a:ec:05:6f:71:3b:6a:63:00:9a:1e:04:57:af:b7:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:93:A8:D0:D5:C0:2F:36:8A:EA:05:B0:67:5E:63:6A:A2:20:54:D6
            X509v3 Authority Key Identifier:
                keyid:E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3332203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:21:7e:63:71:d3:6b:b5:37:89:dd:bc:d4:c0:8c:91:8f:4c:
         b4:85:31:8b:b8:8f:0f:8d:7a:ae:97:e8:c3:8b:9a:d6:d6:d5:
         0e:15:77:0c:05:34:73:dd:e2:26:c2:ae:88:0f:19:63:3c:ca:
         49:1e:85:54:88:58:ff:ec:b8:48:c2:fd:25:3c:ec:10:8c:03:
         da:00:21:9b:5f:a6:85:e6:f3:b1:85:76:cc:77:26:89:d5:03:
         9e:c1:7c:8e:86:ea:04:7c:96:c1:be:ce:e7:d4:b8:18:98:ee:
         f9:f6:bb:78:6e:c5:5a:3c:36:cf:e5:97:b8:77:8d:45:d3:57:
         f7:1c:d4:64:12:86:6f:1b:0a:d4:36:70:44:6b:c4:64:1c:e1:
         cf:09:16:9e:20:3e:d6:3d:8b:4e:fd:72:33:6d:9a:cb:82:14:
         22:62:8a:d6:b9:cd:41:31:1e:b8:63:7e:99:dc:3b:fc:8b:f9:
         1c:9e:2f:be:9e:e6:5f:1e:8b:66:c6:84:b8:e4:2c:e7:cd:e4:
         ed:1c:20:ad:99:5c:2d:fa:50:78:7c:74:ca:0d:a2:53:97:66:
         21:fa:85:fc:3b:0f:d5:2c:57:8f:27:5d:11:da:7d:af:f7:14:
         1c:14:61:4e:c6:c1:43:a1:a9:1b:ca:47:28:14:2e:02:56:aa:
         22:b8:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:17:26 2025 by rpki-client