Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa
File:                     3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa (raw, json)
Hash identifier:          Wa+7rbFzpB9MTRromlNAQCukB1dXttOnu1rdds7sowY=
Subject key identifier:   C2:97:D9:93:DD:86:EC:C9:E7:C8:E4:40:A1:D5:30:57:8C:C1:7B:70
Certificate issuer:       /CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
Certificate serial:       49F4B52C11FFFACD276B17EC724440C48D51D359
Authority key identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa
Signing time:             Mon 09 Jun 2025 19:59:16 +0000
ROA not before:           Mon 09 Jun 2025 19:54:16 +0000
ROA not after:            Mon 08 Jun 2026 19:59:16 +0000
asID:                     274667
IP address blocks:        192.141.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl
                          rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f4:b5:2c:11:ff:fa:cd:27:6b:17:ec:72:44:40:c4:8d:51:d3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
        Validity
            Not Before: Jun  9 19:54:16 2025 GMT
            Not After : Jun  8 19:59:16 2026 GMT
        Subject: CN=3082010A0282010100E998BF07471E11E0249B0927703F196CFB508B79D82BD320F4149AD0E489DFA6A49D63251DF1323F0429EAEFD063F00AF4A3BBC027131EC8ACCC3C95AB14E73DFEEBF5A32EA5243F0B928B7CB6FB9FE352606DC56ADBBCCEC43BA4F82232E2C07D69FD3A219032C3BD2920A1457A17557F3653334D7191A68CF99E03B9DAF54E470B2077B26182CB514C29F1C2A102EA8F4B05E7803BC1F2382C2D643DDAA650F5D54924DCC3955B2704A7240062B158F56FA64AEB40A721784B2899ABCB417D33F07A4A0F23A7FF25A153A3EAB3BC35E948CE32C6DD8B83D7896D3B2A6F810495A2806EE53DC4C1A28AFD32FB1C56F8F859216DCBD117610DC076DDFB4D16890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:98:bf:07:47:1e:11:e0:24:9b:09:27:70:3f:
                    19:6c:fb:50:8b:79:d8:2b:d3:20:f4:14:9a:d0:e4:
                    89:df:a6:a4:9d:63:25:1d:f1:32:3f:04:29:ea:ef:
                    d0:63:f0:0a:f4:a3:bb:c0:27:13:1e:c8:ac:cc:3c:
                    95:ab:14:e7:3d:fe:eb:f5:a3:2e:a5:24:3f:0b:92:
                    8b:7c:b6:fb:9f:e3:52:60:6d:c5:6a:db:bc:ce:c4:
                    3b:a4:f8:22:32:e2:c0:7d:69:fd:3a:21:90:32:c3:
                    bd:29:20:a1:45:7a:17:55:7f:36:53:33:4d:71:91:
                    a6:8c:f9:9e:03:b9:da:f5:4e:47:0b:20:77:b2:61:
                    82:cb:51:4c:29:f1:c2:a1:02:ea:8f:4b:05:e7:80:
                    3b:c1:f2:38:2c:2d:64:3d:da:a6:50:f5:d5:49:24:
                    dc:c3:95:5b:27:04:a7:24:00:62:b1:58:f5:6f:a6:
                    4a:eb:40:a7:21:78:4b:28:99:ab:cb:41:7d:33:f0:
                    7a:4a:0f:23:a7:ff:25:a1:53:a3:ea:b3:bc:35:e9:
                    48:ce:32:c6:dd:8b:83:d7:89:6d:3b:2a:6f:81:04:
                    95:a2:80:6e:e5:3d:c4:c1:a2:8a:fd:32:fb:1c:56:
                    f8:f8:59:21:6d:cb:d1:17:61:0d:c0:76:dd:fb:4d:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:97:D9:93:DD:86:EC:C9:E7:C8:E4:40:A1:D5:30:57:8C:C1:7B:70
            X509v3 Authority Key Identifier:
                keyid:C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:1b:df:e9:6b:6f:75:71:cb:4d:2e:7c:7e:98:82:12:fb:
         6e:30:68:1f:da:e9:f8:88:d0:da:01:bc:47:68:46:81:4e:df:
         c9:c6:d0:5d:b5:28:cc:17:7e:2b:35:ec:b1:13:d9:f2:df:a9:
         b1:33:e8:3a:22:9d:e2:e8:7f:79:32:99:28:d4:dd:7d:de:01:
         f2:fa:68:f3:fc:d1:b9:ec:26:61:cd:0b:4e:25:9a:d2:9a:e8:
         d0:38:33:66:b8:fb:d7:80:39:a5:a1:5c:b3:c4:ad:11:63:38:
         c9:9f:2c:50:06:37:32:1a:c0:09:7e:24:9e:b6:5f:f9:94:5c:
         a3:f3:e3:de:1e:e4:ee:88:12:4b:94:a0:97:2a:d1:23:c5:e3:
         89:46:be:18:e4:99:77:5e:65:3c:02:e4:b5:2b:25:23:cd:d6:
         e2:ef:87:5c:7f:78:a7:e5:ed:7a:33:cc:9e:f4:73:c3:49:72:
         9f:2d:4b:d8:b6:60:6b:46:e3:ed:c8:3d:9a:70:4e:4d:9e:77:
         f8:19:35:80:3b:83:12:e1:19:09:1a:23:d1:f8:b6:23:2c:66:
         4c:d0:88:35:9a:dc:89:ac:02:4d:e5:fe:3e:8e:35:f6:20:53:
         29:59:a6:ab:92:ff:ba:65:30:ee:83:34:9b:65:89:b0:2c:19:
         24:b5:4e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:46:22 2025 by rpki-client