Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3234203d3e20323733333039.roa
File:                     3139312e33372e3231362e302f32312d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          d9DhtLAN8pcaE19kO7u8XcwczUclT5WWHczeoBqIYU0=
Subject key identifier:   5E:64:27:FB:11:58:8D:54:FE:EE:2A:BA:3C:B0:35:09:56:DA:24:EF
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       426CE7FAF08C27E4ABC8E83E5ED91FD23403BAB8
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3234203d3e20323733333039.roa
Signing time:             Mon 16 Jun 2025 22:44:27 +0000
ROA not before:           Mon 16 Jun 2025 22:39:27 +0000
ROA not after:            Mon 15 Jun 2026 22:44:27 +0000
asID:                     273309
IP address blocks:        191.37.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 09:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6c:e7:fa:f0:8c:27:e4:ab:c8:e8:3e:5e:d9:1f:d2:34:03:ba:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Jun 16 22:39:27 2025 GMT
            Not After : Jun 15 22:44:27 2026 GMT
        Subject: CN=5E6427FB11588D54FEEE2ABA3CB0350956DA24EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:b0:bf:31:4e:0d:7a:5d:45:17:c7:27:2d:
                    40:6f:e1:71:c7:6b:d7:28:8a:e0:01:c6:3e:4f:db:
                    79:c1:c8:c7:0a:04:80:89:40:ca:72:53:ef:6a:80:
                    ee:8d:c1:07:12:e9:8e:bb:31:50:ba:57:db:9e:da:
                    b6:a8:80:8c:e6:d3:b7:a9:57:da:82:50:a7:82:fc:
                    5a:82:35:1d:25:97:2f:a4:4a:7f:dd:90:41:17:a9:
                    1e:74:72:0e:4b:78:27:b7:0f:dc:89:8a:68:02:1c:
                    09:25:64:21:7a:92:d6:05:0c:5b:87:42:6a:8e:97:
                    1d:f2:01:39:c0:b1:8f:08:cf:da:8e:dd:06:fd:e4:
                    e1:a1:8d:2a:6f:fc:d7:aa:ac:8d:8e:ba:d2:f7:d0:
                    1b:e5:6c:6f:84:bc:0e:f2:d1:36:81:58:b0:15:4f:
                    ab:d7:02:19:e1:e7:17:6c:35:25:4a:bc:08:54:e0:
                    42:23:a0:72:24:ba:a6:d6:8d:9d:db:94:89:24:b5:
                    9d:03:d6:b0:06:39:c8:27:29:b4:30:e8:ec:aa:d1:
                    c2:ee:46:6f:71:5e:fc:19:a4:37:94:5f:1f:af:4a:
                    f6:5c:f6:97:7a:dd:a0:03:9e:f0:05:d0:82:04:41:
                    5e:91:4e:1a:92:bf:00:bc:a9:03:e2:d1:e9:c4:13:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:64:27:FB:11:58:8D:54:FE:EE:2A:BA:3C:B0:35:09:56:DA:24:EF
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:d2:58:df:44:d3:0b:f2:b5:39:1f:12:fc:42:07:e2:92:b5:
         af:21:c0:0c:65:b9:aa:36:a2:60:df:86:df:69:c1:30:80:84:
         2f:19:72:ad:38:85:a0:fa:df:af:eb:04:b6:5a:b2:28:0d:d8:
         b3:93:fe:8f:ea:7f:50:c9:76:a5:a0:7c:bf:1f:34:2c:a4:e7:
         42:5e:d3:df:50:bc:2e:ac:4f:09:06:bc:50:41:72:2a:67:a0:
         8b:c6:4f:7e:14:ac:20:b5:f5:9c:b1:7c:ac:cf:ac:bb:62:22:
         50:6c:82:1b:8b:bf:d2:82:5b:91:78:64:f9:2e:9d:de:22:dd:
         e7:02:bd:01:54:ef:0e:c4:fa:89:68:f3:bc:41:68:92:17:25:
         14:30:31:20:16:e2:68:98:ab:0a:63:6c:a1:72:1e:2d:88:5b:
         c0:9a:b1:86:54:19:13:8e:a8:4e:13:59:d3:9e:fa:c6:c6:8b:
         23:1b:68:d1:3b:d5:af:56:ff:8e:6f:2a:4e:e6:73:8d:a9:8e:
         75:17:d2:6e:e4:8a:9b:35:5e:85:d9:a6:fe:f5:23:3e:e1:7c:
         47:47:15:ce:39:e9:bb:77:fd:fd:a4:93:e9:58:6d:d9:87:77:
         65:a7:6c:d7:6a:92:aa:bd:f7:6f:88:84:12:21:47:c6:80:4f:
         05:ad:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:16:07 2025 by rpki-client