Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231382e302f32332d3233203d3e20323733333039.roa
File:                     3139312e33372e3231382e302f32332d3233203d3e20323733333039.roa (raw, json)
Hash identifier:          kl3yR2el0gSdKV5o4sZqX9l9mMhvvSfxZvfKJ5eJyRU=
Subject key identifier:   2E:63:40:20:B4:7B:BC:C7:6B:B2:9A:7A:11:B4:97:E8:5E:7E:98:A2
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       26A0C2F2DD12E2784BBFB7D80553612AE74B1ADC
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231382e302f32332d3233203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:36 +0000
ROA not before:           Wed 09 Apr 2025 13:48:36 +0000
ROA not after:            Wed 08 Apr 2026 13:53:36 +0000
asID:                     273309
IP address blocks:        191.37.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 05:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a0:c2:f2:dd:12:e2:78:4b:bf:b7:d8:05:53:61:2a:e7:4b:1a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:36 2025 GMT
            Not After : Apr  8 13:53:36 2026 GMT
        Subject: CN=2E634020B47BBCC76BB29A7A11B497E85E7E98A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1a:df:56:48:4f:77:1c:4d:58:b5:e0:3a:c4:
                    21:95:1d:63:69:a8:77:00:72:f5:de:17:14:d3:79:
                    0d:7a:bc:a0:0f:9b:64:fb:73:b0:01:04:0a:33:dc:
                    66:a2:c4:4b:d1:87:1e:c4:2d:f8:16:b6:be:ea:4a:
                    f7:3e:42:b9:71:a8:aa:0e:e7:eb:ee:6f:91:a4:34:
                    90:df:59:a6:a1:b7:4b:20:7c:b8:6f:c2:df:37:31:
                    cb:b9:64:f8:a5:8a:4b:c5:16:e9:5d:aa:d0:42:8e:
                    00:79:ca:1d:9a:0b:86:26:76:27:25:2a:11:9c:87:
                    38:32:77:d5:64:62:86:af:6a:9d:32:19:a0:3a:1f:
                    c5:8c:91:a3:0c:4f:cf:87:b6:e1:f9:43:a9:73:85:
                    de:5a:6b:8b:a9:b7:c2:f7:4f:63:93:c3:0f:35:53:
                    2b:a0:d0:8b:1d:7c:17:cc:74:c0:cf:03:10:95:11:
                    c9:d3:de:12:1c:33:cb:30:8d:2e:10:a1:2e:ab:f6:
                    e4:51:b0:14:e3:46:eb:84:69:8a:27:6e:c9:ec:f0:
                    20:83:57:3f:94:26:2e:b9:79:69:21:e5:a7:0f:a9:
                    cd:a8:31:00:68:17:b5:7c:3e:0e:46:8c:1a:3c:94:
                    4a:da:55:03:6a:6d:53:08:d5:15:26:e1:51:5a:e3:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:63:40:20:B4:7B:BC:C7:6B:B2:9A:7A:11:B4:97:E8:5E:7E:98:A2
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231382e302f32332d3233203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:2c:e6:f3:bf:d8:5e:70:e8:df:53:8d:57:47:3b:64:7e:
         10:d3:19:91:fc:b9:77:07:66:42:f5:b6:8b:65:ec:c9:3f:45:
         0b:a1:a1:a5:35:8c:29:61:9e:4f:f8:fd:80:3b:66:78:1b:06:
         40:b1:d3:07:48:3f:e7:23:89:26:db:21:6c:b4:98:32:25:09:
         0b:93:e1:5f:d6:d6:ec:6f:b8:64:df:cb:82:91:f6:52:67:5a:
         92:db:f0:6e:47:bf:0f:2f:99:d9:17:52:c9:d7:32:d8:f9:af:
         f3:4a:a6:15:01:ac:32:0f:f0:b3:3a:9d:e2:42:76:73:11:71:
         60:ef:83:fa:99:03:7f:14:bd:7e:66:1d:2b:c5:0f:98:c3:ec:
         4b:c6:d6:90:43:de:22:b4:3d:6f:80:38:f7:b6:a8:7d:ce:b6:
         ed:41:58:9d:81:80:3d:ba:65:14:4f:04:a7:40:11:74:83:66:
         8a:7e:1f:58:3c:4e:a8:4b:40:03:f3:4a:1f:65:ea:ab:4e:3f:
         32:82:eb:2e:4b:01:a2:42:0f:d8:c3:13:8c:8a:33:9e:c3:d4:
         ee:f4:df:03:d6:e4:01:5d:eb:da:c8:56:02:67:ea:6c:c3:8b:
         d4:2f:91:1f:fb:31:b7:ff:97:9b:72:df:3c:de:f3:50:49:68:
         41:5e:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:15:01 2025 by rpki-client