Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa
File:                     3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa (raw, json)
Hash identifier:          m0wMI288683TskflxG5PJmmHFMiabD9JeHbdtR7k5YU=
Subject key identifier:   D4:7B:FC:59:3A:1D:C0:F6:DF:11:45:E7:11:27:61:5D:26:46:3A:67
Certificate issuer:       /CN=BE13416D307D9E2EC8AA6F508A530189747AC781
Certificate serial:       3A16FC3C3B0A2ED3C8B0CE5DDE364DF65FE449F9
Authority key identifier: BE:13:41:6D:30:7D:9E:2E:C8:AA:6F:50:8A:53:01:89:74:7A:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE13416D307D9E2EC8AA6F508A530189747AC781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa
Signing time:             Sat 03 May 2025 01:21:05 +0000
ROA not before:           Sat 03 May 2025 01:16:05 +0000
ROA not after:            Sat 02 May 2026 01:21:05 +0000
asID:                     52818
IP address blocks:        191.240.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/BE13416D307D9E2EC8AA6F508A530189747AC781.crl
                          rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/BE13416D307D9E2EC8AA6F508A530189747AC781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE13416D307D9E2EC8AA6F508A530189747AC781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 03:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:16:fc:3c:3b:0a:2e:d3:c8:b0:ce:5d:de:36:4d:f6:5f:e4:49:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE13416D307D9E2EC8AA6F508A530189747AC781
        Validity
            Not Before: May  3 01:16:05 2025 GMT
            Not After : May  2 01:21:05 2026 GMT
        Subject: CN=D47BFC593A1DC0F6DF1145E71127615D26463A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:64:00:7a:d1:ea:fd:72:b6:0c:42:00:bb:
                    55:8f:07:34:21:3b:f8:50:79:2b:71:24:d3:be:d2:
                    23:95:4e:86:ed:88:24:e0:22:08:04:de:c2:b4:9b:
                    03:26:28:ff:08:3f:c2:fb:a8:5d:63:27:90:da:5a:
                    ba:5a:e1:e3:4e:dc:02:66:e6:8d:6c:1a:cd:53:a2:
                    bd:d2:80:6b:b7:0c:30:72:e8:39:a2:2c:20:b6:01:
                    68:e3:0f:2e:30:c6:b6:58:67:02:c7:ec:ef:e4:f2:
                    13:62:75:86:12:60:ed:60:00:4d:b7:d4:da:31:aa:
                    73:95:b5:63:4e:a4:66:92:33:33:ca:4d:4c:4c:0f:
                    a0:18:ec:a6:db:5c:c3:94:cc:52:54:05:1a:e6:68:
                    20:e5:c3:1b:31:a9:a9:7d:ed:29:2e:db:22:91:02:
                    e5:09:f7:63:07:37:81:85:d5:82:8a:17:32:25:cc:
                    06:25:9a:b0:a2:d2:68:ff:dc:59:53:82:f0:c9:58:
                    01:7c:02:e4:a8:fc:6a:da:c0:da:7a:26:d8:34:5a:
                    33:fb:1b:dc:66:89:5c:44:11:b3:c3:c9:0a:e0:c6:
                    89:58:f0:9c:71:13:fa:99:45:5a:9f:ad:a9:bc:2f:
                    74:e8:c8:36:f9:4e:14:b3:64:92:ef:a1:2b:d1:7d:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7B:FC:59:3A:1D:C0:F6:DF:11:45:E7:11:27:61:5D:26:46:3A:67
            X509v3 Authority Key Identifier:
                keyid:BE:13:41:6D:30:7D:9E:2E:C8:AA:6F:50:8A:53:01:89:74:7A:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/BE13416D307D9E2EC8AA6F508A530189747AC781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE13416D307D9E2EC8AA6F508A530189747AC781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:1e:55:57:86:26:5e:68:a6:de:9d:04:62:b8:a2:a6:4c:
         fd:22:c2:91:5b:a9:8a:36:e7:29:cc:c7:94:f2:05:cb:6f:1d:
         2e:0a:7c:fb:7a:c5:db:6f:53:4f:87:8c:ca:20:5c:cd:c6:91:
         85:d6:6f:ce:92:d3:94:cf:7b:aa:58:46:ac:f9:16:23:16:7d:
         67:64:8d:d6:31:d9:2d:81:a1:23:12:50:ab:dd:d7:fe:ea:f6:
         5d:b8:13:cd:bb:e7:b1:5c:03:49:96:86:b1:3a:af:7d:a8:cc:
         09:ad:55:84:eb:af:0d:31:90:52:40:f2:99:de:bf:59:d0:01:
         e7:a5:77:94:98:54:ae:ca:0f:f0:b0:b4:80:a8:08:51:39:00:
         0c:a1:21:cd:16:d8:56:1d:b3:cf:18:0d:41:9e:b4:10:ce:3e:
         1c:68:ff:b6:71:35:2d:1e:76:2c:91:64:0d:12:7a:b5:03:dd:
         89:78:14:78:76:6b:7f:e0:ba:af:c7:f8:82:a8:11:04:f6:d2:
         07:1e:b8:e6:94:c7:d8:c9:86:53:b3:f0:5f:ad:15:67:43:fc:
         9d:e2:0e:0b:f3:04:ed:5d:72:cc:e0:66:71:9b:0d:ea:0b:18:
         d3:de:7d:62:27:f4:32:5c:cc:b5:ff:a6:39:be:2d:49:fd:4a:
         99:65:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:18:01 2025 by rpki-client