Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa
File:                     3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=
Subject key identifier:   33:4A:75:54:40:B0:60:E2:61:89:B9:3C:73:66:B6:13:C1:9F:85:4C
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       78430782CA9B55818F56B21E7B5306C18FC0D543
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa
Signing time:             Wed 07 May 2025 19:31:21 +0000
ROA not before:           Wed 07 May 2025 19:26:21 +0000
ROA not after:            Wed 06 May 2026 19:31:21 +0000
asID:                     263528
IP address blocks:        191.253.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:43:07:82:ca:9b:55:81:8f:56:b2:1e:7b:53:06:c1:8f:c0:d5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: May  7 19:26:21 2025 GMT
            Not After : May  6 19:31:21 2026 GMT
        Subject: CN=334A755440B060E26189B93C7366B613C19F854C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:26:ca:47:4c:c4:6c:b5:24:26:df:7b:a6:
                    e2:da:b1:0c:9e:eb:8c:7f:87:69:e5:4f:42:15:d9:
                    bc:30:22:ce:c4:d5:37:7a:b4:87:63:97:cc:c3:e9:
                    b6:8f:84:04:2f:63:a0:94:ca:81:66:27:1f:9f:74:
                    56:d8:89:68:5b:9f:f2:3d:dd:4b:f1:76:bd:d7:c6:
                    9f:71:28:45:ad:8d:e5:f8:4d:f6:94:d5:73:40:01:
                    2d:e9:f1:1a:fc:5a:45:3a:68:79:0f:85:e5:06:35:
                    1f:74:e4:6d:61:bc:31:79:b3:76:97:7e:42:08:8f:
                    78:fe:a2:3f:47:dc:32:61:81:04:83:2b:1f:77:5e:
                    86:78:47:2e:db:04:6f:c0:78:5f:97:10:e4:15:86:
                    b7:25:af:e1:33:80:7e:7d:75:5a:0f:bf:12:d9:25:
                    d7:8e:b5:38:17:43:cf:5e:62:2f:fa:80:1e:b1:7e:
                    a0:06:a4:68:27:65:1c:b8:93:2c:9e:de:b2:b5:81:
                    a3:c1:1b:32:ab:e4:92:59:e3:87:7f:3c:1a:ca:a0:
                    c5:ae:3d:96:61:62:4c:78:78:03:74:3d:40:00:bf:
                    1d:3a:4a:22:36:05:34:fb:0c:25:ab:46:8d:a6:76:
                    60:86:d1:c5:61:f4:f5:e6:8c:de:92:53:d3:d5:f0:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4A:75:54:40:B0:60:E2:61:89:B9:3C:73:66:B6:13:C1:9F:85:4C
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:ea:aa:0e:ce:70:11:c8:7a:97:cf:9c:04:c7:4f:e1:85:
         3f:fe:da:c8:60:d6:d8:3a:e8:14:28:4f:c6:63:b7:c6:97:06:
         7a:c9:5d:98:cd:23:a2:8f:79:b9:2b:ef:1a:27:3a:81:89:69:
         e6:35:f5:0b:0c:fa:a3:d8:22:c0:7f:19:37:72:fa:d9:39:58:
         76:ee:19:9d:ee:cc:b1:59:fb:9c:f9:c3:f9:a9:60:7f:57:34:
         64:58:cb:d1:06:ee:b4:24:f9:ad:0f:db:67:57:ba:5c:e8:f3:
         f3:ba:98:88:2e:c4:37:ff:5c:c9:6b:10:41:63:05:84:01:35:
         a5:fa:ed:d9:9d:74:57:25:2a:e5:5e:9a:c0:d4:b5:a5:e0:d2:
         95:39:f6:1c:f2:a2:d7:9a:be:62:01:a7:d9:6a:91:8d:2b:70:
         0b:33:87:29:fe:ad:dc:ed:26:94:2f:d5:90:14:33:d9:1a:1b:
         2b:a9:a5:e3:20:9c:17:a6:39:32:8b:c4:aa:fe:39:73:51:9a:
         bc:f1:a6:e2:24:10:57:0a:a3:1a:41:5a:b0:80:ef:25:c4:1d:
         e4:54:94:83:d1:46:f4:97:8a:31:99:ef:cd:f6:54:46:22:42:
         c8:5a:e0:d2:77:69:e7:f1:e6:ba:c9:9d:0b:f1:70:7f:b9:08:
         29:0d:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:10:30 2025 by rpki-client