Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa
File:                     3230312e39342e3139322e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          rUCFvX36spYduNm0WX8rIqSvasBdP4jPRQepv2zDND4=
Subject key identifier:   05:44:12:21:ED:7B:93:26:56:E4:97:1C:7F:1C:3B:C7:A5:19:D5:2D
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       5EA26E44F56AE76094C246E255B9A7B1AC79FB2D
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 07 Mar 2025 02:18:07 +0000
ROA not before:           Fri 07 Mar 2025 02:13:07 +0000
ROA not after:            Fri 06 Mar 2026 02:18:07 +0000
asID:                     22689
IP address blocks:        201.94.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 10:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a2:6e:44:f5:6a:e7:60:94:c2:46:e2:55:b9:a7:b1:ac:79:fb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Mar  7 02:13:07 2025 GMT
            Not After : Mar  6 02:18:07 2026 GMT
        Subject: CN=05441221ED7B932656E4971C7F1C3BC7A519D52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:44:5a:0c:5b:f5:35:38:94:2a:48:6a:1e:
                    04:ee:56:02:26:3a:ca:c0:ad:53:3c:14:9b:ce:9a:
                    fc:e2:e7:1a:97:05:03:2a:fa:92:28:b7:be:4c:f4:
                    55:51:6c:7d:a3:7d:a7:89:2f:8d:ac:62:06:25:f7:
                    6a:06:3c:88:9c:58:2c:af:09:32:af:a5:96:fa:23:
                    04:21:4c:49:07:a4:e0:be:1f:51:9d:75:d3:4c:1e:
                    2a:7c:5d:48:0f:4c:a6:9f:ed:30:84:11:aa:2f:f1:
                    bb:cb:4f:07:07:cf:ee:83:85:bd:9b:dd:49:b0:62:
                    d1:39:32:72:a7:81:be:22:cc:cd:ad:6e:5b:a3:86:
                    74:ea:d2:8c:58:3b:04:55:66:4c:6e:c5:5b:4e:f0:
                    2c:63:64:64:a5:86:e1:5c:fa:8e:1c:75:9f:62:20:
                    27:2d:a5:54:22:55:30:4c:a1:de:36:1a:96:87:e3:
                    8e:ac:a1:bc:93:31:e1:40:d8:cf:4e:c8:a0:3b:00:
                    b6:a3:6d:18:92:05:65:b3:2a:6b:f3:82:c9:f0:77:
                    3a:e4:ea:16:92:e0:db:13:b1:b9:7c:cf:24:57:74:
                    72:9a:ec:11:35:9c:7b:06:f9:c7:0f:a9:02:a0:f2:
                    ec:f5:70:bc:3c:79:38:7a:38:d2:a5:53:e1:40:2a:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:12:21:ED:7B:93:26:56:E4:97:1C:7F:1C:3B:C7:A5:19:D5:2D
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:dc:31:8b:38:b2:19:56:0d:7e:bc:05:84:e3:2a:d9:4b:
         b9:91:28:1f:1e:69:a4:1f:ac:05:09:eb:8c:52:2d:1f:81:4d:
         63:e6:94:a5:43:63:c6:eb:9d:8a:ea:11:6c:1e:a4:24:01:63:
         d9:6d:d1:46:a8:03:8d:0e:29:94:bb:13:ac:f2:ee:ea:0b:09:
         e8:c3:ee:77:7c:19:6d:45:c2:ab:25:59:4c:ce:8a:a2:22:1b:
         0b:fc:54:c2:75:41:a6:f2:0a:af:8b:a2:35:35:c9:c3:cf:79:
         d8:36:e2:eb:2c:34:cc:b5:de:e2:86:70:17:0d:98:40:86:f9:
         fb:47:69:96:da:7c:0b:70:bb:60:32:0d:7f:e1:13:7c:be:f8:
         05:cd:b8:ff:01:ff:e7:04:87:48:7c:f8:e7:8d:bd:0d:29:1f:
         6c:0c:a0:c8:70:c6:54:20:2b:ca:c2:72:f5:5c:4a:70:bb:4f:
         35:6a:17:22:df:5c:88:70:23:84:cc:11:43:ef:ac:2e:cd:15:
         85:87:c3:95:6b:b9:d4:1c:f1:e4:a4:6c:63:2c:a3:5d:0d:e6:
         d2:74:8b:6c:f9:90:f7:ff:b5:b4:01:2f:48:bc:b7:a2:df:b3:
         e7:3b:6f:70:62:c1:a5:24:da:91:90:de:ef:65:d3:8d:56:e4:
         56:ce:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:33:18 2025 by rpki-client