Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa
File:                     3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa (raw, json)
Hash identifier:          pqxWf5YPyt5wNk5lfuWCunFBwHRCLgkJr3csTdZrGLI=
Subject key identifier:   AD:74:2A:60:FE:DF:D3:6F:16:A6:30:9A:A0:9A:9E:74:EF:70:1D:CE
Certificate issuer:       /CN=5F709C276A79155FEB7CA111A467097402E890E7
Certificate serial:       4D6CDD4EC12AAB3E76CF70ACFDB8072F880B01BD
Authority key identifier: 5F:70:9C:27:6A:79:15:5F:EB:7C:A1:11:A4:67:09:74:02:E8:90:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F709C276A79155FEB7CA111A467097402E890E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa
Signing time:             Wed 30 Apr 2025 19:33:25 +0000
ROA not before:           Wed 30 Apr 2025 19:28:25 +0000
ROA not after:            Wed 29 Apr 2026 19:33:25 +0000
asID:                     270430
IP address blocks:        190.111.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5F709C276A79155FEB7CA111A467097402E890E7.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5F709C276A79155FEB7CA111A467097402E890E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F709C276A79155FEB7CA111A467097402E890E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 16:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6c:dd:4e:c1:2a:ab:3e:76:cf:70:ac:fd:b8:07:2f:88:0b:01:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F709C276A79155FEB7CA111A467097402E890E7
        Validity
            Not Before: Apr 30 19:28:25 2025 GMT
            Not After : Apr 29 19:33:25 2026 GMT
        Subject: CN=AD742A60FEDFD36F16A6309AA09A9E74EF701DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:ab:35:7b:da:09:e5:52:93:2b:fb:67:99:
                    4f:cf:78:41:98:20:dc:7f:70:eb:77:2f:50:47:1e:
                    25:ac:e7:e5:0f:8e:21:ef:08:5c:c9:ae:32:52:d0:
                    44:dd:bf:ec:63:2c:64:bb:93:6a:d3:1a:a1:83:92:
                    98:bb:80:55:6b:eb:75:de:ea:89:4b:19:30:bb:dd:
                    93:6a:82:53:95:61:9e:29:b2:e3:f0:f5:07:5e:71:
                    fd:36:e4:ef:b0:89:26:d8:65:81:7f:96:c2:c8:7c:
                    1d:8e:19:7a:3e:20:64:8a:c8:07:7f:2b:71:d5:14:
                    ed:da:bf:b6:90:26:72:90:57:47:2f:74:ba:fe:fd:
                    07:50:98:e8:9b:fc:6f:78:7d:53:a3:6c:55:f6:41:
                    24:52:9c:dd:60:24:43:74:59:a2:03:11:26:c0:bb:
                    5c:41:a9:cd:1f:d2:04:44:08:60:75:8d:bb:fb:a2:
                    7c:26:16:0c:df:e2:f8:e2:2f:ea:1c:55:d9:02:94:
                    37:79:4e:ef:19:43:76:84:61:a2:1e:94:93:06:e9:
                    3a:f3:26:bd:43:8e:1c:8a:dd:df:2e:99:a8:44:b8:
                    dc:81:01:13:d7:89:25:4f:08:37:cf:06:7f:f3:1d:
                    95:49:ee:30:55:8e:88:f5:4d:f3:42:b9:85:3d:35:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:2A:60:FE:DF:D3:6F:16:A6:30:9A:A0:9A:9E:74:EF:70:1D:CE
            X509v3 Authority Key Identifier:
                keyid:5F:70:9C:27:6A:79:15:5F:EB:7C:A1:11:A4:67:09:74:02:E8:90:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5F709C276A79155FEB7CA111A467097402E890E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F709C276A79155FEB7CA111A467097402E890E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:11:7d:87:8c:b9:8e:cf:e6:b8:b9:e8:62:ef:86:f4:45:5d:
         66:32:bf:ec:02:c6:30:89:2c:db:27:13:8e:3c:19:97:ca:6f:
         5b:36:89:07:d1:28:23:f4:35:5a:86:ae:c3:81:42:ed:b1:32:
         d2:51:e5:32:6e:47:7c:d6:fc:d0:0b:c2:a1:77:22:bd:a2:e7:
         02:87:b1:41:06:67:d7:dc:00:7d:9d:38:c2:dd:57:e3:69:d5:
         e5:41:4d:94:98:2a:13:5e:bd:2e:ec:20:37:e8:6e:9f:eb:bc:
         5f:42:e1:91:18:6a:0e:3f:09:43:32:90:d3:32:25:73:9c:37:
         dc:a5:fd:2f:5a:76:47:73:a2:f4:6b:f0:99:a1:66:d4:68:d3:
         de:84:80:a2:88:4a:31:b8:49:70:23:55:17:16:72:b1:67:a7:
         4c:09:a7:95:f5:5c:f3:8f:cb:8c:5a:b4:21:ac:6f:7f:e2:b5:
         e6:4e:d1:cd:a8:46:74:0a:1e:69:0e:e5:a8:bc:35:69:cc:2b:
         b0:1e:1d:b0:07:a5:b9:c1:11:70:59:e2:02:32:90:45:f5:27:
         aa:c8:31:1a:4c:06:15:99:b4:04:a8:69:3b:7b:67:43:41:41:
         d3:0c:cc:22:8e:df:e0:75:0e:6d:68:63:d6:68:db:b3:f1:c5:
         03:4c:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:01:50 2025 by rpki-client