Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235342e302f32332d3233203d3e20323730343536.roa
File:                     3139302e3132342e3235342e302f32332d3233203d3e20323730343536.roa (raw, json)
Hash identifier:          +r/LRoLExO1WCQdGqN9vEaGKCJbWi95IMqEXBq+w830=
Subject key identifier:   49:FF:11:D2:BF:0B:FB:A2:2D:6D:6D:1F:81:BF:39:0E:8F:77:B7:4B
Certificate issuer:       /CN=085D77D4302255076FC0EF856AC7C40EF2F57975
Certificate serial:       452022C32D9F8F7AB5B4E9429021288579E94497
Authority key identifier: 08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235342e302f32332d3233203d3e20323730343536.roa
Signing time:             Wed 30 Apr 2025 23:06:23 +0000
ROA not before:           Wed 30 Apr 2025 23:01:23 +0000
ROA not after:            Wed 29 Apr 2026 23:06:23 +0000
asID:                     270456
IP address blocks:        190.124.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl
                          rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 12:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:20:22:c3:2d:9f:8f:7a:b5:b4:e9:42:90:21:28:85:79:e9:44:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Validity
            Not Before: Apr 30 23:01:23 2025 GMT
            Not After : Apr 29 23:06:23 2026 GMT
        Subject: CN=49FF11D2BF0BFBA22D6D6D1F81BF390E8F77B74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:ab:10:68:b7:8d:38:88:ef:e7:c9:e2:41:
                    35:bd:f7:79:aa:59:58:fa:5f:37:eb:5b:81:26:3f:
                    eb:6c:4e:f2:88:a6:1b:c5:87:56:59:91:a3:73:7f:
                    9d:5e:fb:39:d9:0d:9a:54:ca:4b:97:04:55:99:fc:
                    80:fe:49:af:13:bc:d9:ab:56:b7:52:cf:eb:25:33:
                    b5:c3:ec:c5:9c:95:ab:da:80:2c:97:cc:ce:82:f6:
                    db:09:4c:a7:3f:44:53:17:07:97:48:5b:93:39:35:
                    13:51:c6:cd:01:69:d5:bf:2d:4e:b1:01:14:45:7a:
                    e4:be:7c:12:34:3e:ff:03:ce:07:fa:1b:d9:a4:cc:
                    4b:76:9a:f0:e9:42:51:0a:86:a5:9f:b9:c1:3f:39:
                    53:6d:c4:0d:23:a5:60:fb:60:41:9d:0f:08:b7:b6:
                    84:55:70:ad:ac:09:fb:6d:2e:8c:06:20:88:f6:f5:
                    0c:8b:32:71:07:8c:d2:6f:2d:cb:e9:1e:7a:72:7b:
                    04:b5:11:ff:92:cf:5d:4a:c1:31:b6:05:fe:37:87:
                    6d:eb:26:90:50:0b:0a:68:c3:53:58:8e:28:61:84:
                    99:52:35:20:f2:60:49:22:34:06:6a:3b:87:af:e5:
                    e1:10:eb:a6:ad:c0:63:3a:49:04:bc:f9:77:ab:1b:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FF:11:D2:BF:0B:FB:A2:2D:6D:6D:1F:81:BF:39:0E:8F:77:B7:4B
            X509v3 Authority Key Identifier:
                keyid:08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235342e302f32332d3233203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:1c:ee:9d:72:63:d6:20:81:c2:88:6c:1d:87:61:e5:60:
         2b:70:81:b4:f2:83:e3:74:b7:57:48:5a:1b:d6:ee:4f:fb:9e:
         37:0b:36:71:18:92:63:0a:17:a4:0e:c9:91:18:d3:d9:1e:5b:
         88:0a:9a:31:62:7f:c2:53:71:7c:4f:c4:ca:bb:82:d5:a5:15:
         4f:ff:ac:f7:b8:98:62:4b:fd:55:39:cd:72:03:7a:ea:04:1c:
         ab:f7:5b:eb:39:0a:a5:31:23:88:06:68:08:8e:a4:72:a8:27:
         87:ff:da:10:8a:dd:ef:34:a8:15:f9:b7:c8:6e:96:16:a4:5b:
         20:a0:1a:f2:2d:49:79:15:a4:3e:71:4c:d0:c0:8e:27:4c:bb:
         09:ee:16:c3:42:b5:a3:2f:d8:ff:fb:dd:78:c8:21:79:f4:43:
         08:2d:58:cc:ba:9f:bc:c7:b2:19:8a:94:e1:7f:8c:d4:f6:1d:
         53:bc:85:14:a9:75:94:99:e9:01:a8:7a:ef:d6:1d:1b:e0:b6:
         ab:8c:8f:29:da:90:a2:f2:c3:73:80:39:26:b5:6f:a5:05:9f:
         a6:dc:8a:22:2a:0a:85:f0:d4:29:0e:5a:41:f5:1f:0f:55:ff:
         cf:8f:10:83:68:eb:56:47:03:cd:40:6a:16:59:e7:d5:35:b7:
         7f:0f:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:45:10 2025 by rpki-client