Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32302d3332203d3e20323633343231.roa
File:                     3137392e3139312e3234302e302f32302d3332203d3e20323633343231.roa (raw, json)
Hash identifier:          YUNNTfCTr21vtfMiBknNJbGup0W6TN+U+UPeVd7Hm+g=
Subject key identifier:   B9:82:02:91:0F:B2:E8:A3:12:D5:02:96:C7:77:B7:48:DF:69:3D:8B
Certificate issuer:       /CN=31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37
Certificate serial:       617C7EECCA26C4B5809A9C4B4CA866775C54F111
Authority key identifier: 31:59:9B:69:A8:4A:AB:92:38:C2:CE:F9:5E:C8:B6:E6:CF:9E:5C:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32302d3332203d3e20323633343231.roa
Signing time:             Tue 06 May 2025 16:07:02 +0000
ROA not before:           Tue 06 May 2025 16:02:02 +0000
ROA not after:            Tue 05 May 2026 16:07:02 +0000
asID:                     263421
IP address blocks:        179.191.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.crl
                          rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7c:7e:ec:ca:26:c4:b5:80:9a:9c:4b:4c:a8:66:77:5c:54:f1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37
        Validity
            Not Before: May  6 16:02:02 2025 GMT
            Not After : May  5 16:07:02 2026 GMT
        Subject: CN=B98202910FB2E8A312D50296C777B748DF693D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:dd:f6:7d:8e:40:b1:9d:06:68:72:91:fa:
                    4d:7e:99:68:38:e0:69:39:bc:06:4a:bc:37:5a:07:
                    29:3d:aa:42:60:ef:6e:81:42:16:75:e0:8a:13:44:
                    31:e4:34:53:d2:61:64:70:db:2a:0b:03:98:5a:6e:
                    9a:32:f0:50:b4:f8:87:de:e7:2e:d3:a8:5b:ac:c0:
                    d3:d5:82:b6:54:9f:17:a7:2e:c4:28:c6:37:34:01:
                    4d:ca:f3:03:20:a5:82:74:2d:5b:d0:d1:bb:c6:dd:
                    8b:ab:5e:98:e0:05:9d:f2:b4:16:8d:fd:69:28:17:
                    f0:e8:ac:43:b6:9b:c1:04:4b:6f:e6:7b:e7:51:a7:
                    91:4e:92:1a:a4:38:fa:74:67:03:21:ec:51:a9:e7:
                    45:0f:a3:8f:f8:b4:9e:be:18:79:7d:b4:32:b2:1a:
                    54:35:df:55:01:60:3b:49:0a:98:66:4f:7a:16:0f:
                    a7:6a:21:df:40:80:0c:10:70:73:7a:c8:9f:0e:fe:
                    4a:d6:a7:b0:f1:db:a0:47:03:7e:a3:6a:d7:fb:71:
                    c3:2f:a0:24:75:1d:92:98:f8:b7:c9:94:b1:0c:d7:
                    a7:ce:3f:26:2f:a3:d5:67:87:e7:87:23:3c:ee:1b:
                    bd:2a:2e:e0:ea:01:9a:db:e8:36:8b:6f:b8:0d:9b:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:02:91:0F:B2:E8:A3:12:D5:02:96:C7:77:B7:48:DF:69:3D:8B
            X509v3 Authority Key Identifier:
                keyid:31:59:9B:69:A8:4A:AB:92:38:C2:CE:F9:5E:C8:B6:E6:CF:9E:5C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31599B69A84AAB9238C2CEF95EC8B6E6CF9E5C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32302d3332203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:41:9b:14:f5:45:45:e9:8d:71:4e:b6:10:50:49:18:65:
         0a:33:1b:85:be:a8:c3:df:f1:ef:4a:f8:72:97:75:5f:74:bb:
         a2:8b:8f:98:89:c5:64:5b:05:a9:c9:69:b1:cc:21:d6:b3:7b:
         41:b2:ce:ec:eb:fd:9a:61:b7:ac:c2:84:a0:d2:bd:9e:2c:41:
         90:99:80:97:6c:95:6d:34:60:91:af:23:5c:20:53:dd:e8:ea:
         86:4c:6d:cd:3f:c4:b6:34:06:5a:34:29:d8:fd:47:09:98:26:
         bc:ce:28:5d:25:7b:1d:85:61:dd:98:c6:fa:e4:ae:f4:c6:66:
         62:2f:c1:46:fe:04:63:41:73:45:1f:39:82:7c:2e:7f:2a:19:
         a6:98:a2:a9:77:af:e2:07:a4:37:bd:c4:8e:02:bd:4b:ae:3d:
         3d:2e:8c:3a:1a:e3:ab:54:5a:2a:ca:85:a6:c9:a3:a0:d2:6a:
         a3:4f:cd:ca:69:2c:e1:2c:29:13:30:c3:24:b4:fd:66:eb:3a:
         8c:ea:2e:7b:cd:95:86:bf:0c:c3:75:7e:f0:38:bb:5e:b8:27:
         06:16:ab:78:c0:32:de:76:da:bf:98:93:1b:9a:91:6b:e7:f9:
         3a:0a:b5:81:40:b4:cc:9d:e3:c2:a7:5d:90:8c:d7:53:57:08:
         9f:6e:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:39:17 2025 by rpki-client