Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
File:                     3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier:          MSyuY/Q9CljZU/PvVFUFbwW3lDkA2O4OOu/MO9mYCIU=
Subject key identifier:   18:85:97:B5:4C:60:22:A9:1E:D8:42:4D:AB:D9:91:13:E0:79:4D:56
Certificate issuer:       /CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
Certificate serial:       74EA104C8AA4AECFE8DBFC18EEFC0C50B39CD77D
Authority key identifier: DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
Signing time:             Mon 05 May 2025 21:42:39 +0000
ROA not before:           Mon 05 May 2025 21:37:39 +0000
ROA not after:            Mon 04 May 2026 21:42:39 +0000
asID:                     271607
IP address blocks:        190.9.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ea:10:4c:8a:a4:ae:cf:e8:db:fc:18:ee:fc:0c:50:b3:9c:d7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
        Validity
            Not Before: May  5 21:37:39 2025 GMT
            Not After : May  4 21:42:39 2026 GMT
        Subject: CN=188597B54C6022A91ED8424DABD99113E0794D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:66:f2:6f:4b:38:59:c3:cd:a0:36:e2:54:
                    75:e3:f4:d4:5f:b4:d9:09:47:d8:3e:9a:cd:a4:f4:
                    f3:25:be:a4:48:76:3c:da:df:bf:15:60:20:d4:0c:
                    00:8a:00:e2:44:92:b8:f0:5c:44:2a:de:ad:b8:c7:
                    cc:86:52:98:b0:39:bb:e3:76:4c:03:51:b2:e5:a7:
                    54:76:24:05:3e:f2:c6:9f:7e:3b:b8:f7:9e:44:7b:
                    12:9f:a5:2f:62:40:99:19:8b:2b:d6:4a:39:39:07:
                    b5:78:00:da:45:36:de:35:9b:4c:4f:36:ba:2c:95:
                    92:ce:4e:83:52:a1:2f:9a:75:e6:54:24:bb:be:bf:
                    22:3a:db:d8:b2:e2:96:a0:23:28:27:18:1c:91:34:
                    2a:bb:00:e8:85:06:e2:be:0d:68:4f:02:70:b3:a7:
                    af:30:49:d9:ce:a6:1c:9f:80:e6:15:18:b0:35:4f:
                    d2:4c:f4:6a:e1:be:86:2d:82:ba:e1:d8:e5:3e:19:
                    78:98:96:4d:79:17:00:b0:7b:39:ab:08:e9:f1:4d:
                    68:8e:80:4c:ba:59:eb:53:af:16:e8:7e:7b:c7:6d:
                    98:1b:a3:c4:c5:a4:97:11:64:d0:d8:cf:b6:cc:b7:
                    05:bc:d7:ee:25:47:1e:7b:13:ec:67:f8:b6:19:f6:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:85:97:B5:4C:60:22:A9:1E:D8:42:4D:AB:D9:91:13:E0:79:4D:56
            X509v3 Authority Key Identifier:
                keyid:DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:91:8a:21:a6:b3:01:fa:38:91:48:c2:14:a2:76:8b:32:40:
         38:93:ea:75:03:fa:a3:73:e5:5e:83:61:04:1b:21:b8:77:80:
         a7:40:a9:75:a3:89:27:f7:26:86:45:bc:27:48:fd:45:8b:14:
         78:bc:7e:dd:2a:d3:ea:9f:4a:a9:d2:2e:6e:60:57:93:73:36:
         5f:69:13:ad:ef:95:d9:ae:3d:e2:cc:6c:6b:f9:ad:5c:ae:fc:
         ef:25:74:3f:45:4f:4c:60:53:1c:fa:7c:cb:2d:6a:3f:24:df:
         46:81:bb:29:4b:d2:77:39:fb:89:6d:53:c2:b0:63:e9:20:08:
         be:04:a5:5d:6a:aa:a7:f9:33:c0:37:1d:1c:ff:f5:0a:02:39:
         5e:ce:5d:5b:7c:1d:31:89:7e:ef:bb:03:4d:de:a3:73:16:9f:
         8f:50:19:3b:c5:7d:e7:a4:4b:76:c8:9e:d7:11:00:d5:a4:b3:
         ea:fc:c2:e5:b6:97:dd:79:21:b0:d7:0f:6b:97:15:2f:cc:07:
         fe:cf:5e:e2:dc:77:96:e4:3b:c7:bb:a8:de:5b:c4:78:a6:77:
         df:c4:e1:10:fd:1d:a7:25:73:bf:17:c7:18:8d:d2:c4:a5:61:
         b5:8c:c7:5e:5f:cb:da:40:d0:7c:b5:80:55:38:16:8e:a4:cb:
         58:1d:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:04:36 2025 by rpki-client