Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32322d3234203d3e20323730343535.roa
File:                     3139302e3131352e38302e302f32322d3234203d3e20323730343535.roa (raw, json)
Hash identifier:          sxLPpB22UfB14OamzqKocBAD2WPku1yTLrOQpKGlgJk=
Subject key identifier:   96:7D:E1:C9:E4:F0:BD:E4:DD:EB:0E:27:61:C2:BF:16:85:DD:8E:39
Certificate issuer:       /CN=486F1988E524109FEE5954E3D13AD3BEA739160B
Certificate serial:       25A51C0D9DA4C64A3395D3E6EB76B9E8747F9B4F
Authority key identifier: 48:6F:19:88:E5:24:10:9F:EE:59:54:E3:D1:3A:D3:BE:A7:39:16:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32322d3234203d3e20323730343535.roa
Signing time:             Wed 07 May 2025 19:31:20 +0000
ROA not before:           Wed 07 May 2025 19:26:20 +0000
ROA not after:            Wed 06 May 2026 19:31:20 +0000
asID:                     270455
IP address blocks:        190.115.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.crl
                          rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a5:1c:0d:9d:a4:c6:4a:33:95:d3:e6:eb:76:b9:e8:74:7f:9b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486F1988E524109FEE5954E3D13AD3BEA739160B
        Validity
            Not Before: May  7 19:26:20 2025 GMT
            Not After : May  6 19:31:20 2026 GMT
        Subject: CN=967DE1C9E4F0BDE4DDEB0E2761C2BF1685DD8E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:60:5b:76:4e:09:7e:28:dc:9f:6f:1e:44:
                    62:ba:e1:80:69:e2:c2:23:52:cc:bd:3b:e8:b7:17:
                    03:3c:60:1a:a3:5f:69:3c:e7:86:b5:f2:2c:37:fe:
                    c3:a9:d5:99:d0:35:e8:e7:ff:a4:03:f1:35:af:a7:
                    c3:9b:aa:c2:d6:1d:72:68:4d:fc:41:95:59:05:0e:
                    00:0e:55:cd:40:67:ef:c0:8d:aa:48:10:30:21:26:
                    9b:54:69:ae:1b:75:75:b2:fb:9c:de:c1:35:35:0e:
                    a6:61:45:52:6d:d5:71:bd:31:b5:28:60:1f:56:c9:
                    fb:ea:82:a1:c0:a4:5f:39:af:0d:5d:3c:c3:22:3e:
                    38:29:e9:51:71:6c:39:3d:94:2e:87:25:72:9e:c3:
                    c9:3b:e6:a4:32:1c:92:76:58:71:8f:6b:18:3c:d7:
                    58:65:ad:be:b8:fa:8a:ad:12:6f:2f:50:7e:8f:0b:
                    46:84:ac:4f:6a:8e:f4:57:d0:af:f0:b2:af:46:a9:
                    35:d9:fb:9a:c5:3e:55:bf:e9:62:17:5a:78:5d:04:
                    3f:36:9b:f2:45:5f:c2:ef:72:30:c2:b4:03:f4:43:
                    20:c3:ad:91:5f:2d:c2:7a:47:4b:b7:84:8c:21:1b:
                    47:d6:1b:26:f0:5a:d1:8b:1a:56:ff:d1:eb:9f:13:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7D:E1:C9:E4:F0:BD:E4:DD:EB:0E:27:61:C2:BF:16:85:DD:8E:39
            X509v3 Authority Key Identifier:
                keyid:48:6F:19:88:E5:24:10:9F:EE:59:54:E3:D1:3A:D3:BE:A7:39:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32322d3234203d3e20323730343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:78:42:87:0b:c1:79:46:da:fd:05:fa:75:8e:2a:15:44:
         62:87:03:85:94:e3:ec:90:f4:2b:28:d2:94:6d:05:ca:84:db:
         97:4f:70:7c:4b:30:c7:36:30:f4:f6:a1:7d:23:9b:57:3b:49:
         db:01:e3:6c:42:28:52:bf:14:83:10:7a:ad:41:ad:7c:95:11:
         25:46:46:58:4e:c9:3a:1a:d4:4f:56:8f:eb:15:6e:30:20:5f:
         bc:33:da:81:02:86:c0:12:6e:37:73:ba:b7:70:9a:05:ca:e7:
         48:b4:6c:ae:a9:a7:ec:41:b6:53:70:a5:f1:33:04:84:d3:2b:
         1f:22:a7:ce:a9:26:f6:d1:17:d4:89:7f:f2:f5:50:33:cc:fe:
         1d:e1:49:43:6d:fd:4e:d3:54:55:cd:c8:ea:84:7f:a2:99:07:
         84:76:1d:78:c7:59:79:6f:10:ca:d1:b3:ab:be:76:1b:9e:75:
         6c:2a:ff:7f:95:93:42:fa:58:88:06:92:13:0d:80:c5:3f:7f:
         23:6f:9e:47:6a:e9:f6:60:08:e2:15:34:13:dc:62:3a:b3:a1:
         4d:ae:77:0a:8c:ad:d4:b8:92:87:92:09:c5:22:f3:cb:30:ea:
         bf:36:7b:8d:24:5e:3d:35:6e:db:da:2a:20:d0:8c:83:74:93:
         8d:ba:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:55:08 2025 by rpki-client