Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e203533313831.roa
File:                     3139312e3234312e36342e302f32302d3332203d3e203533313831.roa (raw, json)
Hash identifier:          GnaFMFJMItjMD48L6aTqrOzJUKteHuSGOsSUDz/lric=
Subject key identifier:   71:9B:EE:29:0D:BC:95:04:0C:2A:23:76:77:64:C1:44:F3:22:BD:D0
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       05A7CB096031EAFD0A0E81FED16044DBFD53F0FD
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e203533313831.roa
Signing time:             Sat 05 Apr 2025 20:41:41 +0000
ROA not before:           Sat 05 Apr 2025 20:36:41 +0000
ROA not after:            Sat 04 Apr 2026 20:41:41 +0000
asID:                     53181
IP address blocks:        191.241.64.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a7:cb:09:60:31:ea:fd:0a:0e:81:fe:d1:60:44:db:fd:53:f0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Apr  5 20:36:41 2025 GMT
            Not After : Apr  4 20:41:41 2026 GMT
        Subject: CN=719BEE290DBC95040C2A23767764C144F322BDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:c4:de:d4:62:31:24:a8:88:85:6a:52:9b:
                    57:7e:d3:bd:f8:10:c2:e7:41:a0:18:1e:00:d1:58:
                    cb:86:7c:e5:0c:06:7d:2f:29:fe:be:fc:a8:86:3f:
                    53:c5:48:ac:86:19:57:12:d4:cb:5e:8e:14:1e:12:
                    c5:db:17:e3:bb:fd:0a:47:c4:27:82:56:fa:46:07:
                    7d:79:df:82:af:05:2b:ad:e8:9b:5a:6e:f6:a2:a5:
                    33:2a:f5:42:28:42:94:fb:0e:75:87:3d:5e:c8:05:
                    52:7a:29:20:81:5c:24:19:57:31:85:4b:5b:81:a0:
                    99:26:cc:f0:82:22:63:53:af:f3:49:3a:2b:b3:01:
                    64:c8:39:ba:88:0e:b3:be:ed:d6:54:2e:fa:4e:74:
                    81:7f:f3:25:99:ba:ea:f3:87:d6:32:de:89:aa:3e:
                    19:3e:9e:c7:b6:58:8d:53:c9:58:51:1d:99:69:bb:
                    e9:81:8d:c8:6c:35:01:aa:23:12:25:73:89:af:88:
                    b1:a8:4b:32:02:1f:11:41:81:ea:ab:a2:c4:e8:4d:
                    c2:aa:4c:ae:35:63:15:74:ad:ae:1b:71:08:53:3a:
                    b9:b0:7b:78:2c:d6:81:73:50:50:cc:bd:dc:61:92:
                    d5:55:42:63:ad:e8:25:ae:4c:93:ad:c5:e7:d7:dc:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9B:EE:29:0D:BC:95:04:0C:2A:23:76:77:64:C1:44:F3:22:BD:D0
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:bf:25:23:05:64:29:7a:54:c6:54:31:0b:30:f5:32:1f:d4:
         3c:c5:f6:24:e3:56:86:2b:bf:34:fe:50:d6:9a:95:52:95:79:
         17:ce:a1:c6:e8:a7:71:53:18:ce:32:4d:6b:10:6d:0a:02:9e:
         a6:5d:8b:30:62:52:eb:1e:64:bf:66:5a:3d:0e:fa:b4:92:ff:
         03:b5:02:3d:f2:8b:2e:96:44:c4:0a:77:c5:6b:28:cf:cc:5a:
         68:46:06:27:56:48:1d:b6:d3:c8:6e:7e:3c:8f:73:76:54:d9:
         24:cb:f7:26:43:75:bd:31:9f:1b:ba:9e:47:4d:61:5a:c1:a1:
         32:0c:e2:4e:30:24:b4:04:99:71:a5:0f:1d:78:b6:ce:dd:c0:
         b4:20:9d:a8:77:ec:08:b1:f7:e5:2d:dc:cc:a7:d6:64:a1:71:
         a4:83:fa:db:99:79:d5:1f:bb:b5:66:a1:8f:b1:b1:1c:6a:41:
         82:25:7d:1a:26:28:c2:5a:81:64:28:cc:7f:81:a6:1c:25:bc:
         b5:fe:a1:81:45:d5:8c:df:f5:59:86:b2:a3:50:df:a0:21:de:
         40:cc:ab:0c:6d:7d:da:3a:ac:d5:9a:e9:4d:a2:bf:aa:e5:51:
         7d:44:28:8a:8c:66:0e:3f:70:4c:c8:24:d5:db:fe:e1:d4:bc:
         e6:ca:a9:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBafLCWAx6v0KDoH+0WBE2/1T8P0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCRTc1MDNGNDhDQ0MxNDI3MUVFNzUwMjZFQjA4MTg0
Nzg5MjczRjAeFw0yNTA0MDUyMDM2NDFaFw0yNjA0MDQyMDQxNDFaMDMxMTAvBgNV
BAMTKDcxOUJFRTI5MERCQzk1MDQwQzJBMjM3Njc3NjRDMTQ0RjMyMkJERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4J8Te1GIxJKiIhWpSm1d+0734
EMLnQaAYHgDRWMuGfOUMBn0vKf6+/KiGP1PFSKyGGVcS1MtejhQeEsXbF+O7/QpH
xCeCVvpGB31534KvBSut6JtabvaipTMq9UIoQpT7DnWHPV7IBVJ6KSCBXCQZVzGF
S1uBoJkmzPCCImNTr/NJOiuzAWTIObqIDrO+7dZULvpOdIF/8yWZuurzh9Yy3omq
Phk+nse2WI1TyVhRHZlpu+mBjchsNQGqIxIlc4mviLGoSzICHxFBgeqrosToTcKq
TK41YxV0ra4bcQhTOrmwe3gs1oFzUFDMvdxhktVVQmOt6CWuTJOtxefX3GIXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcZvuKQ28lQQMKiN2d2TBRPMivdAwHwYDVR0j
BBgwFoAUcL51A/SMzBQnHudQJusIGEeJJz8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBO
ZDgvMC83MEJFNzUwM0Y0OENDQzE0MjcxRUU3NTAyNkVCMDgxODQ3ODkyNzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQkU3NTAzRjQ4Q0NDMTQy
NzFFRTc1MDI2RUIwODE4NDc4OTI3M0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVeTRhd0NtNkFIQVJNZGJZRTFaN2hzU2l5UTZxelFOTkNpS3M2eERwTmQ4LzAv
MzEzOTMxMmUzMjM0MzEyZTM2MzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMz
MzEzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEv/FAMA0GCSqGSIb3DQEBCwUAA4IBAQCuvyUjBWQp
elTGVDELMPUyH9Q8xfYk41aGK780/lDWmpVSlXkXzqHG6KdxUxjOMk1rEG0KAp6m
XYswYlLrHmS/Zlo9Dvq0kv8DtQI98osulkTECnfFayjPzFpoRgYnVkgdttPIbn48
j3N2VNkky/cmQ3W9MZ8bup5HTWFawaEyDOJOMCS0BJlxpQ8deLbO3cC0IJ2od+wI
sfflLdzMp9ZkoXGkg/rbmXnVH7u1ZqGPsbEcakGCJX0aJijCWoFkKMx/gaYcJby1
/qGBRdWM3/VZhrKjUN+gId5AzKsMbX3aOqzVmulNor+q5VF9RCiKjGYOP3BMyCTV
2/7h1Lzmyqku
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:49 2025 by rpki-client on console.sobornost.net