Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3139312e3234332e3139322e302f32322d3233203d3e20323636343339.roa
File:                     3139312e3234332e3139322e302f32322d3233203d3e20323636343339.roa (raw, json)
Hash identifier:          qq4saWo48VwhGh/Y3bi7EMQLT9yicJbrggfZG68akko=
Subject key identifier:   9E:DC:53:C4:C9:6E:F4:AB:DB:BD:DB:55:35:16:84:71:EB:37:08:1E
Certificate issuer:       /CN=9A99692F686066162D6A71BA5B0DD60AF8E9C6AD
Certificate serial:       4B735A28F44446BF3017FA3833B559FF49261B5D
Authority key identifier: 9A:99:69:2F:68:60:66:16:2D:6A:71:BA:5B:0D:D6:0A:F8:E9:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3139312e3234332e3139322e302f32322d3233203d3e20323636343339.roa
Signing time:             Tue 10 Jun 2025 02:29:54 +0000
ROA not before:           Tue 10 Jun 2025 02:24:54 +0000
ROA not after:            Tue 09 Jun 2026 02:29:54 +0000
asID:                     266439
IP address blocks:        191.243.192.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.crl
                          rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:73:5a:28:f4:44:46:bf:30:17:fa:38:33:b5:59:ff:49:26:1b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A99692F686066162D6A71BA5B0DD60AF8E9C6AD
        Validity
            Not Before: Jun 10 02:24:54 2025 GMT
            Not After : Jun  9 02:29:54 2026 GMT
        Subject: CN=9EDC53C4C96EF4ABDBBDDB5535168471EB37081E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:db:2b:59:9a:23:5e:3b:8a:79:59:da:75:
                    d5:5f:6e:68:11:14:5f:d8:0f:f2:16:a0:04:d0:3e:
                    f7:37:d0:ed:e8:d4:03:7e:51:34:b0:ef:51:fc:53:
                    79:d8:50:ea:15:d1:e6:48:26:62:1c:2e:44:4a:13:
                    6b:43:6f:ff:43:ea:c0:2a:5d:20:5f:bf:3f:38:69:
                    ba:53:7d:5e:9a:1e:43:d2:af:1b:b9:a6:4d:a3:a5:
                    81:d3:e7:93:e0:37:0f:6b:ef:ec:55:53:9c:94:12:
                    53:7d:44:ca:31:64:89:e7:19:b5:1e:dd:97:01:06:
                    c3:45:b7:bd:5f:12:80:48:c7:dd:49:a9:f0:2c:c6:
                    dc:50:b7:e7:c0:ce:15:03:3d:07:19:e6:1a:50:de:
                    69:08:64:5e:4b:b9:62:b8:aa:28:53:5b:83:45:26:
                    01:cd:29:89:1b:06:1c:a3:5c:02:97:c1:03:b4:72:
                    c0:81:f4:f0:3f:dc:26:06:41:e9:86:99:8d:5b:15:
                    23:ff:7b:06:b0:54:af:80:a4:a0:98:fd:c8:5d:93:
                    03:3a:4f:16:b8:38:5c:33:c9:b3:58:5b:46:35:b1:
                    35:c1:0c:98:3a:ae:66:4e:b1:20:11:63:20:45:14:
                    08:5d:09:0b:8f:ab:0d:49:f3:65:78:cb:00:15:0c:
                    30:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:53:C4:C9:6E:F4:AB:DB:BD:DB:55:35:16:84:71:EB:37:08:1E
            X509v3 Authority Key Identifier:
                keyid:9A:99:69:2F:68:60:66:16:2D:6A:71:BA:5B:0D:D6:0A:F8:E9:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3139312e3234332e3139322e302f32322d3233203d3e20323636343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:a6:15:1a:62:01:87:25:7d:93:26:ac:b7:f2:ae:96:4a:
         f8:bb:68:2c:99:19:5e:25:d5:bb:10:d7:75:d8:28:f3:4d:22:
         bf:b6:99:8b:c0:b0:86:f0:af:57:fb:f4:9b:3e:12:6c:fc:16:
         88:7a:df:ee:e4:09:f0:1c:cb:d0:10:20:62:05:8b:ce:92:15:
         bb:34:e8:99:a1:08:f7:35:0e:e3:fb:e8:08:45:45:0e:9c:c5:
         63:3b:dd:df:4c:04:c1:ac:1d:0f:da:ec:1b:39:2b:97:43:0b:
         70:87:87:81:48:ed:25:4c:16:7a:e2:b8:8c:3e:98:74:43:be:
         13:76:c6:4a:74:80:c0:11:d9:a8:8c:02:2f:16:2a:cd:eb:8f:
         ca:a5:45:48:0f:bc:e4:5b:87:09:30:81:42:76:21:bb:b4:08:
         e1:15:c3:c5:9b:34:93:47:70:ec:bf:81:61:2b:48:2b:f8:1f:
         f0:b0:d3:de:aa:87:f2:15:6a:5d:3d:73:04:a6:0c:52:2d:83:
         03:e4:24:e2:8c:13:03:7c:cc:a2:ec:ea:1a:2b:8f:2c:18:f0:
         7a:c9:e2:da:eb:97:a6:e4:2b:3b:c8:c1:28:1c:f0:bf:8d:cf:
         f2:3a:2a:6d:da:52:18:b1:a8:f2:cc:8a:f2:8e:b3:09:62:cf:
         44:ec:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:04:35 2025 by rpki-client