Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3139312e372e3138342e302f32322d3332203d3e20323633333238.roa
File:                     3139312e372e3138342e302f32322d3332203d3e20323633333238.roa (raw, json)
Hash identifier:          pGVVnpwA9IoAsZgnwmaJqp55ATa2ZJZ30/bAb0g1/sw=
Subject key identifier:   5F:E2:9B:89:41:FC:CD:AC:99:F1:5F:A9:77:B1:79:A5:52:A7:A1:88
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       60DF668F03FEDDD54643258CBBC6A0327869B3D7
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3139312e372e3138342e302f32322d3332203d3e20323633333238.roa
Signing time:             Tue 19 Aug 2025 13:23:44 +0000
ROA not before:           Tue 19 Aug 2025 13:18:44 +0000
ROA not after:            Tue 18 Aug 2026 13:23:44 +0000
asID:                     263328
IP address blocks:        191.7.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:df:66:8f:03:fe:dd:d5:46:43:25:8c:bb:c6:a0:32:78:69:b3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Aug 19 13:18:44 2025 GMT
            Not After : Aug 18 13:23:44 2026 GMT
        Subject: CN=5FE29B8941FCCDAC99F15FA977B179A552A7A188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:40:e3:6e:ab:97:c6:a7:65:09:23:3a:19:
                    4a:98:e2:38:44:5a:76:86:e8:f9:1f:f6:25:65:1d:
                    27:b6:cf:7b:67:d2:09:2b:0c:58:4d:3c:2a:7c:6c:
                    46:87:c2:da:2d:be:05:c8:0a:27:c2:36:cb:11:88:
                    e0:a6:24:a8:14:e8:20:58:ff:8b:46:ec:2c:e7:25:
                    6f:ca:cc:7f:9f:c5:1c:d1:76:5e:33:41:c1:4b:0f:
                    57:e5:81:a2:8c:ec:8c:83:5d:cd:21:fd:1a:31:dd:
                    aa:64:4a:ff:d0:55:86:8b:3f:9b:3d:51:b0:a1:57:
                    c3:aa:21:ce:96:34:8c:b5:f5:9e:da:77:9f:ad:4b:
                    c4:b1:62:27:1d:b3:b6:15:6b:11:3d:79:80:c7:cd:
                    42:03:54:8f:82:f7:ce:f2:e3:99:6c:84:bc:09:48:
                    7c:14:a7:d3:45:26:46:21:c6:0b:55:fa:c4:55:ae:
                    35:db:00:7a:b6:62:63:56:88:35:fe:01:5d:6f:65:
                    53:a5:02:24:b8:25:36:1c:14:a8:2c:1f:14:37:92:
                    22:cb:12:d7:d8:16:7e:26:f2:14:71:3b:c0:f0:34:
                    bf:b8:61:5a:40:41:25:10:f3:b6:c3:4f:93:02:ba:
                    ad:bf:9c:4b:99:f6:6c:2f:30:d3:97:9b:00:ac:dd:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E2:9B:89:41:FC:CD:AC:99:F1:5F:A9:77:B1:79:A5:52:A7:A1:88
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3139312e372e3138342e302f32322d3332203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:55:4a:43:09:f1:c0:41:32:1a:34:3b:16:b8:3b:c3:ac:cf:
         d6:13:58:aa:69:f1:48:6d:c9:98:cf:80:9a:68:1e:83:3e:00:
         49:cc:51:a9:b4:5b:e5:94:a3:59:30:41:10:ea:6c:da:1f:ce:
         0e:80:fb:76:a6:89:ed:f4:03:22:6e:b7:30:49:99:4d:37:f5:
         89:2d:5e:bb:b3:cf:e1:ae:9b:5b:a6:7c:cc:e0:6d:92:c6:3c:
         9c:20:be:d9:cb:21:e6:cb:9b:04:47:7b:48:e8:34:b4:a3:ef:
         46:68:78:8b:9f:63:e3:74:3e:b1:fb:74:16:5a:37:9b:cf:29:
         c2:61:28:e9:0b:63:b6:42:69:b6:fe:a1:72:4e:0e:7d:49:a5:
         1c:b1:fd:8e:ef:ec:5b:57:55:d1:2e:ab:6a:be:20:19:8a:15:
         d6:b6:5f:2f:29:8c:57:09:c9:6e:20:a0:cd:85:27:f0:91:21:
         b0:08:54:bf:a6:85:5a:05:d0:38:26:e9:43:61:74:bd:ee:cd:
         54:57:61:9a:43:b1:85:06:cd:5f:62:99:ce:b1:9c:08:d5:aa:
         c2:44:a5:69:7f:83:cc:aa:b7:50:72:9e:ca:77:df:ae:74:b8:
         a0:24:9d:be:62:4c:be:c8:b2:23:60:cf:9f:08:3c:74:0b:8e:
         18:ac:c1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:58:21 2025 by rpki-client