Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/3139322e3134312e3233392e302f32342d3234203d3e20323637343833.roa
File:                     3139322e3134312e3233392e302f32342d3234203d3e20323637343833.roa (raw, json)
Hash identifier:          EAKZHuvEsQkF/DLyePRGA30cvmaM23it5Qsk+jYG/ic=
Subject key identifier:   C2:35:2B:C5:01:F8:60:10:74:60:AC:3B:B2:F0:3A:00:16:7D:D6:75
Certificate issuer:       /CN=99FE4DC5DC920594D9EDE67156A7135EA88CAADD
Certificate serial:       6D3F89AE14C833E34A1E22E1B759FB3C17C05A12
Authority key identifier: 99:FE:4D:C5:DC:92:05:94:D9:ED:E6:71:56:A7:13:5E:A8:8C:AA:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/3139322e3134312e3233392e302f32342d3234203d3e20323637343833.roa
Signing time:             Fri 15 Aug 2025 12:35:19 +0000
ROA not before:           Fri 15 Aug 2025 12:30:19 +0000
ROA not after:            Fri 14 Aug 2026 12:35:19 +0000
asID:                     267483
IP address blocks:        192.141.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl
                          rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3f:89:ae:14:c8:33:e3:4a:1e:22:e1:b7:59:fb:3c:17:c0:5a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99FE4DC5DC920594D9EDE67156A7135EA88CAADD
        Validity
            Not Before: Aug 15 12:30:19 2025 GMT
            Not After : Aug 14 12:35:19 2026 GMT
        Subject: CN=C2352BC501F860107460AC3BB2F03A00167DD675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:21:77:f6:e0:0b:07:e9:e7:bd:c9:98:2c:
                    6a:40:6c:cd:36:0c:54:34:d1:20:9c:cd:f8:0f:60:
                    3a:06:c7:93:26:5b:0b:9e:a0:51:b6:52:94:61:a8:
                    fc:5f:a6:aa:21:14:cf:1e:5e:71:93:c0:99:75:92:
                    07:2c:91:7f:3a:bd:ad:4b:d5:e7:e7:b6:92:72:0f:
                    d1:91:40:6b:4e:cb:c8:3e:5a:6b:09:e5:97:57:bc:
                    58:fb:be:e6:22:f6:12:77:c1:c4:af:2e:9c:d3:00:
                    fa:fd:30:1e:da:1b:d6:9a:a1:ba:40:bc:f3:70:74:
                    2f:db:4b:ca:0a:1d:2c:20:bd:e8:e6:ce:10:c5:38:
                    c8:d7:88:e4:20:d9:69:cb:f0:e9:80:9c:cb:9c:70:
                    0e:1e:51:d9:5e:25:ad:42:85:71:1c:31:ed:c6:7b:
                    4e:04:a1:bd:3d:46:68:42:b6:64:bb:da:f3:da:c4:
                    3d:2f:fa:6d:e6:37:71:1f:5e:29:c7:90:96:71:ee:
                    c3:6d:87:b9:91:5b:f8:df:5d:c8:6d:d7:69:c5:34:
                    13:1f:cf:87:75:f4:91:2c:19:98:51:c8:96:b5:82:
                    ee:ad:1f:4f:35:af:c7:d2:bc:b1:63:41:ea:c9:a3:
                    57:b2:a7:b8:b5:9d:9f:da:35:05:7d:7e:0c:cb:88:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:35:2B:C5:01:F8:60:10:74:60:AC:3B:B2:F0:3A:00:16:7D:D6:75
            X509v3 Authority Key Identifier:
                keyid:99:FE:4D:C5:DC:92:05:94:D9:ED:E6:71:56:A7:13:5E:A8:8C:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/3139322e3134312e3233392e302f32342d3234203d3e20323637343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a5:a5:81:cb:e9:af:86:ed:f9:08:f6:77:09:2b:fa:99:0f:
         28:0e:ae:62:00:af:83:aa:10:3b:6e:10:ac:9b:3a:62:d6:53:
         7b:4b:83:65:a9:92:44:5c:a4:91:3e:d5:30:fe:4e:b4:f7:90:
         34:02:61:11:ea:44:43:91:12:73:8f:46:8a:a9:85:5f:81:45:
         7d:4d:b3:a7:65:67:e2:b0:8e:c0:4c:51:50:ce:40:57:7c:9a:
         f4:b0:8d:ec:ec:67:3d:4f:24:f5:e7:ef:0c:55:bb:6c:a2:e1:
         e3:c6:c8:f4:56:67:c7:30:64:cb:85:b9:6c:fa:a0:96:4d:7c:
         4c:2b:77:5b:16:e6:d6:19:f8:96:13:2c:6f:03:8a:18:fc:41:
         84:8d:89:43:ea:2e:5c:2b:65:f2:9c:3b:65:9c:01:e3:92:7c:
         c3:0a:9f:04:2e:f0:80:57:ba:a3:a3:b3:be:48:ff:66:4a:0b:
         d1:ad:8a:fa:df:c3:17:c6:e1:13:60:a6:18:f2:86:67:6e:13:
         fb:b1:68:c5:33:4a:b2:fa:0f:4f:35:59:f9:7d:d1:b3:68:4b:
         18:20:38:d1:0a:2f:c5:ec:74:35:f8:d2:6d:1a:e6:e8:a8:c3:
         b5:3e:61:26:ba:26:b7:69:f8:85:61:b9:59:4e:66:54:34:d9:
         f8:58:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:34 2025 by rpki-client