Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
File:                     3139312e352e3232302e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          U9aEVaVfbCN4TWb4JyTorgv2xoRrXRGxv1uQWYpU+sM=
Subject key identifier:   31:3D:6C:AB:30:D3:27:1D:DE:B7:90:AF:A0:46:E6:5E:BA:BC:18:DC
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       352311C20133EA01699A869410737C32F55CC2BD
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 18 Aug 2025 20:05:47 +0000
ROA not before:           Mon 18 Aug 2025 20:00:47 +0000
ROA not after:            Mon 17 Aug 2026 20:05:47 +0000
asID:                     53218
IP address blocks:        191.5.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:23:11:c2:01:33:ea:01:69:9a:86:94:10:73:7c:32:f5:5c:c2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Aug 18 20:00:47 2025 GMT
            Not After : Aug 17 20:05:47 2026 GMT
        Subject: CN=313D6CAB30D3271DDEB790AFA046E65EBABC18DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:da:f9:2e:4b:2e:bc:6c:0e:19:c4:57:dc:
                    ab:43:67:71:ad:7a:ce:12:a6:ba:82:9f:be:6a:55:
                    c7:d0:9d:bf:e6:61:86:ae:5f:81:81:84:ca:54:fd:
                    85:61:14:27:97:b1:0c:e5:d7:cf:bc:f8:53:a2:b1:
                    8b:c8:8f:19:99:24:59:66:c1:bc:9a:cd:31:51:5e:
                    45:7a:4e:37:85:30:ea:39:a8:54:54:5c:aa:9c:fe:
                    82:d7:51:11:69:1c:c3:7a:ee:b3:8b:ed:ee:bb:8d:
                    84:ad:f0:92:ec:5a:b1:13:73:cc:0d:28:4d:5b:f5:
                    e6:ab:52:48:8f:6d:6a:7a:65:17:cb:40:f3:fd:2b:
                    5f:bb:66:68:17:ca:07:61:4c:f9:05:39:b7:c6:ac:
                    5a:68:1f:c6:3a:c9:22:f7:7c:4d:13:c7:ba:e2:fc:
                    33:7d:0e:1b:fc:88:ef:a2:cd:a1:84:dc:fa:c7:c6:
                    6a:a9:82:4c:fc:79:a8:b7:1b:dc:27:47:20:ae:b9:
                    46:67:65:d7:81:be:b3:ff:46:5f:ec:03:18:03:75:
                    c6:42:27:24:3d:32:41:f2:1d:2d:0d:e7:dc:bb:11:
                    da:73:1d:11:ca:1f:85:0f:7e:59:73:3e:2a:9f:a5:
                    90:ff:1d:c0:03:48:d7:69:e3:54:c7:6e:61:85:a3:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3D:6C:AB:30:D3:27:1D:DE:B7:90:AF:A0:46:E6:5E:BA:BC:18:DC
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:b5:07:77:61:1a:19:21:e9:9e:d4:90:33:05:07:d3:16:b1:
         b0:29:dd:14:9e:e9:b8:6d:8a:d2:10:e6:1e:6c:e4:c3:14:38:
         cc:76:c9:82:d7:5f:2f:8c:9e:73:c2:bc:48:ce:98:8f:57:6a:
         23:78:b0:ef:fd:34:c3:ed:7d:c6:81:b1:36:ba:de:54:ab:9d:
         14:a4:99:d7:34:05:7c:f5:a8:43:a2:5b:a0:95:df:e7:5e:14:
         a0:20:22:fa:8e:7c:63:d0:2b:3f:a5:52:bc:8b:dc:cd:f1:14:
         70:25:7e:56:f0:87:4d:8c:7b:a5:d9:05:94:46:dc:3c:4b:d4:
         6d:4e:1c:b2:6f:9a:18:3b:a6:dc:b1:b0:0c:9a:6d:ee:22:c6:
         57:79:ca:9d:e3:95:ae:ff:00:f5:43:00:75:76:1d:b8:f9:58:
         b6:8b:ab:dd:4e:dd:e5:c2:17:3c:c4:4c:55:1c:a0:5b:72:95:
         09:cf:60:b6:de:3f:8d:7e:0e:05:41:6f:86:c5:aa:1d:26:87:
         fa:54:de:d2:df:9f:41:26:ca:9b:ce:6b:53:2d:6c:ed:8b:ab:
         45:ce:e0:40:70:e0:8c:ca:e8:d7:af:33:45:a0:b1:f7:2f:00:
         41:b3:5a:af:4c:dc:5e:3e:9a:9a:4a:b3:ef:45:42:3c:03:dc:
         89:ee:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:52 2025 by rpki-client