Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa
File:                     3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa (raw, json)
Hash identifier:          Kwj+nPWCxAO6raWAi3hAmyxeMIMz/dHJCYHpSi+J44c=
Subject key identifier:   FF:50:ED:22:DE:10:68:4E:3A:6E:D4:96:BD:A7:DB:5C:E5:97:69:68
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       68C36834183080930672A2B6906764407DB8A7A0
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa
Signing time:             Fri 20 Jun 2025 15:34:18 +0000
ROA not before:           Fri 20 Jun 2025 15:29:18 +0000
ROA not after:            Fri 19 Jun 2026 15:34:18 +0000
asID:                     270413
IP address blocks:        190.89.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 05:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c3:68:34:18:30:80:93:06:72:a2:b6:90:67:64:40:7d:b8:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Jun 20 15:29:18 2025 GMT
            Not After : Jun 19 15:34:18 2026 GMT
        Subject: CN=FF50ED22DE10684E3A6ED496BDA7DB5CE5976968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:5f:cb:a1:87:cd:15:86:42:6f:86:56:00:
                    dd:0a:88:de:d6:d2:f0:3d:5c:11:43:88:e5:cc:87:
                    bd:3c:dd:0e:c5:96:65:90:91:df:ff:37:12:d7:a2:
                    4c:69:da:0b:b2:a4:dc:d4:cc:e7:10:6f:d9:51:50:
                    36:ff:16:33:19:a8:3c:90:be:bf:cd:d6:66:53:3c:
                    0b:3a:fe:00:a2:32:4c:c5:6f:a1:6c:3f:3e:f3:83:
                    b9:84:fa:4c:0d:2b:62:67:cf:14:ce:30:dc:6f:7c:
                    0e:ef:93:b8:1a:98:21:12:b5:3b:71:c3:56:9f:57:
                    a2:18:29:4b:a3:d5:09:11:91:0f:a2:09:84:d3:83:
                    0b:04:52:35:ae:4b:09:c7:4a:80:ad:45:03:df:ef:
                    65:cd:e6:8f:c8:95:60:69:96:23:19:6a:e4:13:b1:
                    6e:de:ee:73:11:dc:e4:5a:24:1c:1a:35:9c:f8:d7:
                    09:18:30:94:b2:5a:5e:88:64:4b:eb:66:2c:44:c4:
                    90:5d:f8:15:ab:77:87:44:1c:c6:dd:b9:01:16:1c:
                    19:ac:80:41:27:7e:c4:60:dc:98:4d:fa:a1:3b:98:
                    47:a3:2e:84:ad:b7:e3:d7:7a:0e:d5:4c:2a:e3:a2:
                    b5:33:0c:2c:53:b9:f2:1c:5e:8f:a2:1b:a9:e6:83:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:50:ED:22:DE:10:68:4E:3A:6E:D4:96:BD:A7:DB:5C:E5:97:69:68
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:68:a7:ae:d8:a2:47:16:91:2c:65:84:f0:80:fd:52:9b:4a:
         9c:bd:b5:0e:4a:4a:ea:05:f9:49:a5:64:13:9c:82:de:fb:7f:
         9b:a2:04:4a:0a:da:11:e6:30:9d:ea:5e:09:c2:f7:20:a6:40:
         21:1d:23:8a:8b:f9:6d:ad:ac:ec:72:36:b6:5f:b3:fc:32:47:
         b3:fb:02:43:96:c4:90:cb:85:76:41:eb:eb:13:e7:a3:5d:1b:
         34:5b:5d:85:7f:c1:27:b4:95:f8:5c:90:b3:ac:92:62:88:74:
         61:96:f0:51:4b:0d:1f:8a:5a:3e:aa:ee:c7:87:b4:6b:b1:86:
         71:0c:0b:cf:f0:bb:c5:42:00:95:d1:47:56:48:fd:6b:1b:01:
         15:d7:28:f3:6c:23:bf:92:61:e3:c5:92:09:fb:f4:0f:3e:af:
         49:3f:47:72:44:ea:7c:17:67:46:95:2e:5c:4e:98:58:b0:cf:
         20:bd:6f:0c:d7:4e:38:3a:2e:e7:a9:86:d7:79:d2:34:f7:be:
         9c:a9:d7:c1:df:bc:61:28:cb:98:be:7a:1d:8d:26:04:c2:66:
         45:65:8e:78:5a:83:a4:da:eb:a8:e9:a3:75:88:16:4e:97:90:
         33:8c:42:1c:d3:b1:fb:c8:a3:a7:69:c4:69:be:76:41:47:78:
         ee:9b:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:33:59 2025 by rpki-client