Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38382e302f32322d3234203d3e20323731303130.roa
File:                     3139302e3130362e38382e302f32322d3234203d3e20323731303130.roa (raw, json)
Hash identifier:          6i9Buq6UgZCD5zz/qI4hdqDR8fDkr/0REP4zQO35ygE=
Subject key identifier:   A2:D6:BF:D3:43:BA:6B:E0:12:E1:39:A8:84:43:1B:AA:E0:6A:62:48
Certificate issuer:       /CN=EDEBE7C0F29CF670A3DAC62CE99B36CD6145155B
Certificate serial:       544D3DB4C7BD9AFCC71C846971F8E067661022ED
Authority key identifier: ED:EB:E7:C0:F2:9C:F6:70:A3:DA:C6:2C:E9:9B:36:CD:61:45:15:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDEBE7C0F29CF670A3DAC62CE99B36CD6145155B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38382e302f32322d3234203d3e20323731303130.roa
Signing time:             Mon 13 Oct 2025 12:25:06 +0000
ROA not before:           Mon 13 Oct 2025 12:20:06 +0000
ROA not after:            Mon 12 Oct 2026 12:25:06 +0000
asID:                     271010
IP address blocks:        190.106.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/EDEBE7C0F29CF670A3DAC62CE99B36CD6145155B.crl
                          rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/EDEBE7C0F29CF670A3DAC62CE99B36CD6145155B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDEBE7C0F29CF670A3DAC62CE99B36CD6145155B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4d:3d:b4:c7:bd:9a:fc:c7:1c:84:69:71:f8:e0:67:66:10:22:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDEBE7C0F29CF670A3DAC62CE99B36CD6145155B
        Validity
            Not Before: Oct 13 12:20:06 2025 GMT
            Not After : Oct 12 12:25:06 2026 GMT
        Subject: CN=A2D6BFD343BA6BE012E139A884431BAAE06A6248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:01:f0:3c:f2:ab:2a:77:9b:1c:9e:d9:fc:
                    21:86:cc:ec:33:20:d8:10:2b:49:3c:a4:1d:f5:0d:
                    5e:b4:d7:35:e3:83:ce:da:64:e9:05:2a:06:ec:88:
                    af:9f:e4:1a:dd:fc:97:e5:42:dd:a9:64:66:7f:49:
                    6c:66:38:51:89:59:71:0e:7c:c4:e2:73:5b:6d:f8:
                    7d:b3:d7:6e:91:70:33:74:94:09:d1:75:04:31:5e:
                    d6:6d:5f:2c:7b:e4:38:87:5b:4c:24:16:e8:58:a7:
                    99:69:77:fb:80:e5:83:6f:c7:d4:0c:fc:db:ab:4c:
                    d5:75:eb:b2:d6:95:52:54:cb:2b:59:ac:9f:81:9e:
                    59:70:08:1c:a6:0a:b4:f7:b7:f1:e4:fd:59:ad:af:
                    95:65:d9:13:66:33:91:f3:f8:5f:4d:a8:35:97:47:
                    51:b7:81:12:c4:f9:40:24:68:19:57:63:a3:ec:37:
                    60:e4:a7:62:76:f2:af:c8:12:c6:95:ad:6c:4c:f5:
                    9e:e4:31:42:a2:7b:e3:bf:5a:e9:e8:be:93:c0:c0:
                    e8:54:83:5a:66:c0:48:b9:e6:07:b9:89:5b:e2:ca:
                    bb:f9:07:ac:93:41:32:c6:f3:16:20:10:e8:ed:f6:
                    da:e0:31:13:b9:d6:d5:3f:f8:eb:1d:49:bf:d5:17:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D6:BF:D3:43:BA:6B:E0:12:E1:39:A8:84:43:1B:AA:E0:6A:62:48
            X509v3 Authority Key Identifier:
                keyid:ED:EB:E7:C0:F2:9C:F6:70:A3:DA:C6:2C:E9:9B:36:CD:61:45:15:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/EDEBE7C0F29CF670A3DAC62CE99B36CD6145155B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDEBE7C0F29CF670A3DAC62CE99B36CD6145155B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38382e302f32322d3234203d3e20323731303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:54:f7:36:7f:c5:af:5f:21:6e:4b:70:a9:61:61:a4:7a:a8:
         28:3f:49:17:7d:80:c8:72:8f:e6:2c:33:4e:8d:fa:90:18:d9:
         f3:a3:1c:eb:ed:a0:96:25:90:73:06:92:b4:58:56:4e:d8:ba:
         6d:1e:bd:a1:e4:8c:36:1d:3b:f5:25:ae:16:f5:4f:54:f3:e6:
         6b:1d:66:9b:17:66:df:99:62:3b:21:13:9a:3d:43:84:14:b9:
         df:d5:b5:35:52:88:4a:55:af:a7:0f:33:4d:68:d3:de:27:c2:
         4e:26:27:d2:5e:70:5d:37:9e:fd:f3:9a:32:3c:4b:4b:72:ce:
         a6:84:c4:b4:9a:11:ac:74:a0:c2:79:a5:2a:2a:dd:44:7e:30:
         18:9f:ec:27:42:7c:8f:db:82:e6:41:53:60:05:b8:09:ad:c9:
         b8:ec:4b:cf:e0:b3:65:69:61:a0:c6:c1:75:33:22:3f:a3:0f:
         d7:30:ae:e1:36:f5:75:e0:83:ae:1f:62:57:bc:97:ab:04:14:
         30:f4:de:1f:76:3b:02:08:22:7c:93:db:fe:28:4c:9c:e2:78:
         6f:f5:5d:25:eb:fb:ec:55:fe:ed:83:b4:94:5f:55:a2:7e:34:
         f4:be:2e:93:70:f3:9c:b2:e2:2b:45:82:b8:41:3d:ab:a6:f3:
         a8:36:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:48 2025 by rpki-client