Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139382e302f32342d3234203d3e20323730343039.roa
File:                     3139302e38392e3139382e302f32342d3234203d3e20323730343039.roa (raw, json)
Hash identifier:          xzImtdyxbnBbx0rNtucqjoubzp08Via1exK82z1hgvk=
Subject key identifier:   4C:5A:15:D8:44:8D:C9:52:7A:6D:E0:3C:E0:DF:38:50:AF:45:A3:92
Certificate issuer:       /CN=11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4
Certificate serial:       70683CAE0914E57D777D4604BE346E9C33331C55
Authority key identifier: 11:FE:E7:71:12:2E:6B:8B:AB:9E:5B:C2:56:6A:C9:18:DC:99:FA:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139382e302f32342d3234203d3e20323730343039.roa
Signing time:             Mon 16 Jun 2025 17:07:24 +0000
ROA not before:           Mon 16 Jun 2025 17:02:24 +0000
ROA not after:            Mon 15 Jun 2026 17:07:24 +0000
asID:                     270409
IP address blocks:        190.89.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.crl
                          rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:68:3c:ae:09:14:e5:7d:77:7d:46:04:be:34:6e:9c:33:33:1c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4
        Validity
            Not Before: Jun 16 17:02:24 2025 GMT
            Not After : Jun 15 17:07:24 2026 GMT
        Subject: CN=4C5A15D8448DC9527A6DE03CE0DF3850AF45A392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:00:d6:85:92:2f:8f:b0:d9:a9:80:20:fd:d6:
                    45:69:a5:11:4f:fa:00:eb:91:5a:38:3b:c3:95:14:
                    cf:c1:72:dd:e4:1d:7d:23:0d:a7:e2:67:b6:b9:33:
                    bd:f5:de:26:d8:fc:a4:31:ef:6a:2b:db:bb:5e:1c:
                    ec:91:d3:27:33:43:2e:db:e7:64:c5:4a:cc:f6:e6:
                    6c:d5:b3:04:b4:cd:5e:64:98:d9:b0:33:4c:e6:44:
                    d9:1f:4b:e1:71:6c:90:2f:46:4c:37:cd:40:52:f4:
                    a0:d0:6c:c0:54:96:28:dd:ee:8e:91:48:77:82:e3:
                    de:38:d4:ab:79:10:ef:fb:e1:29:ab:2a:db:db:fb:
                    ee:db:25:cd:18:b9:06:19:3a:6a:bc:a7:11:fe:45:
                    64:91:bb:f4:81:57:c8:07:cb:8f:63:60:c5:d5:87:
                    73:71:50:41:0c:19:98:d4:0e:fa:87:e9:01:46:5a:
                    8d:50:19:de:fd:66:69:e6:9f:4e:95:49:01:9a:50:
                    51:65:74:73:71:b1:fa:50:fd:62:ac:dd:67:03:b9:
                    bb:af:1a:3c:6b:2d:8b:2b:0b:13:35:f7:5e:3d:f7:
                    79:49:60:11:cd:6b:4e:9c:b4:91:e7:f1:a3:15:f4:
                    83:d6:a4:75:cd:6b:cb:9c:da:28:a6:9a:ca:93:66:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5A:15:D8:44:8D:C9:52:7A:6D:E0:3C:E0:DF:38:50:AF:45:A3:92
            X509v3 Authority Key Identifier:
                keyid:11:FE:E7:71:12:2E:6B:8B:AB:9E:5B:C2:56:6A:C9:18:DC:99:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139382e302f32342d3234203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:51:47:ee:66:63:5d:c4:27:2b:7d:b6:28:8c:83:56:bd:83:
         03:9b:97:97:db:e1:9e:47:70:16:dc:e2:83:91:da:40:2c:77:
         9a:37:90:2b:e7:23:f3:c2:ba:50:14:5c:59:7c:f1:69:7f:2f:
         8b:7a:e6:38:91:a1:f1:64:b5:45:84:e7:71:8d:cd:1d:24:36:
         85:2e:9f:4e:70:e5:45:ca:59:8b:87:97:3f:79:f8:e3:26:73:
         7a:bc:22:5c:3e:c9:51:41:39:f9:ea:7d:f3:fc:ba:a0:3e:90:
         5c:8b:cf:ce:fa:f8:29:f7:15:03:4b:85:6a:88:1e:9b:f4:fd:
         d9:75:b5:4f:fb:24:b7:37:24:bf:76:3a:19:e5:ff:7b:40:8f:
         ee:ac:0a:3f:c6:dc:fb:5e:54:92:99:f0:bf:35:ad:e8:6b:f0:
         d0:b4:c0:7d:5b:c7:e0:40:cf:b9:39:04:55:4d:13:ba:d3:7d:
         55:59:2f:e2:78:9e:a0:63:37:df:0f:ae:9a:58:9e:0b:a7:86:
         f9:06:64:91:c8:cd:19:22:90:ec:e1:48:a5:f0:bf:ec:d1:57:
         01:f8:a2:ac:a2:ba:c1:fe:f4:df:ca:c9:d7:18:1c:8b:09:e2:
         c1:a1:35:75:d0:f4:68:b9:3d:6b:2e:cf:41:59:ed:dd:da:99:
         6d:31:6a:2a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcGg8rgkU5X13fUYEvjRunDMzHFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGRUU3NzExMjJFNkI4QkFCOUU1QkMyNTY2QUM5MThE
Qzk5RkFGNDAeFw0yNTA2MTYxNzAyMjRaFw0yNjA2MTUxNzA3MjRaMDMxMTAvBgNV
BAMTKDRDNUExNUQ4NDQ4REM5NTI3QTZERTAzQ0UwREYzODUwQUY0NUEzOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ANaFki+PsNmpgCD91kVppRFP
+gDrkVo4O8OVFM/Bct3kHX0jDafiZ7a5M7313ibY/KQx72or27teHOyR0yczQy7b
52TFSsz25mzVswS0zV5kmNmwM0zmRNkfS+FxbJAvRkw3zUBS9KDQbMBUlijd7o6R
SHeC49441Kt5EO/74SmrKtvb++7bJc0YuQYZOmq8pxH+RWSRu/SBV8gHy49jYMXV
h3NxUEEMGZjUDvqH6QFGWo1QGd79Zmnmn06VSQGaUFFldHNxsfpQ/WKs3WcDubuv
GjxrLYsrCxM1914993lJYBHNa06ctJHn8aMV9IPWpHXNa8uc2iimmsqTZgPvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTFoV2ESNyVJ6beA84N84UK9Fo5IwHwYDVR0j
BBgwFoAUEf7ncRIua4urnlvCVmrJGNyZ+vQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0YxeVNld3Z4VWtoS2JDRmV3UGlORlMxbUdxNU56amF4YVhOZGhCRXpB
cGEvMC8xMUZFRTc3MTEyMkU2QjhCQUI5RTVCQzI1NjZBQzkxOERDOTlGQUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRkVFNzcxMTIyRTZCOEJB
QjlFNUJDMjU2NkFDOTE4REM5OUZBRjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdGMXlTZXd2eFVraEtiQ0Zld1BpTkZTMW1HcTVOempheGFYTmRoQkV6QXBhLzAv
MzEzOTMwMmUzODM5MmUzMTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+WcYwDQYJKoZIhvcNAQELBQADggEBAJRRR+5m
Y13EJyt9tiiMg1a9gwObl5fb4Z5HcBbc4oOR2kAsd5o3kCvnI/PCulAUXFl88Wl/
L4t65jiRofFktUWE53GNzR0kNoUun05w5UXKWYuHlz95+OMmc3q8Ilw+yVFBOfnq
ffP8uqA+kFyLz876+Cn3FQNLhWqIHpv0/dl1tU/7JLc3JL92Ohnl/3tAj+6sCj/G
3PteVJKZ8L81rehr8NC0wH1bx+BAz7k5BFVNE7rTfVVZL+J4nqBjN98PrppYngun
hvkGZJHIzRkikOzhSKXwv+zRVwH4oqyiusH+9N/KydcYHIsJ4sGhNXXQ9Gi5PWsu
z0FZ7d3amW0xaio=
-----END CERTIFICATE-----
Generated at Sun Jul 6 00:47:17 2025 by rpki-client