Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/3139302e38392e35322e302f32322d3234203d3e20323730333536.roa
File:                     3139302e38392e35322e302f32322d3234203d3e20323730333536.roa (raw, json)
Hash identifier:          yBVEI01VIMIELpO8fUtxASfWL6CgiDXXgLrMCvmRLuA=
Subject key identifier:   D3:72:BF:02:03:A8:66:41:23:3D:2F:19:CC:D2:90:16:F2:47:6E:12
Certificate issuer:       /CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
Certificate serial:       6218394BCB2309173687AA95AD846FA4693B71E6
Authority key identifier: DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/3139302e38392e35322e302f32322d3234203d3e20323730333536.roa
Signing time:             Tue 30 Sep 2025 18:02:34 +0000
ROA not before:           Tue 30 Sep 2025 17:57:34 +0000
ROA not after:            Tue 29 Sep 2026 18:02:34 +0000
asID:                     270356
IP address blocks:        190.89.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl
                          rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:18:39:4b:cb:23:09:17:36:87:aa:95:ad:84:6f:a4:69:3b:71:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
        Validity
            Not Before: Sep 30 17:57:34 2025 GMT
            Not After : Sep 29 18:02:34 2026 GMT
        Subject: CN=D372BF0203A86641233D2F19CCD29016F2476E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:11:b8:9d:71:4d:82:67:c7:3a:8c:1f:b2:
                    1e:53:96:e0:2b:aa:e2:ea:bb:05:cd:42:c2:89:50:
                    6a:58:46:60:d4:47:91:70:1c:c9:f7:af:ac:96:c7:
                    a7:81:e1:2a:e7:48:fb:9b:51:b2:de:6b:31:34:a9:
                    40:e1:e8:31:db:ba:17:22:53:86:e5:4a:23:c2:89:
                    5a:9b:f2:6c:9f:e1:9d:39:28:4f:a5:c9:ed:70:a1:
                    a2:0a:47:4e:af:85:aa:13:2b:ff:8e:ec:b3:f7:3d:
                    6c:1c:d8:af:9a:1b:1a:0d:65:8e:83:38:59:88:57:
                    83:7f:de:7f:1d:79:27:2e:24:55:a4:f1:41:59:29:
                    d6:c9:25:59:38:de:bb:4e:98:90:15:9d:92:4a:9e:
                    d5:64:c6:8e:a7:f7:99:a5:9e:b0:35:67:14:4f:fb:
                    22:d8:89:4e:3d:da:31:67:69:03:25:d8:45:16:82:
                    4a:a9:a0:83:ee:8e:52:09:61:7b:81:8e:ae:96:3a:
                    6f:0d:53:a4:c3:8c:c5:e0:cb:c6:86:56:39:02:49:
                    99:c6:69:fc:bc:00:ec:c8:57:84:ad:4b:76:15:4f:
                    a9:74:98:84:d1:1b:75:e5:f4:02:e8:08:e0:95:09:
                    ac:c7:3f:3d:8f:6c:fd:b6:96:58:98:5c:1f:31:8c:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:72:BF:02:03:A8:66:41:23:3D:2F:19:CC:D2:90:16:F2:47:6E:12
            X509v3 Authority Key Identifier:
                keyid:DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/3139302e38392e35322e302f32322d3234203d3e20323730333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:d1:6d:83:bb:80:d0:fa:b5:6d:fc:c0:40:16:92:a0:20:c4:
         2c:2a:51:39:99:bb:b5:ab:95:42:d2:d6:30:d0:71:b8:40:03:
         3d:04:54:0c:89:6b:5a:7d:60:37:28:38:1e:d4:75:3b:77:4e:
         93:e6:2c:de:57:73:46:bb:ea:80:58:55:54:e0:94:5f:6d:31:
         f0:36:cd:07:fd:18:11:7a:49:75:e8:24:af:b5:2d:bc:69:3c:
         ab:77:32:43:f5:31:71:19:64:db:5f:20:2c:44:d5:56:b8:66:
         4f:d5:bc:f0:f2:d4:0a:e7:9c:8b:d5:66:8b:ae:1b:8c:c9:9a:
         4f:17:6a:62:2f:fb:93:68:1e:16:bb:20:75:7e:92:75:b2:c3:
         17:a9:60:3c:ba:0a:27:4e:eb:44:a1:22:35:a9:b7:1c:0a:b2:
         b2:68:92:2b:f5:e7:da:6d:4a:0d:00:24:d2:cf:47:14:b3:20:
         f1:4b:43:5a:c1:fa:a5:b7:58:b6:61:11:43:bc:c0:8d:81:62:
         11:48:79:98:6c:86:df:0e:82:dd:29:b6:65:db:8a:7f:c7:c9:
         32:9c:71:12:40:b5:37:82:12:b9:1f:14:48:56:2a:2d:ca:73:
         63:1b:e8:a9:ac:4b:d5:1c:be:a4:f2:9c:54:e9:55:1e:cf:47:
         f7:db:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:29:56 2025 by rpki-client