Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e36382e302f32342d3234203d3e20323731333233.roa
File:                     3139302e3132332e36382e302f32342d3234203d3e20323731333233.roa (raw, json)
Hash identifier:          1pkQGLmwtodM4y0bOTlsP5yv0qxscUL/YlsgAuEipvg=
Subject key identifier:   CC:37:1D:A2:BA:CD:C8:E2:DA:04:E2:F0:C2:CC:B4:55:E5:96:95:99
Certificate issuer:       /CN=922B9B809E9734E02F711EB097B94EB6316A606D
Certificate serial:       63EE8BC394017E2363A40F4B4639AEA733736FE6
Authority key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e36382e302f32342d3234203d3e20323731333233.roa
Signing time:             Sat 09 Aug 2025 13:02:41 +0000
ROA not before:           Sat 09 Aug 2025 12:57:41 +0000
ROA not after:            Sat 08 Aug 2026 13:02:41 +0000
asID:                     271323
IP address blocks:        190.123.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ee:8b:c3:94:01:7e:23:63:a4:0f:4b:46:39:ae:a7:33:73:6f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922B9B809E9734E02F711EB097B94EB6316A606D
        Validity
            Not Before: Aug  9 12:57:41 2025 GMT
            Not After : Aug  8 13:02:41 2026 GMT
        Subject: CN=CC371DA2BACDC8E2DA04E2F0C2CCB455E5969599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f5:cd:7c:1c:2c:37:6c:cb:55:cc:92:f7:fc:
                    a2:1a:87:34:1e:90:3d:12:fc:db:f2:6b:75:15:4d:
                    2b:24:22:57:88:0e:58:b5:cd:c8:ba:3f:b4:01:8c:
                    47:5e:07:d7:b3:fa:34:fb:52:11:75:b7:f7:f5:b5:
                    ff:ea:15:1c:41:7e:61:02:6f:e9:56:3e:94:94:ca:
                    6d:89:0b:9b:9f:7d:73:cb:84:19:3c:8c:45:6c:f3:
                    6d:d0:29:42:2a:07:59:1f:82:5f:be:df:e6:66:97:
                    98:91:da:07:6f:9e:43:8b:12:24:50:08:ad:09:e9:
                    b0:0f:5e:97:eb:ae:87:b7:66:91:da:57:e5:5f:e6:
                    f0:fd:20:6a:c5:cf:e4:ed:f5:76:1e:c5:61:7c:56:
                    44:30:0d:bc:a4:c5:4f:79:52:3f:c1:89:dd:39:8d:
                    04:ce:18:22:ab:ed:04:ca:c5:49:3d:35:f7:f0:d6:
                    5b:3c:b8:b8:11:96:11:71:7e:c0:be:b6:d4:a8:f1:
                    1b:c2:1f:2a:67:18:2d:b7:e8:19:79:3d:1a:38:a3:
                    da:b7:71:0a:c8:88:39:e7:cc:7e:86:f4:06:2c:b1:
                    09:72:91:93:b2:53:26:0e:d5:f3:6b:67:84:f2:0d:
                    2a:05:f7:43:f7:6b:d2:26:a9:65:3d:e8:c1:4f:70:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:37:1D:A2:BA:CD:C8:E2:DA:04:E2:F0:C2:CC:B4:55:E5:96:95:99
            X509v3 Authority Key Identifier:
                keyid:92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e36382e302f32342d3234203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d6:97:81:1f:63:65:f5:3b:45:08:0d:8a:b3:2c:60:91:a0:
         88:b8:bd:42:58:01:1c:d0:57:c5:1e:fa:a0:01:89:6c:75:7b:
         9e:91:43:a1:73:68:e5:4b:7d:ba:ac:6f:00:8f:04:aa:1d:c9:
         05:83:a6:dc:d1:84:8d:f2:c0:60:55:76:e9:f7:61:87:de:09:
         39:a4:e4:6c:7c:78:8a:73:e5:4f:b1:c9:80:4e:85:17:2d:11:
         83:fa:33:6f:a6:e2:72:56:4e:6b:38:ba:10:1e:2f:f7:46:5f:
         54:f7:21:c6:8e:a2:7b:77:b0:f9:71:ea:85:94:21:9c:e2:b6:
         90:13:77:6a:b7:8b:90:73:8c:94:e8:f6:d6:94:03:7a:ec:13:
         46:a0:3a:66:5d:e9:4f:1d:a1:fc:cc:be:ee:6e:58:86:bf:d3:
         08:c1:8d:b9:f1:73:51:96:bd:b3:6a:bd:b1:65:98:db:d0:a7:
         bb:9b:52:94:6c:d2:00:77:d8:c9:90:ea:bc:4c:a7:46:ce:9e:
         45:2d:36:fc:21:e1:50:24:85:00:2d:5c:46:f5:58:75:a9:34:
         7c:1a:86:65:57:9f:97:99:31:16:74:b5:07:df:74:72:a3:c7:
         4b:67:da:53:a6:97:19:97:c8:68:c1:ec:54:81:2e:52:a5:c7:
         f9:e5:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:14 2025 by rpki-client