Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e36392e302f32342d3234203d3e20323731333233.roa
File:                     3139302e3132332e36392e302f32342d3234203d3e20323731333233.roa (raw, json)
Hash identifier:          Ch0w5AK5w4T5j60M6E/NielekGWII2BmCi9/uo4y4B4=
Subject key identifier:   0D:1C:5C:59:BC:7C:0D:5E:42:D4:67:88:EE:D0:F5:9C:B9:41:C1:C2
Certificate issuer:       /CN=922B9B809E9734E02F711EB097B94EB6316A606D
Certificate serial:       4F1297C3CD4CF3CBCAD7FDB746C456FB9E90B8E4
Authority key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e36392e302f32342d3234203d3e20323731333233.roa
Signing time:             Sat 09 Aug 2025 13:03:35 +0000
ROA not before:           Sat 09 Aug 2025 12:58:35 +0000
ROA not after:            Sat 08 Aug 2026 13:03:35 +0000
asID:                     271323
IP address blocks:        190.123.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:12:97:c3:cd:4c:f3:cb:ca:d7:fd:b7:46:c4:56:fb:9e:90:b8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922B9B809E9734E02F711EB097B94EB6316A606D
        Validity
            Not Before: Aug  9 12:58:35 2025 GMT
            Not After : Aug  8 13:03:35 2026 GMT
        Subject: CN=0D1C5C59BC7C0D5E42D46788EED0F59CB941C1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:84:ad:ea:18:df:6c:f3:ce:24:f5:d4:ff:
                    2e:4f:de:43:5c:b1:72:fc:3d:e5:a6:f8:df:27:f7:
                    72:f0:fb:2a:2b:d7:46:74:df:ad:37:c4:d9:a6:16:
                    1d:91:a4:9a:ac:b7:6a:76:c1:9c:71:68:e9:25:79:
                    8b:7e:ab:e1:d8:39:bc:ea:1e:88:a9:0e:4c:18:f5:
                    8e:21:00:2f:c1:f8:aa:48:0f:54:4d:27:07:e7:ec:
                    57:d6:27:5c:2d:c0:d0:a4:32:c7:4d:b2:bf:dd:ee:
                    c6:23:99:c9:31:cf:79:78:08:07:ed:8d:45:47:f9:
                    23:1d:d8:1a:00:b6:b1:b5:58:90:46:aa:a7:8e:b0:
                    5b:8b:1f:28:c1:d9:04:c9:55:1e:6b:f5:bb:93:9f:
                    66:48:6d:67:79:5f:06:17:75:c0:27:69:be:77:1c:
                    28:e6:04:b0:e8:4b:35:e5:9c:bd:65:71:1f:5d:9c:
                    c1:a1:30:07:01:53:73:b7:43:3c:36:4b:98:b9:53:
                    b0:bc:b0:f3:82:0e:fc:ce:c4:b3:92:23:a1:eb:a6:
                    c3:61:27:7d:42:53:7f:a7:99:e5:14:0f:50:b8:3b:
                    2e:64:ff:06:06:4f:f9:f1:78:c6:b5:7a:ec:b9:95:
                    2f:00:40:9a:c8:7a:36:32:8f:1e:1f:c6:93:66:cb:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1C:5C:59:BC:7C:0D:5E:42:D4:67:88:EE:D0:F5:9C:B9:41:C1:C2
            X509v3 Authority Key Identifier:
                keyid:92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e36392e302f32342d3234203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6c:7b:14:f8:b4:2c:28:aa:1a:a1:1d:c8:34:84:47:5a:9a:
         cf:1e:90:36:47:dc:89:79:eb:db:d9:8a:87:af:d9:4e:21:f2:
         63:7a:83:83:8f:36:57:b5:3f:1d:8e:c4:ae:4a:37:81:03:d7:
         0a:5d:03:61:2a:2f:1a:3b:b3:1c:9f:07:47:ad:15:ba:40:c4:
         ca:72:19:a1:cb:19:99:16:70:02:0c:0f:e6:61:b2:63:d0:03:
         1b:f5:b8:8d:a8:01:39:1e:a8:a4:cd:21:29:53:35:bf:8e:fa:
         39:5f:77:df:7a:e3:ab:a6:de:27:1e:c4:64:47:a8:4b:03:a0:
         94:37:66:a7:f3:34:49:dc:84:f1:5b:68:11:7d:2c:54:1a:c6:
         d8:c4:ad:f0:36:6f:df:60:1f:d6:3a:0a:36:af:ae:a0:80:5f:
         08:33:f9:1c:9a:46:ac:db:76:bd:19:e2:ab:6a:64:cf:2e:de:
         53:2e:41:b9:bf:b8:8a:52:fe:dd:83:cb:d8:3e:1d:39:69:33:
         41:33:c4:76:42:fb:07:1f:01:c0:db:08:78:e4:a7:20:87:64:
         eb:e1:08:7d:dc:23:e9:55:d1:25:77:68:b1:85:ea:c1:3b:24:
         3f:8d:3d:a6:33:2e:03:87:08:8c:16:81:8a:79:c4:47:13:d1:
         63:e1:19:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:45 2025 by rpki-client