Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e37302e302f32342d3234203d3e20323731333233.roa
File:                     3139302e3132332e37302e302f32342d3234203d3e20323731333233.roa (raw, json)
Hash identifier:          YnLUFsaEjdEfgjEzi3BUZS1r/gk7OBohAI0ZI5lZTOg=
Subject key identifier:   1F:15:BF:9B:38:2A:47:29:53:DB:F8:30:DA:FD:7E:29:18:BC:ED:B5
Certificate issuer:       /CN=922B9B809E9734E02F711EB097B94EB6316A606D
Certificate serial:       0D42B8F7AB94EE063D071054450A602F844C2A3A
Authority key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e37302e302f32342d3234203d3e20323731333233.roa
Signing time:             Sat 09 Aug 2025 13:07:04 +0000
ROA not before:           Sat 09 Aug 2025 13:02:04 +0000
ROA not after:            Sat 08 Aug 2026 13:07:04 +0000
asID:                     271323
IP address blocks:        190.123.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:42:b8:f7:ab:94:ee:06:3d:07:10:54:45:0a:60:2f:84:4c:2a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922B9B809E9734E02F711EB097B94EB6316A606D
        Validity
            Not Before: Aug  9 13:02:04 2025 GMT
            Not After : Aug  8 13:07:04 2026 GMT
        Subject: CN=1F15BF9B382A472953DBF830DAFD7E2918BCEDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:cf:c0:ef:63:41:e5:ba:1d:4e:3f:b1:36:
                    10:5d:a1:ef:1f:46:cb:a7:a9:77:9d:4a:54:a8:b2:
                    66:c3:71:d3:43:95:96:be:11:9d:5f:25:63:1a:fc:
                    4c:18:d5:46:c0:77:14:f9:37:e8:98:7d:63:4b:7b:
                    36:ee:58:8b:2f:87:fd:fc:4a:72:9c:62:2c:d6:61:
                    a4:a8:51:59:83:f1:db:bc:22:52:ed:db:40:4e:c2:
                    f6:24:5b:e1:b6:79:0b:30:fb:51:0c:6c:74:40:a2:
                    75:c9:5d:cd:50:bc:4a:69:9e:2f:17:71:ac:97:8b:
                    3b:c3:a8:06:98:cb:43:b0:17:39:6a:c0:09:59:06:
                    2c:35:88:91:19:4e:a5:fc:12:00:6f:71:83:a4:7d:
                    4f:38:66:1b:dc:dc:01:db:c5:47:bf:e9:da:6e:b4:
                    12:9c:98:62:da:f7:d3:86:ca:f9:5f:d1:61:04:13:
                    67:72:84:80:7e:e9:c2:f7:40:0c:7e:85:67:9f:d6:
                    59:31:05:97:6d:24:c0:a6:26:8f:93:57:50:09:7f:
                    76:b7:bc:0b:e0:70:ba:7a:3f:73:6d:14:e6:40:f7:
                    c2:17:bd:27:81:af:a9:86:36:02:f4:0d:cb:fa:91:
                    a0:c0:49:83:13:2f:83:f5:ae:6f:1c:5b:ec:1d:e6:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:BF:9B:38:2A:47:29:53:DB:F8:30:DA:FD:7E:29:18:BC:ED:B5
            X509v3 Authority Key Identifier:
                keyid:92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e37302e302f32342d3234203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:ba:36:34:c1:bd:a6:9e:6d:54:b6:3a:71:c5:8f:42:dd:
         17:82:37:19:31:97:d1:d4:73:f5:28:2f:06:76:49:e8:b8:65:
         1e:2e:0c:7d:3b:cc:9c:27:16:49:80:23:d4:c7:d8:7c:d3:38:
         f5:ff:36:71:6a:4e:a5:93:52:62:38:db:69:7a:74:21:18:73:
         38:fc:63:0c:26:9e:a0:b8:99:f7:36:63:b5:af:7d:56:b4:0d:
         7c:b7:53:18:8b:9d:de:8b:9a:91:15:54:d5:e9:7d:ae:20:a7:
         bf:21:8a:7a:5d:49:53:59:46:e2:3a:8e:af:3c:92:43:ed:a1:
         0f:f5:9b:44:f3:fc:4b:4b:24:6c:7f:32:f3:d0:fa:6d:71:82:
         4d:dd:69:e6:01:2c:00:73:85:23:be:db:6d:0a:51:7d:d5:85:
         9d:d9:db:31:17:c3:cf:fe:8a:cc:55:db:0a:18:12:e7:1f:a6:
         c0:e5:2d:56:54:59:03:54:15:1f:91:90:9d:3b:fc:16:68:af:
         09:98:38:84:ac:cb:98:1b:ba:8a:cc:2f:7b:51:91:98:89:21:
         2f:d1:5f:4f:3b:42:85:ae:0a:98:83:84:b5:d2:cc:7d:64:d7:
         0a:7e:04:46:92:46:f6:bd:e7:38:6f:96:a7:e2:7b:ba:0f:41:
         83:aa:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:15 2025 by rpki-client