Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e37312e302f32342d3234203d3e20323731333233.roa
File:                     3139302e3132332e37312e302f32342d3234203d3e20323731333233.roa (raw, json)
Hash identifier:          t63wVBd0Fpl2CFO4R8OnO15sLRCYdr7mS7cww6blbNk=
Subject key identifier:   70:1A:52:F3:3D:8C:35:79:4B:5E:B5:3A:07:CE:0A:F1:E5:B0:CD:70
Certificate issuer:       /CN=922B9B809E9734E02F711EB097B94EB6316A606D
Certificate serial:       335985B06FA2EF35EDA6E76449EB68230B346D96
Authority key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e37312e302f32342d3234203d3e20323731333233.roa
Signing time:             Sat 09 Aug 2025 13:04:32 +0000
ROA not before:           Sat 09 Aug 2025 12:59:32 +0000
ROA not after:            Sat 08 Aug 2026 13:04:32 +0000
asID:                     271323
IP address blocks:        190.123.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:59:85:b0:6f:a2:ef:35:ed:a6:e7:64:49:eb:68:23:0b:34:6d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922B9B809E9734E02F711EB097B94EB6316A606D
        Validity
            Not Before: Aug  9 12:59:32 2025 GMT
            Not After : Aug  8 13:04:32 2026 GMT
        Subject: CN=701A52F33D8C35794B5EB53A07CE0AF1E5B0CD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:e6:e0:67:88:98:54:96:c1:57:ca:36:27:
                    de:7e:62:70:a7:4c:26:9e:22:ba:68:9a:c9:ff:08:
                    3a:3d:55:81:71:fd:b8:d3:26:9a:be:02:73:a7:9e:
                    61:a6:86:46:b0:25:cd:1c:63:98:d8:cb:77:8e:f1:
                    65:41:1e:ad:8f:4c:55:2a:dd:e2:ff:4d:1e:f5:de:
                    a1:0c:73:e0:98:86:b0:4c:31:7b:fc:71:d1:c5:50:
                    97:1f:f0:a6:fd:d9:7a:f0:b4:4f:c6:f8:3b:4e:ca:
                    ba:a8:bc:0b:36:88:1b:00:8b:47:83:2f:06:c2:28:
                    0a:0a:95:ad:73:50:da:d4:67:6b:54:bd:8e:d2:40:
                    92:79:e0:6c:0e:53:1b:5a:cc:5d:fc:00:84:d9:ae:
                    d2:77:9d:db:3d:7a:00:af:d6:b8:70:99:8d:88:5a:
                    4d:26:e9:3e:ad:2f:2a:ff:ff:62:90:a8:f0:58:24:
                    2e:4d:51:80:6d:43:60:35:8a:fd:01:3a:83:3b:05:
                    fc:be:74:e9:25:43:9b:59:fd:f7:84:bf:65:e4:d0:
                    f6:26:fa:57:61:7a:ed:b4:ff:01:4e:7c:3f:ea:77:
                    24:80:83:81:4d:71:2f:c9:53:05:c7:b1:0d:f5:0c:
                    56:e4:fa:d9:8a:0b:ac:e5:91:e9:94:00:7e:26:2f:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1A:52:F3:3D:8C:35:79:4B:5E:B5:3A:07:CE:0A:F1:E5:B0:CD:70
            X509v3 Authority Key Identifier:
                keyid:92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3139302e3132332e37312e302f32342d3234203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:64:c4:3d:7a:9a:1f:9b:bf:b4:49:8f:64:c8:8e:63:bc:96:
         16:e4:5b:67:b6:c4:13:a4:a1:b1:64:30:71:dc:32:87:64:d6:
         e7:11:75:01:2c:9e:64:b5:18:95:92:98:7a:d1:e7:77:9e:ac:
         cd:6a:32:78:b6:b9:dd:43:ec:ff:94:80:dd:03:1e:7b:4c:39:
         9e:0c:a7:d2:84:a7:f2:72:00:82:c4:92:71:89:0d:79:9e:f5:
         b1:a6:e8:79:a3:17:d8:8f:49:bd:1c:73:af:c1:d1:58:6a:c5:
         3d:84:63:95:e3:40:a4:39:20:b5:ca:59:3f:ca:7a:84:ea:fe:
         e8:96:ad:02:cd:ba:1a:bc:77:23:88:68:45:6a:88:35:5e:21:
         b1:33:11:67:2f:64:17:9c:4e:a3:54:49:70:ba:58:0e:4d:9f:
         7e:20:88:bf:d2:f9:5d:b6:b4:38:87:76:20:fb:ac:34:d3:c0:
         c6:7a:36:e0:d6:21:30:96:90:2e:04:0b:ae:35:cc:5a:58:1e:
         16:fd:ef:8e:70:6c:ea:a3:25:f9:96:60:df:17:2d:ea:19:b0:
         81:c1:78:44:8c:7b:eb:69:f6:41:ca:77:e5:a5:6a:be:ed:f3:
         0a:3b:b4:43:56:f5:46:66:91:95:78:a3:a8:2d:1c:cb:0e:02:
         cb:c2:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:24 2025 by rpki-client