Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa
File:                     3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa (raw, json)
Hash identifier:          FAYovG+j2T0BnrleWeF2KmC90gVCZ+KiEXa2euYnAXg=
Subject key identifier:   9E:9D:11:67:12:3D:AB:80:67:0F:E5:D1:30:22:F8:F6:B5:AE:A0:CB
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       413C4091506699240A438DFC511630A50E5951AD
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa
Signing time:             Thu 09 Oct 2025 21:02:31 +0000
ROA not before:           Thu 09 Oct 2025 20:57:31 +0000
ROA not after:            Thu 08 Oct 2026 21:02:31 +0000
asID:                     263665
IP address blocks:        191.241.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3c:40:91:50:66:99:24:0a:43:8d:fc:51:16:30:a5:0e:59:51:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Oct  9 20:57:31 2025 GMT
            Not After : Oct  8 21:02:31 2026 GMT
        Subject: CN=9E9D1167123DAB80670FE5D13022F8F6B5AEA0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:d5:0a:9f:2b:ae:55:bc:a4:cb:df:e5:68:
                    38:e0:4c:9b:55:46:6a:cf:61:eb:ad:6c:39:5f:7c:
                    4c:03:72:d9:ae:12:fb:7d:81:1c:31:c0:e9:29:43:
                    93:0e:60:ba:e7:29:d4:5a:0a:82:53:e7:5d:6a:5f:
                    f5:00:51:0f:8f:15:01:ae:a8:53:c2:b8:c4:7a:19:
                    88:33:1b:19:6f:99:cd:03:d1:ed:ab:59:33:35:95:
                    38:df:d7:84:b1:ed:13:54:6b:98:93:10:be:95:e5:
                    6b:ae:8b:3b:10:2f:e8:10:1a:0a:bd:cf:3b:2e:ed:
                    60:10:36:8a:99:9b:f6:e6:23:d7:77:b6:e1:a8:64:
                    96:47:db:42:20:60:66:b6:ce:cb:9f:d6:66:39:c4:
                    e7:32:3a:cc:10:f6:a9:af:2b:df:84:0b:7c:c6:57:
                    19:89:f3:fe:36:63:16:f4:b3:a8:e6:47:cb:c8:c7:
                    ee:d1:a6:91:14:f2:8d:87:d2:df:08:70:bb:50:bf:
                    b9:66:07:a2:b3:10:94:41:9d:e5:5a:55:3e:f5:cb:
                    9b:e9:2b:5b:a5:88:33:6c:7f:ac:c0:31:9b:2e:7e:
                    d9:7c:66:6f:d4:e4:78:b7:8b:d0:54:b3:ef:ba:bc:
                    a0:93:7d:94:71:ca:b1:8b:3b:41:b0:28:6f:0f:23:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:11:67:12:3D:AB:80:67:0F:E5:D1:30:22:F8:F6:B5:AE:A0:CB
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:5f:6b:2d:67:e9:b2:73:dc:ed:51:c9:b0:3b:b3:61:84:
         46:35:67:86:34:8e:3e:37:cd:a8:c5:58:e4:66:89:f5:cd:ca:
         2d:73:a4:3e:ad:88:74:33:85:f5:ed:92:70:98:6c:38:40:02:
         c1:70:41:eb:e0:e3:c2:03:69:3c:43:29:9b:33:3f:f0:38:5d:
         10:bb:c3:fd:56:81:5e:fe:0b:9b:4c:8c:98:27:f9:54:f2:63:
         1a:11:10:49:42:b3:8c:da:e8:07:a6:16:78:45:b6:10:17:00:
         6b:45:73:2c:86:34:a2:c9:65:ca:cb:a4:07:0a:a3:da:16:0e:
         1e:61:6e:7d:07:fc:cc:54:98:a6:aa:b6:6d:b0:76:0f:5d:23:
         2c:2c:a7:6f:e9:8a:b2:1f:4a:c5:0b:e3:3e:5f:31:7c:10:f6:
         55:04:08:c1:0d:b5:54:11:02:8a:05:63:c6:83:5a:75:6d:6d:
         ca:52:bf:c0:23:af:ed:c6:36:5f:e4:59:84:a1:32:ee:74:58:
         00:b4:3d:d7:50:08:9c:a0:3c:41:7f:ee:ca:22:2b:d7:13:e0:
         23:40:4e:14:f6:19:82:3f:e1:c8:15:23:fc:7c:7d:05:a2:1a:
         77:75:c7:0c:57:34:b1:8c:16:80:1f:7f:f8:ef:cc:a4:e0:16:
         08:27:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:39 2025 by rpki-client