Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa
File:                     3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa (raw, json)
Hash identifier:          VLTGX+DBMoHo4TqxrlcWda72gQ3NcyO4cm0jSTtLFtM=
Subject key identifier:   5C:77:E2:9C:20:33:60:2D:A1:CE:9C:5B:64:4B:E6:A7:EA:E2:8A:99
Certificate issuer:       /CN=5A8812394683FF664E1D37D3FF52295E5DB57FBF
Certificate serial:       0652036592309C9DA16378C7A40CA1246F88459E
Authority key identifier: 5A:88:12:39:46:83:FF:66:4E:1D:37:D3:FF:52:29:5E:5D:B5:7F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa
Signing time:             Mon 23 Jun 2025 14:27:35 +0000
ROA not before:           Mon 23 Jun 2025 14:22:35 +0000
ROA not after:            Mon 22 Jun 2026 14:27:35 +0000
asID:                     270430
IP address blocks:        190.111.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:52:03:65:92:30:9c:9d:a1:63:78:c7:a4:0c:a1:24:6f:88:45:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8812394683FF664E1D37D3FF52295E5DB57FBF
        Validity
            Not Before: Jun 23 14:22:35 2025 GMT
            Not After : Jun 22 14:27:35 2026 GMT
        Subject: CN=5C77E29C2033602DA1CE9C5B644BE6A7EAE28A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:7f:e4:f7:bd:c1:46:f8:d2:8a:b6:30:00:
                    eb:c8:87:7f:ac:df:ba:1e:b4:47:da:80:74:85:44:
                    2c:01:6f:ad:2d:a2:39:41:25:8d:2b:94:91:7b:76:
                    48:a5:d9:52:75:b3:f5:a6:88:01:54:62:6b:b1:fd:
                    92:43:bf:b3:70:c5:a7:dc:65:62:48:fe:0b:b4:b0:
                    c7:4c:31:ab:d6:7d:25:ea:a8:ab:05:a6:43:97:c7:
                    3d:f7:5f:70:68:87:76:50:cd:78:67:c9:0c:df:22:
                    84:2b:76:0d:2c:6b:72:ef:5b:65:01:41:0b:db:d1:
                    b5:e6:07:b2:7c:25:b5:56:6f:ad:8f:65:a2:e7:2d:
                    8f:af:4c:1d:21:68:82:dd:01:7c:8c:c8:5f:25:13:
                    ac:e8:56:d4:4e:cc:5a:26:c8:f7:85:f5:91:32:82:
                    28:af:6c:67:37:92:2c:76:c6:cf:39:6e:89:df:ef:
                    94:81:88:59:68:63:18:d6:2f:84:73:b1:9c:84:9f:
                    de:64:3d:b2:b3:6a:a7:87:77:f9:54:3d:83:8f:5a:
                    50:1a:88:58:f1:9e:ba:00:15:44:91:f0:23:4b:63:
                    ea:aa:1e:dd:9f:f3:66:07:b4:2e:b7:12:8f:d5:6b:
                    4a:02:f1:38:fe:9c:ef:41:77:04:be:85:0f:d7:4b:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:77:E2:9C:20:33:60:2D:A1:CE:9C:5B:64:4B:E6:A7:EA:E2:8A:99
            X509v3 Authority Key Identifier:
                keyid:5A:88:12:39:46:83:FF:66:4E:1D:37:D3:FF:52:29:5E:5D:B5:7F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:c2:c6:86:18:fa:6b:b7:2b:e8:e9:dc:a0:96:4b:1b:4d:
         8d:9c:66:ec:b2:67:1c:4b:e6:9b:73:bb:9c:61:5e:12:c7:eb:
         f0:09:c2:47:be:a4:cc:26:58:cf:ae:0f:93:7a:d1:2c:ba:ac:
         56:fe:7e:c6:d7:3b:65:7d:49:5c:7c:5f:e8:3c:79:ba:a0:8c:
         a3:6c:cd:15:7a:72:48:69:8f:fe:64:a2:8c:d9:b4:5b:c3:6a:
         a5:3b:16:84:7a:71:6c:ba:ab:fa:de:a2:e8:c5:61:36:47:8d:
         4f:8e:34:a4:29:b8:cd:2f:f8:d6:98:a6:6f:ad:d0:2d:e9:89:
         56:7a:fa:39:ce:22:0b:6b:44:4a:d6:1b:c0:aa:c6:dc:f3:00:
         62:14:d4:f4:25:2d:45:70:18:f9:05:e0:6d:7f:a3:31:4c:22:
         35:08:84:b8:ea:53:16:0d:47:96:4c:e8:08:1d:f0:10:c7:ac:
         ef:9e:3c:f9:90:0d:4e:47:58:17:38:a4:36:92:b7:4c:e8:c5:
         76:8b:c6:de:93:5f:51:b8:37:07:99:b1:63:22:92:e8:bf:6a:
         05:5f:4f:71:64:49:26:e5:db:c3:a0:8d:00:21:db:49:f0:ad:
         e1:2c:1e:73:26:1a:44:4b:c6:8c:bc:1f:17:25:c3:59:21:ec:
         c0:ac:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:22:05 2025 by rpki-client