Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa
File:                     3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa (raw, json)
Hash identifier:          xqyWoQ/9M2OUuBxNFN7E/5Y7WE1OFizvLFSuLEWj9aY=
Subject key identifier:   2A:26:89:AB:69:99:ED:30:91:F8:A0:CB:9A:AC:34:28:0D:EA:3E:34
Certificate issuer:       /CN=5A8812394683FF664E1D37D3FF52295E5DB57FBF
Certificate serial:       52CC646A4E662AE4CCFC234ACC23762287FA25BC
Authority key identifier: 5A:88:12:39:46:83:FF:66:4E:1D:37:D3:FF:52:29:5E:5D:B5:7F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa
Signing time:             Mon 23 Jun 2025 14:27:34 +0000
ROA not before:           Mon 23 Jun 2025 14:22:34 +0000
ROA not after:            Mon 22 Jun 2026 14:27:34 +0000
asID:                     268605
IP address blocks:        190.111.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cc:64:6a:4e:66:2a:e4:cc:fc:23:4a:cc:23:76:22:87:fa:25:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8812394683FF664E1D37D3FF52295E5DB57FBF
        Validity
            Not Before: Jun 23 14:22:34 2025 GMT
            Not After : Jun 22 14:27:34 2026 GMT
        Subject: CN=2A2689AB6999ED3091F8A0CB9AAC34280DEA3E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:bf:3f:9f:06:8b:c9:83:d4:eb:c3:3b:23:
                    bf:ea:2e:f5:57:74:76:1b:14:fb:40:21:6e:cc:19:
                    a2:e3:2d:30:fb:4a:97:82:17:60:84:9d:0e:d3:2b:
                    6e:11:17:47:9b:d6:ae:b7:9a:4b:87:07:0e:44:94:
                    3e:7f:5f:4b:49:1a:77:75:a8:df:be:6d:ef:2f:13:
                    f2:ce:40:8e:3c:33:13:fd:a0:08:ab:a4:5d:0a:78:
                    4f:9e:8b:3f:d2:2f:86:37:00:b2:78:75:34:cf:2f:
                    46:a3:81:77:19:74:59:88:14:5a:53:cc:3c:1e:c6:
                    09:aa:e3:e0:21:76:9e:eb:2c:70:6b:c7:8f:a4:6b:
                    de:37:f5:69:f7:e5:ae:1f:0d:b6:cf:44:d7:55:f4:
                    ed:33:f5:2b:5a:fc:de:ba:85:4d:3c:dc:65:dd:cb:
                    73:b7:2f:ed:11:60:73:0a:d2:ed:58:74:fc:ac:45:
                    9e:d1:2d:24:b5:a2:36:65:c9:8a:bd:29:ab:74:55:
                    99:d6:b6:b8:1b:39:0c:8c:ac:c9:d2:b3:38:16:fe:
                    2e:39:0d:0f:48:41:59:aa:16:ba:28:1e:d2:72:2c:
                    eb:2d:8e:b8:03:1c:0e:5f:3d:0b:fd:e5:3e:db:c8:
                    57:8d:3c:8b:5b:1d:83:81:c1:6f:36:7f:46:85:93:
                    2c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:26:89:AB:69:99:ED:30:91:F8:A0:CB:9A:AC:34:28:0D:EA:3E:34
            X509v3 Authority Key Identifier:
                keyid:5A:88:12:39:46:83:FF:66:4E:1D:37:D3:FF:52:29:5E:5D:B5:7F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:3b:74:6b:1a:c9:75:8d:bb:7d:d6:23:2a:29:61:20:16:d6:
         ad:b9:8a:c0:d1:b6:90:66:92:bc:79:b6:80:ba:5f:3b:15:ee:
         e9:03:3e:f3:d7:3e:ae:a7:5d:16:19:2b:f9:d3:27:2f:f3:fb:
         77:04:32:76:e9:76:37:a6:9a:7b:b0:e3:33:a1:e7:a0:c1:b3:
         4b:3d:b1:9f:b3:cc:1e:3b:41:5d:b9:2a:e2:d6:5a:f0:71:31:
         2f:a8:c0:60:40:d4:6a:05:5d:76:ed:c9:a8:09:f4:31:4d:c3:
         fd:e8:70:5c:88:aa:d0:13:a8:9c:11:4c:30:65:95:1d:19:22:
         51:f2:a7:f4:4d:e2:a6:d6:6d:8e:7c:a7:0f:37:c8:b1:7e:7a:
         5c:f6:55:23:aa:cb:d0:c9:62:ef:12:63:c6:80:60:95:61:8b:
         86:cc:79:ca:70:8d:af:fe:f0:4a:82:23:58:40:dc:74:78:27:
         5a:75:10:fe:39:31:23:b2:e8:bc:fd:bd:1e:c4:a9:36:fa:95:
         e1:ed:d5:b2:26:1f:20:2d:a5:5d:79:05:c8:86:33:ce:d2:13:
         5d:a9:30:91:48:54:70:80:f3:fb:7e:d7:af:92:b6:92:f8:5e:
         97:77:b0:3f:e6:19:89:c8:8b:4a:ad:a5:fe:ff:5d:87:f5:f1:
         c3:b1:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:28:47 2025 by rpki-client