Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/3139302e38392e3138342e302f32322d3332203d3e20323730333930.roa
File:                     3139302e38392e3138342e302f32322d3332203d3e20323730333930.roa (raw, json)
Hash identifier:          aaTHCtvQjvGprR48IK6fT6EHOiq+SsEd2R2nhnETAVE=
Subject key identifier:   3B:EA:22:F2:BB:5A:CB:A8:5B:59:B6:56:18:C7:E7:1A:1B:CC:9F:D5
Certificate issuer:       /CN=15730E3A6867D29F195428CD09644FEB75828102
Certificate serial:       34819350C4FA667A4FE9472B27C388E5778B89E9
Authority key identifier: 15:73:0E:3A:68:67:D2:9F:19:54:28:CD:09:64:4F:EB:75:82:81:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/3139302e38392e3138342e302f32322d3332203d3e20323730333930.roa
Signing time:             Tue 19 Aug 2025 18:47:51 +0000
ROA not before:           Tue 19 Aug 2025 18:42:51 +0000
ROA not after:            Tue 18 Aug 2026 18:47:51 +0000
asID:                     270390
IP address blocks:        190.89.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.crl
                          rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:81:93:50:c4:fa:66:7a:4f:e9:47:2b:27:c3:88:e5:77:8b:89:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15730E3A6867D29F195428CD09644FEB75828102
        Validity
            Not Before: Aug 19 18:42:51 2025 GMT
            Not After : Aug 18 18:47:51 2026 GMT
        Subject: CN=3BEA22F2BB5ACBA85B59B65618C7E71A1BCC9FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:74:7d:23:1a:aa:35:bb:c6:85:2e:56:c7:
                    f6:90:53:58:23:03:b4:c1:ed:73:93:b3:ae:8b:06:
                    c4:cd:e9:ad:13:d6:1e:7b:9e:f1:c2:2b:32:57:a0:
                    c1:e9:a2:65:85:19:78:0c:9d:3e:8a:43:a5:59:90:
                    5c:5b:c4:6a:32:3c:d7:78:e2:f8:8d:e0:ac:d2:49:
                    33:95:07:70:41:a1:8d:f8:e0:da:78:6f:30:09:07:
                    84:83:80:8a:62:3a:9a:c1:99:40:f1:e6:97:a7:9c:
                    c3:ac:6e:a4:f0:db:8b:e2:da:cf:f5:f7:b8:83:e9:
                    47:23:53:5a:20:bb:f8:7f:68:39:bd:34:3f:ae:04:
                    8f:cc:4c:60:16:fa:33:18:ce:68:0c:0e:57:07:d1:
                    87:4c:72:3f:89:02:18:bf:16:8f:a5:e5:b4:14:20:
                    dc:8c:a4:8b:b4:d4:85:c2:58:73:52:a0:ea:6c:a1:
                    91:70:12:06:a0:e3:06:62:1a:95:7e:ac:6b:02:a0:
                    f5:41:0e:0a:01:67:b1:c3:1c:27:94:1d:a6:0c:2c:
                    f4:79:f6:99:d7:28:42:5b:a3:93:f8:8e:12:93:e0:
                    02:5a:01:45:f9:e9:92:c1:03:d5:b3:ff:55:9f:9a:
                    22:24:03:00:3e:eb:c6:97:19:be:f8:41:7c:18:67:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EA:22:F2:BB:5A:CB:A8:5B:59:B6:56:18:C7:E7:1A:1B:CC:9F:D5
            X509v3 Authority Key Identifier:
                keyid:15:73:0E:3A:68:67:D2:9F:19:54:28:CD:09:64:4F:EB:75:82:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/3139302e38392e3138342e302f32322d3332203d3e20323730333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:c6:e7:92:16:21:1a:b9:1c:c6:43:51:c1:6f:f2:48:5c:b1:
         4e:c4:b3:31:83:c9:bb:b8:7a:56:c5:25:64:89:2e:f5:63:69:
         bd:bd:bc:d0:78:74:5f:8c:4f:71:a2:99:8f:d7:fc:07:55:6b:
         24:69:2b:38:70:a7:8d:13:2e:20:4c:b4:4a:2e:0e:e1:db:07:
         b6:47:6a:48:0c:2f:ae:68:b1:71:e1:f2:bf:6b:f8:0c:03:69:
         0c:06:df:7b:ac:58:3f:27:b1:cc:e7:68:38:c0:97:45:8c:f9:
         27:fa:28:b2:11:0c:e2:ce:4c:0d:ce:4f:b8:26:54:1e:48:b0:
         30:82:ff:b0:07:5a:07:bc:91:bd:c3:6c:fa:fe:c2:57:6d:a6:
         f3:48:79:da:c8:b8:ac:9a:9c:06:fe:83:9e:a9:f7:da:71:3a:
         29:31:f5:d9:97:ad:ff:c1:02:b5:e4:14:ea:5a:45:d3:d8:a5:
         82:85:a2:ba:63:86:f3:a6:05:27:46:4d:b8:ed:08:23:4a:2a:
         dd:a6:b7:8b:8b:23:a1:be:b9:78:b5:89:d8:cd:bd:3a:c3:8c:
         c6:8b:d7:42:04:32:9c:e9:26:73:3b:57:7d:2d:c8:6b:c1:5e:
         d5:1f:6c:c6:be:41:04:b7:fb:e5:b7:b8:ce:1b:33:f2:8e:9c:
         44:24:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:22 2025 by rpki-client