Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (raw, json)
Hash identifier:          XsvSwhJsvhiN3zT4zP/EO47T43tGtKD9SfW4Q24OOT4=
Subject key identifier:   DD:F7:E6:BD:8C:3E:CC:56:B7:D6:C2:18:52:A8:EC:4C:F5:E0:67:DE
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       622142993BE6F4CC07211189DDB7208274BF254E
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa
Signing time:             Mon 30 Jun 2025 13:05:42 +0000
ROA not before:           Mon 30 Jun 2025 13:00:42 +0000
ROA not after:            Mon 29 Jun 2026 13:05:42 +0000
asID:                     269712
IP address blocks:        190.112.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 18:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:21:42:99:3b:e6:f4:cc:07:21:11:89:dd:b7:20:82:74:bf:25:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Jun 30 13:00:42 2025 GMT
            Not After : Jun 29 13:05:42 2026 GMT
        Subject: CN=DDF7E6BD8C3ECC56B7D6C21852A8EC4CF5E067DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:f3:8d:1e:88:af:98:78:91:a9:9c:eb:ee:
                    15:ba:81:39:41:4c:81:4b:d7:3b:96:c1:cb:56:1a:
                    0e:5e:93:d6:df:ef:f9:96:47:ef:80:ee:73:02:7f:
                    55:31:7e:11:bc:e9:fd:58:48:40:03:63:c5:89:ed:
                    45:2a:c2:4f:42:9f:d9:49:b7:11:e9:80:f9:1f:7e:
                    82:8d:84:2a:a6:3a:85:38:6e:05:50:3c:6c:b0:88:
                    80:22:a1:e9:f6:f4:41:50:28:f3:5f:6b:d1:f3:5e:
                    60:b5:b3:1e:95:47:d0:aa:22:6a:51:e8:a0:45:b4:
                    88:4a:b1:f4:67:49:0f:fb:43:83:0f:e4:6a:28:31:
                    63:39:4d:c3:96:4f:f0:2c:d7:c4:e4:54:75:f4:7b:
                    2e:f8:36:6f:ef:ef:86:b7:dd:cd:88:3e:b5:c2:b3:
                    6f:26:b2:e8:9d:81:cf:97:e6:8f:10:39:6d:be:74:
                    2a:99:f2:cc:cf:0e:32:a2:2e:95:86:f4:4f:27:12:
                    01:f0:fd:af:81:49:7a:03:4d:4f:7d:09:b1:68:10:
                    6d:fd:1d:2e:fd:c4:6b:b6:42:1b:83:87:ed:00:a7:
                    fd:f4:ad:64:bb:48:a2:37:56:8a:9f:c4:64:bb:32:
                    5d:86:16:08:3c:4b:4e:22:6b:40:44:49:fc:14:9c:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F7:E6:BD:8C:3E:CC:56:B7:D6:C2:18:52:A8:EC:4C:F5:E0:67:DE
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:8f:5c:fa:be:9c:c4:c9:f3:37:b0:a4:bd:22:99:87:fe:
         7a:81:d4:99:8e:12:21:0d:08:b1:16:d9:9b:35:62:be:e5:74:
         4f:3d:4f:81:2c:14:5b:31:44:a8:29:5a:4c:ae:d1:30:6c:2c:
         48:9c:ef:e1:5d:d7:34:05:e0:c1:4b:6e:6f:f1:83:86:e2:53:
         bb:f4:6e:38:79:51:c2:d1:52:92:41:a5:88:65:1e:e6:93:79:
         eb:ac:eb:34:05:ca:d6:7a:dc:9e:84:89:d3:97:d5:48:32:79:
         01:8e:d1:2d:aa:46:12:91:1a:6a:5d:d3:d2:db:a1:bf:75:22:
         ed:e4:40:45:2a:47:fc:9f:3c:de:51:94:a0:08:25:1c:cc:2a:
         21:ca:fc:ef:9b:e4:24:53:c7:39:16:7c:21:9f:6e:df:bd:c5:
         9d:38:74:a0:2c:72:a6:58:24:0f:33:3e:21:25:76:d5:85:da:
         d8:31:93:ee:c1:59:9b:46:a1:7a:95:08:bc:63:15:6a:46:b8:
         f9:c6:c8:0e:12:5a:37:b3:dd:16:49:d7:4a:3a:5c:f8:82:81:
         d4:9c:57:c7:55:dc:e5:94:b9:29:e9:66:26:07:be:27:c7:23:
         e1:68:5d:1d:01:d0:0c:92:86:c7:1c:97:64:34:16:ee:d1:e4:
         d7:64:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:39:11 2025 by rpki-client