Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa
File:                     3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          9aWUJjdCvMKMNojIb+aXU5TUiDYdpfm1zeJIRYJDi+Q=
Subject key identifier:   04:5D:03:F0:27:78:E1:F3:02:FD:13:54:6F:BC:FA:DF:9C:3B:39:50
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       66FBE07DCB6D0266D03BB4697F513AC30C27C74F
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:21 +0000
ROA not before:           Fri 17 Oct 2025 11:55:21 +0000
ROA not after:            Fri 16 Oct 2026 12:00:21 +0000
asID:                     267991
IP address blocks:        192.100.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fb:e0:7d:cb:6d:02:66:d0:3b:b4:69:7f:51:3a:c3:0c:27:c7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:21 2025 GMT
            Not After : Oct 16 12:00:21 2026 GMT
        Subject: CN=045D03F02778E1F302FD13546FBCFADF9C3B3950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:4b:e8:21:31:06:6d:7d:c7:77:e2:a0:62:
                    cc:03:d0:03:00:64:c3:73:2a:b7:41:d0:2b:e7:e5:
                    55:db:f3:eb:76:72:2f:e9:cf:ad:f6:3a:9a:06:15:
                    af:78:b4:86:6e:4d:d0:f4:3d:1a:ac:28:d5:60:3d:
                    46:2b:47:2f:c0:ef:f5:07:19:5d:ae:c2:d3:e5:b5:
                    8e:fb:d1:71:37:be:1b:ff:72:5b:b5:ba:4c:12:f8:
                    4b:0d:76:f8:2e:c4:13:30:17:99:97:09:bb:6c:9d:
                    6d:a2:1d:ab:1c:e3:08:da:ec:00:e6:80:d3:a0:11:
                    33:9b:4b:c8:7c:e7:3f:e2:e6:c8:04:b8:96:0a:85:
                    05:23:e5:da:73:9c:f5:23:3f:43:50:ca:b5:84:ea:
                    ff:d6:98:95:c4:18:cc:4c:41:44:f6:0f:fd:e6:6a:
                    dc:ca:75:64:36:7b:b9:b3:a9:98:33:21:df:45:6d:
                    8d:81:96:25:84:18:20:c4:d3:1f:53:5c:ab:33:3b:
                    a3:4a:b5:22:1e:51:2e:54:30:73:f5:86:55:9d:4f:
                    e5:7f:4c:30:f4:3c:c1:1c:53:73:89:35:52:e4:af:
                    d7:4e:7d:3c:42:aa:5c:7c:14:c9:9c:2a:87:1c:22:
                    b5:18:b0:60:b8:bc:ac:1f:4c:42:6d:a8:23:87:6c:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5D:03:F0:27:78:E1:F3:02:FD:13:54:6F:BC:FA:DF:9C:3B:39:50
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:79:5e:5d:d6:6a:78:71:f8:cd:d5:5d:65:49:83:f6:15:
         e5:f2:8a:71:2d:ae:5c:d9:68:ae:c2:c0:48:07:3f:71:93:c7:
         58:70:62:4c:25:35:fb:b3:46:96:d6:51:1a:a8:38:cf:e3:35:
         6a:50:04:c5:41:b6:c7:b7:e0:ac:9e:95:48:4d:4e:80:04:47:
         1d:84:ef:09:68:20:4c:56:4a:81:b6:0b:11:52:0e:5a:25:d0:
         77:95:0c:fa:b5:af:07:78:24:40:f4:17:7b:c9:eb:c7:b2:c1:
         ce:e9:60:e5:58:ec:2c:4f:b3:47:0b:b8:89:1e:72:26:b4:ae:
         e4:cb:da:a4:5c:1a:70:d8:db:36:d6:24:6d:eb:82:a6:b2:18:
         30:ba:3e:41:ad:b2:cd:9b:8f:6f:4a:c5:74:20:4e:48:53:24:
         31:be:9a:72:e2:33:24:80:9c:a9:e0:ef:dd:43:3d:d9:ef:88:
         40:e1:d8:3c:3e:97:98:a0:17:36:62:a1:7a:1d:40:74:e1:07:
         7f:0e:f0:01:cb:bc:d0:c2:44:b6:5d:5c:e9:00:f6:af:61:60:
         b9:14:dd:51:a7:93:82:91:75:c0:06:2e:c4:20:9e:ed:23:63:
         9f:77:c9:e5:39:06:d9:2d:e6:31:a0:e6:04:18:09:70:5c:cd:
         4d:28:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:42 2025 by rpki-client