Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/3139302e38392e3232372e302f32342d3234203d3e20323730343131.roa
File:                     3139302e38392e3232372e302f32342d3234203d3e20323730343131.roa (raw, json)
Hash identifier:          NxytjmURymebGL31JFRgY2udtswSy6yPTMjYE3TflOM=
Subject key identifier:   8A:81:AD:8A:8E:9E:BB:FD:12:F4:74:D0:81:F4:14:1F:E7:9D:82:04
Certificate issuer:       /CN=12C134EB24E98B21A2D6816B023560C23DA02BE0
Certificate serial:       76434ECE09B1DD1A100E492605020F8A68BCF3D1
Authority key identifier: 12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/3139302e38392e3232372e302f32342d3234203d3e20323730343131.roa
Signing time:             Wed 13 Aug 2025 17:32:12 +0000
ROA not before:           Wed 13 Aug 2025 17:27:12 +0000
ROA not after:            Wed 12 Aug 2026 17:32:12 +0000
asID:                     270411
IP address blocks:        190.89.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl
                          rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:43:4e:ce:09:b1:dd:1a:10:0e:49:26:05:02:0f:8a:68:bc:f3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C134EB24E98B21A2D6816B023560C23DA02BE0
        Validity
            Not Before: Aug 13 17:27:12 2025 GMT
            Not After : Aug 12 17:32:12 2026 GMT
        Subject: CN=8A81AD8A8E9EBBFD12F474D081F4141FE79D8204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:11:33:4d:3e:d9:fa:6a:6f:47:e6:87:e9:
                    cf:bb:4a:0b:2f:10:1e:1e:39:6b:49:66:76:52:f5:
                    b4:80:b7:79:d8:2b:89:d8:df:2c:67:2a:af:fc:b2:
                    47:1d:6a:cd:a9:42:64:db:f4:30:fa:a6:20:ee:27:
                    dd:6f:7c:3d:07:b1:66:c3:a8:52:55:3a:be:25:cf:
                    a9:e9:53:c2:42:a8:bc:7f:73:d5:c1:eb:6b:41:90:
                    3c:f0:b1:b8:a4:fb:97:72:df:81:95:d1:5d:ee:ff:
                    30:82:b3:ae:02:8b:7e:2c:b9:ca:21:38:94:d1:41:
                    19:ec:91:87:0d:a3:8a:f6:e0:b2:bb:72:a3:42:aa:
                    37:a4:25:c1:9a:7c:5e:fd:4e:d8:70:54:44:c1:9a:
                    00:b5:18:16:d8:7a:14:72:df:3d:61:9b:22:db:05:
                    4c:b0:96:9e:84:e7:52:76:8f:e6:bf:05:0f:2d:f1:
                    cc:ce:c7:f8:7b:b4:ba:d4:ea:73:85:0d:e1:c4:98:
                    ab:4c:1b:e8:99:28:58:65:a1:92:e0:3a:b8:ce:53:
                    5e:90:a4:ce:c4:a6:a1:60:51:c4:e0:02:4b:25:8e:
                    10:60:11:a3:e5:11:ce:df:11:7b:87:7b:b2:59:a9:
                    21:e2:01:5e:22:58:f4:0e:d1:8a:83:62:be:cb:2c:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:81:AD:8A:8E:9E:BB:FD:12:F4:74:D0:81:F4:14:1F:E7:9D:82:04
            X509v3 Authority Key Identifier:
                keyid:12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/3139302e38392e3232372e302f32342d3234203d3e20323730343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b6:60:bf:4f:7e:26:60:54:86:6f:00:29:48:6d:b4:10:10:
         a3:7a:51:1d:bd:5c:d0:fa:0b:f3:fb:1f:c4:cb:b0:b7:3a:92:
         c0:5f:08:43:3c:9f:5e:bf:99:a9:ff:e6:b4:b8:ae:20:45:d3:
         3b:de:79:79:8c:90:ae:90:f2:75:a1:69:a2:20:9e:36:71:35:
         b3:5e:70:72:83:6f:57:7b:f1:64:75:28:32:ad:b3:b3:8f:56:
         e6:0b:a4:90:55:fe:04:c6:16:aa:a8:65:a6:2d:b7:2b:2f:69:
         ba:97:97:2f:4b:cb:99:5e:2c:71:84:c3:f3:bf:c0:55:0c:e2:
         bf:39:c7:9c:18:5d:46:3f:cc:4e:3f:66:7c:6e:64:d9:c4:23:
         6a:c1:09:a2:82:ea:04:54:d6:ee:a2:ad:13:d6:59:b5:53:39:
         18:f3:6d:1c:84:28:05:02:e3:e6:4e:89:fa:34:45:d4:22:89:
         ee:26:ec:1e:5c:8c:36:ad:5e:be:e7:08:98:2f:68:ce:5c:95:
         ea:61:9b:10:63:ea:55:9c:b2:89:f4:03:ce:4c:07:58:0b:b9:
         3a:39:e7:17:1d:f5:8d:7c:8f:74:d9:e0:23:2c:25:0e:a9:fb:
         ba:73:76:8d:cd:62:79:00:0f:ae:63:7b:cf:2b:bf:66:72:82:
         7e:23:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:40:07 2025 by rpki-client