Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139322e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3139322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          oLnplGJKchKZ69riUJvwSH/YgjVjVVR3UiQwZVhTiwk=
Subject key identifier:   A7:28:63:1F:9C:EA:1E:0D:6D:BB:AD:4B:21:09:F3:1C:31:C8:FE:C0
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       067E0B49BD571E7F4D2F7AA638AC277AA09524EE
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139322e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:14:02 +0000
ROA not before:           Mon 20 Oct 2025 12:09:02 +0000
ROA not after:            Mon 19 Oct 2026 12:14:02 +0000
asID:                     27715
IP address blocks:        191.6.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7e:0b:49:bd:57:1e:7f:4d:2f:7a:a6:38:ac:27:7a:a0:95:24:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 12:09:02 2025 GMT
            Not After : Oct 19 12:14:02 2026 GMT
        Subject: CN=A728631F9CEA1E0D6DBBAD4B2109F31C31C8FEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:19:3c:a1:16:5c:cd:87:63:11:7e:8f:6b:
                    37:d2:93:1c:2a:08:01:9f:3d:47:84:19:bf:0b:d3:
                    8c:55:a1:0c:4f:47:f6:45:c5:67:26:0f:2c:4a:e2:
                    b6:e4:77:96:5f:ff:57:a3:21:2d:32:30:05:1f:0e:
                    bc:b8:d0:49:0e:97:ff:91:59:cd:81:44:bd:2b:36:
                    4e:9d:ef:aa:81:30:91:73:5b:d3:90:65:58:ee:75:
                    11:d8:d6:c7:95:11:b3:c6:cc:f6:bd:84:44:87:9e:
                    7a:ff:48:b8:b0:a5:06:13:ab:7d:b8:b8:c1:c0:86:
                    83:4c:aa:24:4b:69:6d:b3:6f:69:77:bf:78:5b:e9:
                    24:29:be:6f:08:45:25:a2:15:b8:be:af:81:8e:68:
                    43:a8:ce:86:9e:5f:9a:44:05:c8:3a:a5:46:df:ff:
                    cb:24:da:24:20:3c:39:fa:99:72:4e:d4:ac:8a:ef:
                    95:c4:fb:d4:82:ec:dc:16:db:78:94:aa:d1:b7:9c:
                    5e:74:05:a4:dd:1b:70:49:5e:d4:85:35:70:87:38:
                    d3:30:9c:95:d7:13:01:63:bb:72:f3:27:4b:87:eb:
                    98:4f:5c:24:2e:1a:32:33:bf:37:1e:c2:ec:44:a1:
                    3b:5c:e1:78:2e:6f:88:7b:30:50:b2:42:4b:85:f3:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:28:63:1F:9C:EA:1E:0D:6D:BB:AD:4B:21:09:F3:1C:31:C8:FE:C0
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139322e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:5e:cd:70:f4:28:ab:52:e1:46:50:8e:62:a3:1d:68:56:
         b8:5f:d6:2f:5e:a4:aa:21:b8:d3:fa:95:50:0f:e2:bb:5b:ca:
         25:41:87:9e:bc:0f:fe:8e:e7:60:09:42:04:28:01:53:ff:0e:
         50:ff:6c:5f:96:de:72:68:8b:4e:60:78:70:14:a1:0f:65:76:
         16:5b:bf:81:67:19:ae:f0:13:a1:9f:05:da:01:fe:3e:95:de:
         80:26:03:a5:0a:91:56:cb:45:13:cb:1e:b5:da:bd:00:be:95:
         af:ed:ad:56:e2:76:6a:f0:da:47:70:87:3b:85:10:e1:e6:b1:
         be:f3:38:b7:a8:0c:c6:2e:47:f5:31:e7:32:37:e3:20:97:9e:
         98:eb:88:1a:c9:92:07:6d:e0:32:df:35:b5:92:d0:dc:17:1d:
         54:c0:e1:55:80:11:b1:96:88:80:68:20:93:fd:7d:dd:76:cd:
         0d:f1:73:12:a9:fe:d1:a0:7b:e6:bf:43:1e:62:fc:ad:53:60:
         69:8a:d8:1a:e9:a3:02:c7:4b:26:45:ff:d3:b2:d9:8f:51:f3:
         e5:32:83:cb:94:ea:f1:48:cb:13:1a:c9:ae:ea:b3:0e:59:86:
         7f:05:9c:c4:8b:48:9d:28:b5:d3:d7:ef:e8:62:60:94:70:4b:
         85:ed:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:09 2025 by rpki-client