Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139332e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3139332e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          Vahd63GZp92J21AwAOn+OoyRMbSxWvL2XjKMxbHsbgk=
Subject key identifier:   25:2D:1D:C3:85:E0:79:5D:07:1C:C3:42:8C:E9:07:E5:F2:43:78:31
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       5E2AB7DB07AB77FBD0BB9CF01F24C3AA628E4E38
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139332e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:14:13 +0000
ROA not before:           Mon 20 Oct 2025 12:09:13 +0000
ROA not after:            Mon 19 Oct 2026 12:14:13 +0000
asID:                     27715
IP address blocks:        191.6.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2a:b7:db:07:ab:77:fb:d0:bb:9c:f0:1f:24:c3:aa:62:8e:4e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 12:09:13 2025 GMT
            Not After : Oct 19 12:14:13 2026 GMT
        Subject: CN=252D1DC385E0795D071CC3428CE907E5F2437831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:8a:45:4e:01:e0:26:77:32:54:51:d0:f3:
                    d9:13:89:fb:89:73:f0:6d:f3:ac:3c:4b:e0:af:a6:
                    70:03:da:5c:87:e2:d5:32:79:28:e3:8f:45:1d:b8:
                    63:1a:1f:5b:b1:f7:f5:23:83:06:7f:39:3d:88:b0:
                    e4:47:5b:c1:dc:5c:f4:71:b0:06:8b:95:c0:5f:bd:
                    53:a2:7c:27:75:ec:59:c3:4f:a7:64:b8:90:42:30:
                    1f:70:4b:04:ee:cd:ba:93:57:44:fa:3f:c3:26:72:
                    d4:f8:c3:3c:c5:dd:6b:e9:e9:08:d7:20:e2:c4:d1:
                    8e:48:51:b0:e1:ba:a6:b1:80:27:27:93:42:ed:c4:
                    4a:fd:a1:4b:2a:c4:50:9c:ce:10:1b:b7:99:c6:b1:
                    f4:0a:ce:75:2b:d1:54:f7:3e:a0:28:c2:ca:93:dc:
                    df:ee:ef:c0:91:5d:91:e9:7d:cb:19:a8:14:e6:fa:
                    ea:39:a3:19:1c:30:44:26:29:2a:ec:c0:e9:d1:d5:
                    85:e0:b0:6a:58:da:07:67:13:4c:61:2d:b1:6d:58:
                    5c:1d:d7:8c:22:26:4c:17:c1:f7:16:17:29:24:91:
                    1a:27:93:87:94:d0:44:4f:b5:10:75:c1:74:1f:0f:
                    03:22:aa:63:67:6a:4b:eb:06:c6:a7:2d:0c:e5:8d:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2D:1D:C3:85:E0:79:5D:07:1C:C3:42:8C:E9:07:E5:F2:43:78:31
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139332e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:a5:23:01:72:8c:87:4c:1d:2a:6d:f9:df:1c:7f:64:69:
         6d:fd:a8:88:d5:ee:16:30:4f:19:3a:1a:a1:55:1a:c1:58:66:
         ae:cc:1e:d5:ca:09:af:27:0b:fa:e0:ec:b5:3e:2d:e6:56:43:
         e2:dc:e9:b3:0a:de:b8:5c:f8:71:fa:2f:38:29:01:f0:83:2c:
         fc:a6:79:fd:a3:5a:74:e7:3a:cf:45:86:4c:83:27:a2:5a:8f:
         fc:b9:77:fc:90:2f:52:ef:34:7e:3b:74:f3:8f:32:80:02:0c:
         63:bb:43:e1:08:6f:45:43:87:45:c9:fd:d4:ad:bc:ee:cb:d2:
         6e:dc:79:a3:98:66:e6:81:32:cf:6c:cf:df:33:a2:77:3d:71:
         df:17:7e:5c:67:b8:f0:92:c4:68:b8:03:85:6b:e9:65:d0:5f:
         db:7c:01:26:e5:ea:b5:d8:3b:a9:b7:7e:0b:5b:6d:75:59:3b:
         7c:13:1c:dd:ad:d2:71:62:dd:f7:91:ff:d8:97:eb:6c:03:9c:
         26:6c:7b:31:49:a2:e4:53:08:94:ed:74:7e:f3:9b:b6:58:c0:
         07:41:e0:77:02:57:f3:3f:ba:fa:4d:77:dc:b4:76:6e:dc:47:
         15:6a:e9:3c:a8:b6:f1:53:29:8c:79:82:fa:fe:be:12:dc:31:
         ac:03:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:26 2025 by rpki-client