Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139382e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3139382e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          nDHztNc/eZsaHtCb1veThq5tZrI2rM7ZYOHKcNHXbGk=
Subject key identifier:   14:63:3B:C0:E9:83:EB:23:B9:50:1F:61:E0:33:D5:AE:9F:80:C0:41
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       36274F637B52A65F6A993150EB1484F8777180D7
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139382e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:16:10 +0000
ROA not before:           Mon 20 Oct 2025 12:11:10 +0000
ROA not after:            Mon 19 Oct 2026 12:16:10 +0000
asID:                     27715
IP address blocks:        191.6.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:27:4f:63:7b:52:a6:5f:6a:99:31:50:eb:14:84:f8:77:71:80:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 12:11:10 2025 GMT
            Not After : Oct 19 12:16:10 2026 GMT
        Subject: CN=14633BC0E983EB23B9501F61E033D5AE9F80C041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e3:b1:f7:22:74:ac:a2:99:ea:5a:82:13:ec:
                    55:42:dd:f3:fd:b9:81:5b:73:bf:43:27:b7:bf:fd:
                    1a:da:55:ba:28:3d:95:d5:13:d4:e5:b0:ed:01:8a:
                    7a:6d:06:fd:52:00:cb:b9:d0:00:e7:b2:6a:a9:72:
                    49:11:3f:c0:bb:9d:d5:2e:ae:b4:55:db:ed:56:d1:
                    61:c8:cc:45:e0:30:34:50:37:48:b0:4a:df:ab:ac:
                    53:40:9b:5e:fa:19:0e:76:e0:11:bb:bc:fc:5e:08:
                    8d:9d:49:89:17:24:6e:d9:e3:44:75:78:20:43:b7:
                    b8:db:17:8a:eb:53:39:3a:37:e5:0f:49:c4:49:63:
                    6b:bc:ae:2f:36:a8:19:17:d6:9a:68:6f:49:32:11:
                    24:3f:36:73:48:99:9e:76:88:3e:f5:be:b9:eb:3f:
                    1c:29:6a:5c:d5:68:5b:d9:12:6e:3a:a0:a0:75:71:
                    e4:fa:0b:ab:ea:e2:ea:ac:28:d7:cd:1c:45:1c:ce:
                    79:3d:e5:f6:69:22:de:c3:4c:b0:30:a8:77:15:51:
                    ee:c1:66:4d:c5:de:ef:2a:61:8c:43:97:d3:2c:41:
                    22:0d:d2:b1:69:7d:21:60:ec:f3:1c:04:f2:ef:04:
                    a9:9f:29:76:4b:15:c2:43:f6:bd:85:04:e0:e2:42:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:63:3B:C0:E9:83:EB:23:B9:50:1F:61:E0:33:D5:AE:9F:80:C0:41
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139382e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:70:3c:86:56:5e:7b:a5:4f:0a:be:05:88:5c:68:f3:ed:
         a6:c1:79:5b:dc:d2:55:4c:72:5a:4b:3f:1f:6b:58:57:aa:c3:
         cb:83:ec:f7:a0:65:bb:0c:8c:b3:c8:ce:45:d8:93:43:ec:c0:
         51:3f:00:dd:ae:92:e2:84:25:f2:1d:99:81:4b:f1:b2:38:be:
         01:df:c6:d2:57:ac:85:2e:02:fd:07:83:f1:0b:44:5b:b8:17:
         5e:35:50:e4:b4:c5:3b:bc:91:5e:5d:d3:8e:39:f3:1f:0e:b4:
         61:06:6c:28:78:04:f3:44:24:e5:36:74:49:7d:fb:66:88:e4:
         11:bd:a3:04:9a:f3:31:ef:ee:5e:36:55:13:07:04:34:c0:64:
         e9:dc:1d:fb:bd:7d:b8:f3:ad:b7:27:90:b9:8a:f2:86:d7:c8:
         41:a1:08:07:1b:7c:a2:dc:41:77:3d:4e:fc:04:40:c0:d7:f6:
         4a:2c:98:85:96:cf:10:f4:59:ce:a3:30:ea:f1:42:53:87:5e:
         3d:bc:a2:38:4e:f5:eb:31:b9:d5:db:cd:1b:93:d4:4a:cc:14:
         36:b2:03:de:d3:6a:88:96:1d:c5:2c:47:e5:27:e9:ac:25:db:
         86:fb:c7:40:d5:77:0e:d9:e3:54:59:68:bc:c2:aa:a8:35:70:
         41:85:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:21 2025 by rpki-client