Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3230372e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3230372e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          SKqiCMF71aJds0hi2MEu673UTSRoqqylFcR1IQeu2Og=
Subject key identifier:   BB:93:D3:31:F2:06:CA:65:CC:B3:86:75:C3:13:2A:91:D7:6D:BA:30
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       3B927FCFB4A83069FD2F7C27FA3A59A4E17C9525
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3230372e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:19:08 +0000
ROA not before:           Mon 20 Oct 2025 12:14:08 +0000
ROA not after:            Mon 19 Oct 2026 12:19:08 +0000
asID:                     27715
IP address blocks:        191.6.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:92:7f:cf:b4:a8:30:69:fd:2f:7c:27:fa:3a:59:a4:e1:7c:95:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 12:14:08 2025 GMT
            Not After : Oct 19 12:19:08 2026 GMT
        Subject: CN=BB93D331F206CA65CCB38675C3132A91D76DBA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:ed:97:39:4d:b6:2f:39:0d:bf:40:ab:36:
                    eb:13:f6:3d:61:0b:88:5c:c2:c0:c4:d8:91:11:09:
                    01:91:12:4b:48:f5:39:ae:b8:58:65:47:95:cd:63:
                    f8:1b:b0:9a:37:56:5a:e0:e6:e0:8c:7c:09:db:bb:
                    78:35:af:fa:f8:78:64:90:e1:0a:d1:70:eb:9e:2b:
                    66:fd:a8:00:1b:58:87:db:60:0f:1d:cc:b6:39:07:
                    3b:15:8a:23:79:3c:c1:ab:73:1b:6d:5f:ea:d1:16:
                    cd:60:f8:80:41:07:3f:1d:39:7a:66:47:19:b3:7c:
                    f5:07:a3:2f:3a:ef:06:11:6b:e6:e7:6f:2a:51:1f:
                    e8:a2:56:12:b5:91:cf:75:c9:1f:1a:b9:e2:7b:10:
                    b5:77:9f:d3:b3:5a:fa:a5:2c:b2:97:40:a4:99:2f:
                    33:eb:9c:98:d4:3f:2d:71:08:3f:d1:de:af:23:e3:
                    bc:b0:41:88:5c:f2:b3:ce:f3:aa:31:f8:a0:ec:5c:
                    f6:e1:cb:b0:45:06:8e:3c:9b:cd:c6:fb:8b:56:6c:
                    e1:84:07:91:75:92:03:4d:2c:7a:3a:ad:7d:f6:d4:
                    10:ef:35:7d:ea:0f:24:9f:05:96:c4:f4:c2:a0:88:
                    26:c0:6c:23:f2:23:6d:7f:43:85:34:cb:a5:ee:03:
                    03:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:93:D3:31:F2:06:CA:65:CC:B3:86:75:C3:13:2A:91:D7:6D:BA:30
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3230372e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:27:74:58:ff:6b:01:46:64:c1:8c:e4:31:e0:06:30:e6:
         a5:f2:ed:10:61:3c:f0:05:32:fc:61:44:00:9d:2a:2b:1b:59:
         e5:0c:59:1f:7a:52:89:65:11:85:ab:49:39:be:9c:94:c8:20:
         40:be:4c:4c:e7:7e:6b:c7:c9:18:c0:41:b3:f5:f8:cf:1e:09:
         49:8f:d4:64:5f:d8:67:06:49:47:ac:10:33:e5:70:58:f3:bd:
         80:c9:4b:36:fe:e6:1c:26:f9:f1:60:22:6d:ef:eb:54:e5:c7:
         40:8f:9f:51:7e:3d:00:ae:b6:f4:c3:2a:da:b9:90:0f:71:95:
         35:16:7f:0e:6a:94:13:62:dc:e2:b3:93:5b:f4:92:9e:00:a4:
         c7:41:3a:95:44:8b:39:b8:72:71:43:17:27:46:bb:57:4c:f4:
         21:21:65:3e:ee:03:cc:b2:ac:b2:44:f4:26:69:ec:79:46:09:
         01:f5:96:cc:4f:f3:4e:d5:2f:2a:6c:5e:29:e4:e0:4c:23:08:
         84:60:7e:3c:a3:4c:9c:29:76:69:74:d2:61:2d:1a:0f:2d:ac:
         80:2e:29:35:25:05:96:d6:8d:76:40:64:67:21:1d:d7:4d:bc:
         7c:d6:d5:54:10:8a:61:b5:5a:36:b8:7e:00:d9:92:7c:5c:11:
         0f:06:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:12:51 2025 by rpki-client