Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3231322e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3231322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          h39DhFQ/D4h1a13tNAdxHU/5Lx+oqHkbH/hj18nSfNM=
Subject key identifier:   DA:6A:AA:E0:AF:CC:EF:5A:D9:D1:80:E6:CC:78:82:C9:D7:BE:68:0C
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       404F81FC1634873CE25ECCD8882D81A0D309CC11
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3231322e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:21:39 +0000
ROA not before:           Mon 20 Oct 2025 12:16:39 +0000
ROA not after:            Mon 19 Oct 2026 12:21:39 +0000
asID:                     27715
IP address blocks:        191.6.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4f:81:fc:16:34:87:3c:e2:5e:cc:d8:88:2d:81:a0:d3:09:cc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 12:16:39 2025 GMT
            Not After : Oct 19 12:21:39 2026 GMT
        Subject: CN=DA6AAAE0AFCCEF5AD9D180E6CC7882C9D7BE680C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:ad:43:32:27:a1:f3:52:75:ba:d6:82:9f:
                    ab:70:7d:56:d8:82:3c:b5:89:2e:6a:9b:b3:5e:ac:
                    67:e7:6a:a5:aa:ee:f6:34:be:8b:bf:33:d7:67:63:
                    ca:ab:f9:7f:a4:f0:0c:6d:40:b9:26:47:27:c5:eb:
                    87:1f:d2:e6:59:5b:70:b1:2e:1e:45:aa:10:36:0b:
                    51:57:2a:6d:de:b0:25:8c:48:ac:14:11:ef:48:b5:
                    f8:94:df:37:08:c5:22:3b:6b:44:b4:41:b0:a1:62:
                    cd:c3:8d:84:63:c0:cd:4d:10:02:da:44:ff:41:04:
                    b0:1b:ce:51:52:d1:0c:89:05:f9:ff:73:01:ad:47:
                    b1:d8:ee:b1:4e:18:00:c4:76:42:fc:16:9b:73:87:
                    3e:a7:37:b7:16:a9:88:1a:ea:43:26:e0:d7:eb:86:
                    a2:bd:5b:f3:4b:08:1c:37:36:04:aa:2f:42:d8:b0:
                    b2:f7:b0:cc:c3:83:13:61:9b:02:e2:ca:04:d5:3e:
                    d2:c0:18:f4:03:81:c3:57:dd:87:c2:6f:f3:70:84:
                    5e:f7:4b:84:2a:09:b4:3b:e2:46:fc:b3:f5:3f:67:
                    c8:cb:4e:11:fd:cb:6b:c3:40:f9:33:ce:78:31:68:
                    95:a1:51:06:ee:f9:4f:92:b7:00:3f:09:d0:5c:fd:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:AA:E0:AF:CC:EF:5A:D9:D1:80:E6:CC:78:82:C9:D7:BE:68:0C
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3231322e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:80:57:9e:ec:24:f5:1f:ec:3a:a9:fa:7d:f0:53:d7:76:e9:
         6e:77:6b:b5:92:8a:20:80:2c:ad:27:55:0f:73:bb:57:28:a4:
         d0:02:94:70:f8:c6:fe:52:79:93:1e:1d:23:1e:ce:20:c4:df:
         af:da:64:79:ef:25:9b:aa:38:6a:d4:52:d5:2c:19:db:e5:a4:
         d3:34:fe:41:ee:82:fd:14:c6:06:82:1e:6e:32:db:24:5a:db:
         36:e2:1d:01:2f:ee:c3:5d:fe:43:f6:05:a7:c0:bd:ca:fc:7f:
         9f:eb:69:a8:3f:92:ac:a0:68:ac:76:09:6c:29:63:ca:bc:17:
         b9:66:74:fe:5a:f7:38:33:e1:91:1e:3f:48:9e:48:06:c8:7b:
         2a:82:19:9c:23:07:59:5d:34:48:07:a6:51:9b:ee:b5:3c:24:
         8a:db:e3:51:11:cb:17:f3:ea:18:14:0c:f2:d7:a1:58:50:47:
         f2:e3:36:37:51:3b:b3:83:88:ab:f2:f5:2d:fb:87:ec:78:46:
         f6:37:48:e3:48:09:a3:04:79:cc:bb:ae:bd:07:79:7e:ba:55:
         06:dc:31:02:a7:20:0e:30:5b:6a:22:c5:4c:40:67:b6:43:24:
         2b:5c:e3:96:ef:a2:4e:be:d7:a6:92:cb:d4:7e:84:fe:11:bc:
         36:fa:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:30 2025 by rpki-client