Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3232302e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3232302e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          Yl0v8dtZMABVqGRz8fPKWcvvpd44c2TfEYMPMU2SaR0=
Subject key identifier:   90:66:43:71:6A:F0:79:A9:43:E2:16:ED:34:D7:FB:1D:C0:FB:99:BF
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       27ECF0D99381B56FB3305D995BA81BA3EE363E15
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3232302e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:23:50 +0000
ROA not before:           Mon 20 Oct 2025 12:18:50 +0000
ROA not after:            Mon 19 Oct 2026 12:23:50 +0000
asID:                     27715
IP address blocks:        191.6.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ec:f0:d9:93:81:b5:6f:b3:30:5d:99:5b:a8:1b:a3:ee:36:3e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 12:18:50 2025 GMT
            Not After : Oct 19 12:23:50 2026 GMT
        Subject: CN=906643716AF079A943E216ED34D7FB1DC0FB99BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:5b:16:0e:7b:01:44:d5:9a:e7:ed:f6:2a:
                    91:ef:58:1a:17:ee:2a:72:91:e4:27:bb:dc:86:29:
                    1f:b8:64:9a:57:90:d4:9c:76:b9:c4:67:3c:5f:85:
                    65:a5:26:d4:e2:bb:b4:bd:46:5c:09:23:a5:36:0d:
                    dc:ee:f3:29:a3:bb:41:cf:12:ea:d7:53:db:c0:00:
                    a1:63:b2:3d:c6:f2:5d:22:af:7a:c4:c5:b6:d0:47:
                    0f:d7:11:0e:e3:f3:fe:eb:7e:c6:03:b6:83:3a:54:
                    28:70:56:ba:41:28:e2:b0:d0:f1:78:03:e9:d6:e9:
                    b5:48:eb:c9:cb:46:70:28:4d:c6:d5:1c:7b:85:f5:
                    6b:b2:78:18:1d:a5:a4:d1:0a:9b:2a:7e:f5:5b:ec:
                    b2:df:f3:8e:47:1b:8f:7a:ac:33:92:60:72:94:8c:
                    41:e0:c6:13:fa:71:06:50:de:f6:45:d6:9f:26:b6:
                    68:4d:42:f1:d7:96:34:d9:58:c5:f0:68:14:51:d0:
                    44:cf:12:b8:52:ce:48:32:23:9f:ab:ee:51:d5:6b:
                    04:04:78:00:4c:83:f9:a9:7a:3f:36:c4:51:a3:46:
                    c5:e5:9f:6c:63:65:e7:37:c2:3e:9d:84:a4:ff:f2:
                    5d:a7:59:86:ce:85:a1:6c:ff:e5:84:45:ec:45:6b:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:66:43:71:6A:F0:79:A9:43:E2:16:ED:34:D7:FB:1D:C0:FB:99:BF
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3232302e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:68:f6:85:31:d5:a6:ea:54:80:47:ff:95:cc:6a:68:70:0e:
         d3:81:22:ed:31:e0:6a:74:93:91:48:b0:90:45:64:1d:cb:ba:
         d4:19:c2:6d:ac:2e:f3:21:bc:a9:b3:07:cb:d8:40:a8:2b:4e:
         32:2d:46:ec:21:82:0a:b7:d0:81:4a:1d:b7:6c:b6:37:49:f7:
         8c:11:86:cf:63:f8:0d:74:2e:5b:15:a8:21:8f:07:d8:7a:72:
         43:07:2b:52:b2:a5:7e:4f:ab:f9:cc:58:9f:cb:c6:40:99:bb:
         84:b7:7f:77:3b:e6:80:2a:cc:75:49:01:55:ac:20:3e:b2:6c:
         07:99:1c:3b:bf:7d:1a:41:b7:4c:c8:8e:56:ad:6c:bb:38:ec:
         72:9c:aa:47:81:d6:f3:0d:ba:d4:7a:51:0b:07:0d:5d:17:31:
         3f:dd:fa:a1:dc:e2:40:31:aa:76:70:91:fe:6a:b8:18:6c:06:
         33:52:5c:b7:00:92:b1:17:4a:b4:32:6e:c4:33:91:69:34:ee:
         56:5d:bd:7d:04:f6:e2:a2:05:af:50:a0:14:22:08:cf:5f:b3:
         14:eb:00:c4:29:05:6b:8a:0b:02:29:1b:61:b2:70:d1:be:d2:
         3d:5e:c0:97:6e:56:6c:b1:4c:03:85:29:62:15:58:a1:60:09:
         f0:93:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:14:04 2025 by rpki-client