Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/3139302e3132342e35322e302f32322d3234203d3e20323731303035.roa
File:                     3139302e3132342e35322e302f32322d3234203d3e20323731303035.roa (raw, json)
Hash identifier:          mL4+vP62jVWYzLTwLHUm3Gy/dj1QL+8s4t7GWtXhkY4=
Subject key identifier:   12:3F:9D:D1:62:83:66:D6:12:F2:55:2E:1A:9B:D0:23:C8:43:A8:DF
Certificate issuer:       /CN=6285623AAD031B7ABCCB850757F270EE67BCC5F6
Certificate serial:       50F4E535EA49D1DA260DF42E0A953DF96A0CA817
Authority key identifier: 62:85:62:3A:AD:03:1B:7A:BC:CB:85:07:57:F2:70:EE:67:BC:C5:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/3139302e3132342e35322e302f32322d3234203d3e20323731303035.roa
Signing time:             Fri 10 Oct 2025 19:05:09 +0000
ROA not before:           Fri 10 Oct 2025 19:00:09 +0000
ROA not after:            Fri 09 Oct 2026 19:05:09 +0000
asID:                     271005
IP address blocks:        190.124.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.crl
                          rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f4:e5:35:ea:49:d1:da:26:0d:f4:2e:0a:95:3d:f9:6a:0c:a8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6285623AAD031B7ABCCB850757F270EE67BCC5F6
        Validity
            Not Before: Oct 10 19:00:09 2025 GMT
            Not After : Oct  9 19:05:09 2026 GMT
        Subject: CN=123F9DD1628366D612F2552E1A9BD023C843A8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:db:01:08:78:eb:df:75:c5:81:43:3f:08:
                    eb:11:e3:7b:33:d1:40:f1:34:cb:27:e2:b0:70:fe:
                    b7:ab:01:1c:db:dc:fe:cb:f3:1f:f8:b8:19:01:00:
                    9c:15:b5:df:32:d9:98:b4:da:27:25:9f:74:35:64:
                    7f:26:7e:c3:71:f8:8b:b9:5e:9a:35:e0:71:6a:ed:
                    92:bb:b1:f5:f6:f8:47:5e:f6:95:05:60:99:e4:d5:
                    bf:36:7e:a0:a7:4b:d8:56:e7:79:cd:1d:d3:f4:f6:
                    af:ff:ae:53:e8:38:07:f0:2e:f5:ce:4f:12:bc:f5:
                    7f:72:09:f6:9c:bd:24:30:5d:5d:1f:c0:69:20:84:
                    e7:0f:de:c6:84:79:c7:84:f7:4d:5a:c8:1f:7d:99:
                    42:74:f2:69:28:05:cd:83:ee:bf:85:09:9c:03:8f:
                    45:10:c5:1e:80:1a:20:3f:53:8c:9e:83:94:36:23:
                    9d:e0:67:fe:74:90:95:95:ab:7f:59:cb:d3:e2:cf:
                    20:cf:7b:60:ba:10:eb:26:94:67:77:d6:4a:1a:f1:
                    84:fe:fb:ce:d9:d1:8d:ec:14:8b:04:0e:bd:51:25:
                    4c:6b:24:f6:19:fe:13:b6:61:a0:f6:04:eb:81:27:
                    8f:04:7a:54:05:f3:87:bb:5a:26:9a:e7:7d:f9:3e:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:9D:D1:62:83:66:D6:12:F2:55:2E:1A:9B:D0:23:C8:43:A8:DF
            X509v3 Authority Key Identifier:
                keyid:62:85:62:3A:AD:03:1B:7A:BC:CB:85:07:57:F2:70:EE:67:BC:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/3139302e3132342e35322e302f32322d3234203d3e20323731303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:67:a0:d6:8d:65:77:6f:8a:d0:4b:78:e6:4d:74:31:74:
         4f:48:53:b3:3d:64:e4:67:8d:11:e6:a9:d7:4e:3b:82:3d:f6:
         87:c6:46:87:b0:db:e2:f2:a5:10:26:30:d2:c0:3e:18:34:af:
         fa:74:44:03:83:92:41:46:1c:0e:69:98:2f:bc:13:82:ec:05:
         97:40:f4:a0:e9:b6:38:67:4b:c6:fa:43:ff:7f:20:48:4b:e5:
         1c:21:ab:3c:96:be:31:63:5b:93:86:55:cf:a2:2d:06:6c:9e:
         08:0d:dd:53:2b:3d:cb:84:cd:26:5e:d0:dd:38:37:ef:c8:58:
         f2:bc:ff:6f:5e:2f:56:1a:c3:7e:16:fe:27:ac:c1:0c:e9:66:
         9e:79:97:03:f9:10:69:87:f8:88:76:f6:29:f9:3b:36:24:7a:
         11:7e:1b:0e:1a:78:bb:96:3f:16:5a:7e:d8:7d:4b:4f:c9:3b:
         d0:94:50:12:59:97:44:6a:74:98:2a:5e:16:29:5b:6d:10:68:
         d5:e7:15:29:9d:e7:00:96:90:fd:c7:eb:fe:4f:db:e0:32:cf:
         79:c5:12:62:d5:4e:fa:39:b2:50:7e:94:ff:20:a5:2c:f6:70:
         ff:12:52:92:c2:06:bb:d8:e0:31:c9:af:06:4c:e2:27:a5:8c:
         30:6d:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:03 2025 by rpki-client