Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/3132382e3230312e3139302e302f32342d3234203d3e20323635383936.roa
File:                     3132382e3230312e3139302e302f32342d3234203d3e20323635383936.roa (raw, json)
Hash identifier:          SoZNthOAAciUYDYIJ1kr3ku4gFMsiU0K0PzLsuzHCGc=
Subject key identifier:   D2:E3:DF:7B:C9:A8:B5:E1:84:14:B1:73:E1:37:57:F1:1C:75:AA:14
Certificate issuer:       /CN=6F5278DB8F876783903A082AEFA62867B10AC72E
Certificate serial:       02DB1D7815044A1449A6A7ECE9902C63AB759620
Authority key identifier: 6F:52:78:DB:8F:87:67:83:90:3A:08:2A:EF:A6:28:67:B1:0A:C7:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/3132382e3230312e3139302e302f32342d3234203d3e20323635383936.roa
Signing time:             Tue 01 Jul 2025 05:26:12 +0000
ROA not before:           Tue 01 Jul 2025 05:21:12 +0000
ROA not after:            Tue 30 Jun 2026 05:26:12 +0000
asID:                     265896
IP address blocks:        128.201.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.crl
                          rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 12:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:1d:78:15:04:4a:14:49:a6:a7:ec:e9:90:2c:63:ab:75:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5278DB8F876783903A082AEFA62867B10AC72E
        Validity
            Not Before: Jul  1 05:21:12 2025 GMT
            Not After : Jun 30 05:26:12 2026 GMT
        Subject: CN=D2E3DF7BC9A8B5E18414B173E13757F11C75AA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:ee:eb:f9:2c:29:23:a8:1f:a3:2c:17:3f:
                    ae:5b:26:46:b5:24:3b:0b:2a:89:15:96:25:e4:54:
                    0d:c8:81:df:d7:e2:78:26:eb:b3:d7:7f:50:4b:3f:
                    f5:8b:7e:6a:f5:91:b0:09:a2:24:a1:8c:2a:08:6d:
                    72:2f:d0:00:80:52:cd:67:69:63:ef:bb:22:3c:12:
                    f7:f7:61:e1:ee:84:14:d7:98:b9:60:c4:9a:be:d9:
                    0c:98:93:0f:0e:04:dc:79:f1:d3:b3:d9:cf:23:d7:
                    ff:6f:6b:4a:ce:f5:d1:31:88:68:a8:b0:4f:13:d3:
                    c5:86:10:51:b5:af:61:a8:7f:06:75:8e:82:e4:76:
                    ee:8b:87:14:b5:15:e8:da:f3:87:d1:34:bd:01:56:
                    3d:87:8f:40:fd:07:d3:9d:e5:8f:0c:26:35:bb:3a:
                    d3:66:36:00:be:e9:4b:5b:ce:85:b8:6f:e7:96:21:
                    0e:80:3b:01:9a:ba:89:d1:c2:fb:98:7b:1e:8d:fa:
                    22:dd:a8:ca:cf:ae:f9:ce:9e:08:47:63:f7:01:c2:
                    30:ca:06:39:33:a2:3d:93:44:fb:cc:dd:c5:fe:bb:
                    80:58:3c:04:e1:65:48:85:80:9d:b8:4a:e7:bd:ae:
                    f2:23:c8:bf:76:b6:ab:6e:5e:f8:70:72:2a:26:cf:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E3:DF:7B:C9:A8:B5:E1:84:14:B1:73:E1:37:57:F1:1C:75:AA:14
            X509v3 Authority Key Identifier:
                keyid:6F:52:78:DB:8F:87:67:83:90:3A:08:2A:EF:A6:28:67:B1:0A:C7:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/3132382e3230312e3139302e302f32342d3234203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:4a:49:59:16:87:da:fd:28:32:39:1b:25:fe:23:96:6b:
         c7:19:ba:2c:36:e7:55:f6:1f:83:f1:be:0c:ed:b9:7e:6c:38:
         4a:77:ff:1d:af:ae:5b:93:90:3c:6f:24:45:f0:04:dd:4a:7d:
         50:7d:6a:31:2f:99:57:03:0b:fe:77:9d:5d:ad:65:18:36:0b:
         7a:97:dd:7a:0c:6e:d8:23:70:b6:12:93:7a:5d:09:f6:03:ab:
         59:17:4f:13:74:d9:59:e9:9e:65:a3:4e:8f:f7:2e:7d:21:9e:
         b0:4f:d9:a1:5c:be:9b:19:d6:dd:bd:29:ee:a2:5e:88:35:10:
         dd:9a:fc:e7:9a:63:78:1a:af:b4:72:b6:34:50:33:b8:f7:e5:
         fe:26:b5:68:87:8c:d9:8a:bd:ce:00:b0:36:15:95:9b:3a:15:
         30:f7:97:d6:e2:06:ed:55:91:8e:1f:3a:03:28:3f:17:df:75:
         da:18:22:bd:d9:65:ee:f9:1f:27:35:5e:2e:3a:76:b7:e0:e3:
         ff:bf:30:1b:6a:33:80:40:10:e2:98:55:20:8f:f8:65:69:55:
         f6:f0:55:bb:7e:9c:3c:b2:10:a5:fd:8d:c4:1a:2b:6e:92:ea:
         86:16:3b:7a:77:54:1d:50:5c:fb:65:42:83:c5:ee:66:30:44:
         51:36:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:04:02 2025 by rpki-client