Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa
File:                     3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa (raw, json)
Hash identifier:          GaYjqAkO2P7z/4oHJJX35/JDzBK6+xCW4CeOs5J6Wpc=
Subject key identifier:   96:D4:C7:D1:8F:25:AA:9F:71:A7:1E:13:96:19:9D:B3:03:41:35:DF
Certificate issuer:       /CN=5279C74540A375ED58505424645F77B2DD6FB06D
Certificate serial:       76B0F0B038A9BCD28939C4FB35820A34D906C94D
Authority key identifier: 52:79:C7:45:40:A3:75:ED:58:50:54:24:64:5F:77:B2:DD:6F:B0:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa
Signing time:             Tue 17 Jun 2025 19:18:08 +0000
ROA not before:           Tue 17 Jun 2025 19:13:08 +0000
ROA not after:            Tue 16 Jun 2026 19:18:08 +0000
asID:                     270548
IP address blocks:        190.115.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.crl
                          rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 20:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b0:f0:b0:38:a9:bc:d2:89:39:c4:fb:35:82:0a:34:d9:06:c9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5279C74540A375ED58505424645F77B2DD6FB06D
        Validity
            Not Before: Jun 17 19:13:08 2025 GMT
            Not After : Jun 16 19:18:08 2026 GMT
        Subject: CN=96D4C7D18F25AA9F71A71E1396199DB3034135DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:8e:06:fe:01:bf:9a:c9:74:eb:27:70:3d:
                    15:64:ea:54:be:11:97:23:62:26:5e:52:e9:04:db:
                    33:4f:16:29:90:7a:da:25:16:67:23:fb:dd:9b:2b:
                    4e:36:1e:a0:70:1d:e6:ed:2a:a5:34:95:b2:01:f3:
                    de:c3:e4:97:be:25:93:b9:0f:62:fa:d6:da:1e:7e:
                    f5:67:fc:69:3a:d3:f0:47:4c:e9:b8:2c:7c:de:de:
                    33:a7:4f:b7:06:5e:88:ba:fe:70:d4:95:a3:6a:39:
                    f3:d3:7b:ea:e2:a1:e8:67:88:48:c8:cf:c8:f4:89:
                    d9:c4:99:2d:27:dc:88:d2:46:05:30:03:c1:11:f7:
                    78:aa:1e:e5:c9:db:17:dc:39:0a:4b:a5:2b:f6:a6:
                    26:9a:19:99:8c:19:73:87:e2:68:4a:f5:0a:6b:dd:
                    34:82:9c:67:2c:f9:fa:53:c5:7e:3a:a9:b6:77:f5:
                    16:39:58:85:92:d8:d6:70:b3:f0:22:8d:3d:58:b7:
                    07:85:0e:15:c9:b3:77:8d:b5:7d:b8:bd:a9:c3:bb:
                    79:3c:fa:43:32:18:ff:d3:5e:28:ee:09:64:fb:e3:
                    5f:19:48:69:11:24:64:75:94:a6:ed:e9:e1:26:e1:
                    9b:44:4d:3b:97:18:cf:54:ac:2c:a9:52:09:42:b6:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D4:C7:D1:8F:25:AA:9F:71:A7:1E:13:96:19:9D:B3:03:41:35:DF
            X509v3 Authority Key Identifier:
                keyid:52:79:C7:45:40:A3:75:ED:58:50:54:24:64:5F:77:B2:DD:6F:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:af:28:c1:bb:53:9a:07:16:c1:be:fb:b4:f0:71:f9:61:2b:
         a3:82:05:1b:29:6f:ad:a0:df:be:65:2c:b5:13:67:34:0d:dc:
         b1:4b:dd:07:35:4b:5d:4e:0c:56:d1:69:79:3f:14:8f:2a:04:
         b2:33:72:8d:f1:eb:a9:5c:6d:34:92:de:40:72:41:28:0b:77:
         82:79:ca:24:fa:58:8b:8f:ed:0e:a5:a4:c6:2d:c5:fe:84:66:
         ae:14:c1:ba:fd:c9:31:cb:56:92:fe:38:61:64:ad:74:00:21:
         20:ab:1b:71:58:04:b3:a0:03:25:cc:b7:e0:08:e6:15:5a:0b:
         9a:37:83:f2:2b:63:b6:03:10:0a:9c:f0:97:4a:d2:0b:de:46:
         d0:b9:bc:76:aa:b2:e5:93:a4:83:08:e3:d6:3c:6c:7d:48:5e:
         42:f4:7b:5e:fd:e5:a6:b6:6d:cf:3f:9a:a7:68:49:63:10:05:
         de:e4:42:3a:78:f5:85:5e:aa:1a:c2:f7:70:2f:71:d9:5f:7a:
         3d:a8:ee:7b:cb:fd:31:ce:54:29:95:bb:3c:8d:4b:f9:ec:0a:
         cd:d6:a6:64:5b:ea:09:88:da:23:6c:9b:28:13:78:7f:49:48:
         b2:b6:49:34:e0:d6:12:92:c5:6e:37:de:3a:e4:a1:45:be:ec:
         56:0b:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:10:26 2025 by rpki-client