Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
File:                     3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa (raw, json)
Hash identifier:          Uowem+LzYl1JyCZCsHEfTMQHEAC3Ebsrx0Hmo5HI4bQ=
Subject key identifier:   B8:81:4E:E3:E9:A8:EE:3D:54:F1:07:C0:70:53:60:50:50:C7:F3:90
Certificate issuer:       /CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF
Certificate serial:       7DA6D8813F10684FB8C7C2AE0B3697BAB106CAE9
Authority key identifier: D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
Signing time:             Sat 27 Sep 2025 17:35:55 +0000
ROA not before:           Sat 27 Sep 2025 17:30:55 +0000
ROA not after:            Sat 26 Sep 2026 17:35:55 +0000
asID:                     271280
IP address blocks:        190.12.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl
                          rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:d8:81:3f:10:68:4f:b8:c7:c2:ae:0b:36:97:ba:b1:06:ca:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF
        Validity
            Not Before: Sep 27 17:30:55 2025 GMT
            Not After : Sep 26 17:35:55 2026 GMT
        Subject: CN=B8814EE3E9A8EE3D54F107C07053605050C7F390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:13:b9:46:82:a0:f9:f9:bd:09:c6:a7:12:
                    e5:13:f4:90:8d:d9:9f:14:2b:26:e6:9b:0f:99:d1:
                    c8:ea:b9:0b:c5:b7:44:25:4c:17:d8:65:e7:4b:48:
                    0f:25:86:f1:6f:ef:4c:44:48:4e:e2:2d:d1:11:c7:
                    a9:e5:0f:b5:c3:99:a2:ea:08:c2:88:fb:5e:2c:bf:
                    64:3f:e7:6e:d3:58:f6:9e:7f:fb:c9:bd:b9:34:0b:
                    5b:dd:2f:5c:37:77:b2:6e:ab:fe:ed:a9:6f:20:9d:
                    53:8d:55:13:71:bf:f0:72:61:b5:d3:77:b2:78:b7:
                    e3:ff:b9:8a:72:47:88:54:ca:1f:d1:d7:f7:12:97:
                    9a:cc:e9:3e:ff:f9:96:75:1d:60:98:e8:85:30:67:
                    b7:ec:05:50:30:4c:02:40:4e:e7:62:8e:6f:84:97:
                    f7:79:ed:5b:96:52:fd:53:8c:30:8d:ed:fa:b3:0c:
                    71:d3:d8:0e:90:1d:c0:55:82:7d:52:84:c0:e4:d0:
                    07:6b:cf:ca:eb:50:c2:c0:51:a2:2c:cb:3a:61:75:
                    99:f7:55:bd:37:00:23:b9:64:d0:91:12:00:cc:fc:
                    dd:9a:fd:89:ab:e2:df:90:70:ec:e8:da:3a:65:53:
                    86:b8:b6:17:32:29:98:b9:40:d0:dc:9f:ec:ab:d0:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:81:4E:E3:E9:A8:EE:3D:54:F1:07:C0:70:53:60:50:50:C7:F3:90
            X509v3 Authority Key Identifier:
                keyid:D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:c2:67:1a:d4:d0:da:a0:73:fd:45:b5:3c:f7:ef:d2:c3:21:
         d6:d0:f1:17:43:b9:31:e7:07:a5:8a:9f:4d:7a:9f:fa:86:09:
         a7:e1:c6:dd:ac:69:b8:c6:56:4d:a8:8d:9c:47:ef:28:07:25:
         9a:3e:47:e2:f8:ee:7e:20:f4:56:ba:a7:98:1f:19:68:59:5f:
         b0:06:b7:42:4a:31:fd:cb:b2:37:05:bf:e8:7b:56:4a:b7:9d:
         aa:92:5d:42:2d:9a:5a:e2:b0:92:4b:2d:47:cd:51:b1:49:ff:
         8a:49:24:2c:44:aa:e8:fa:9b:c2:15:c1:56:3a:d0:2d:11:1a:
         5b:d4:3c:f5:67:65:12:ce:eb:17:39:0e:3b:45:a7:ea:60:d3:
         92:03:1d:5d:cb:a9:85:ae:0d:42:c0:d1:36:61:40:4f:a1:54:
         60:b2:dc:44:4f:48:f2:9b:bb:40:c1:f2:f3:dc:2e:e3:70:b9:
         f1:dd:47:9c:d1:76:cd:10:4c:2e:0d:ee:76:d1:00:0f:6d:07:
         d1:63:db:fe:3a:d6:fa:ae:55:25:3b:cb:1a:05:5c:e1:2a:7e:
         89:0f:a8:14:be:e5:53:10:44:ca:67:69:87:a7:4b:db:9e:39:
         99:d8:1a:fc:b5:72:92:2c:b6:ac:0e:5f:5f:76:9d:c3:7d:57:
         82:8f:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:40:11 2025 by rpki-client