Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32342d3234203d3e20323730393336.roa
File:                     3139302e3130332e3135322e302f32342d3234203d3e20323730393336.roa (raw, json)
Hash identifier:          fElitIaCAgmjBrKUit6AytM6cmkJw6gu8XTOLJjkOSw=
Subject key identifier:   90:93:61:EB:B4:80:BB:11:3F:AF:92:3F:EE:BF:B1:D2:A2:71:86:4A
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       18D88C82328823ABED4AF105655E944C79A2DA54
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32342d3234203d3e20323730393336.roa
Signing time:             Sat 19 Jul 2025 01:00:00 +0000
ROA not before:           Sat 19 Jul 2025 00:55:00 +0000
ROA not after:            Sat 18 Jul 2026 01:00:00 +0000
asID:                     270936
IP address blocks:        190.103.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 19:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d8:8c:82:32:88:23:ab:ed:4a:f1:05:65:5e:94:4c:79:a2:da:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Jul 19 00:55:00 2025 GMT
            Not After : Jul 18 01:00:00 2026 GMT
        Subject: CN=909361EBB480BB113FAF923FEEBFB1D2A271864A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:5a:ee:56:18:d7:0a:a2:f6:b5:36:4d:81:
                    6e:76:45:7b:1d:3f:15:a1:82:d7:a2:f9:2a:9f:19:
                    4b:43:d2:98:4f:8c:7c:0a:5e:d0:39:f5:cf:06:44:
                    6d:f0:b7:b0:6b:93:7e:42:7d:dc:fd:0b:ad:c0:2a:
                    da:a2:df:ad:6a:b2:02:86:7a:ec:71:da:24:e0:97:
                    3d:32:3c:75:0c:b3:db:36:e9:88:b2:19:b0:79:dc:
                    84:4a:76:3b:4b:a3:0d:8a:8d:e4:81:e6:ac:13:ee:
                    23:bc:7f:ba:b3:4d:58:9f:c5:ab:b7:2d:1f:a3:e9:
                    5d:92:87:d4:2a:4a:91:b4:72:7a:9d:9c:f6:9b:9a:
                    7d:d0:90:19:c0:24:6e:fc:66:60:16:f4:7a:1b:10:
                    5d:c1:12:03:4a:20:71:2f:f1:65:5a:c9:85:1c:ba:
                    37:e0:b0:b9:e9:71:f6:16:1a:fe:0c:ad:c8:33:b3:
                    0d:88:8e:08:75:44:f8:3a:73:10:55:c7:fa:d5:29:
                    88:39:15:5e:8a:b3:4e:17:a9:a5:3d:d9:39:82:a8:
                    d4:5c:77:9f:c0:55:8f:31:90:1c:96:44:73:0c:08:
                    69:7d:11:dd:cd:4a:18:dd:96:7a:bc:af:db:d8:4c:
                    f4:a2:e6:b7:3b:9c:5a:0d:f8:12:94:27:46:4b:72:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:93:61:EB:B4:80:BB:11:3F:AF:92:3F:EE:BF:B1:D2:A2:71:86:4A
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32342d3234203d3e20323730393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:11:9b:0d:41:29:b0:e6:7e:78:36:ed:97:2b:47:d7:72:
         01:0e:24:ed:e7:54:8d:cc:90:5d:e5:5a:98:37:f9:35:c1:dc:
         ea:04:34:f5:6f:05:e9:bd:d9:c3:20:bc:16:37:91:8c:d9:7d:
         3c:5d:62:a8:4a:9e:75:1a:9a:19:2a:cd:7c:5b:9e:56:78:af:
         b0:0b:b6:44:00:0e:06:21:e8:c0:22:1c:b0:53:de:23:d1:53:
         99:ce:13:ef:e1:3d:02:a3:0c:92:29:6e:3b:06:c1:72:f6:a1:
         6e:77:0c:a9:b7:49:b8:7f:79:d0:e5:66:6e:ba:c0:57:35:6a:
         43:37:21:7e:96:55:7c:3d:00:f9:61:04:76:d1:1f:4d:c5:3b:
         f7:f5:c7:7a:7d:04:fb:60:a8:bf:c3:64:9c:54:d6:05:c9:be:
         2d:d7:97:a7:81:58:40:f3:7e:a2:97:58:66:dd:e4:ab:d3:e8:
         ec:58:00:b4:f4:2c:6f:0a:17:a2:f5:f0:68:b8:6e:57:92:da:
         6e:8c:a6:e4:1b:ec:bd:9c:b8:90:90:99:fd:9a:9f:90:c2:fa:
         46:91:19:0c:88:ca:30:f9:ee:17:f3:93:03:e2:47:a8:ce:d3:
         bf:72:c1:30:e8:20:f5:60:4f:73:07:af:9c:2b:7d:b7:c1:95:
         68:e4:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:59:58 2025 by rpki-client