Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa
File:                     3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa (raw, json)
Hash identifier:          EsP4rJuhkvpcUehCNgBteatlRFZDM/gl+dekoYRZ47w=
Subject key identifier:   F4:03:E3:0A:C9:32:8B:EF:77:72:36:2E:4E:CF:35:36:12:53:7F:52
Certificate issuer:       /CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3
Certificate serial:       44C79A94E4D23A29E460A4B4BEFD4F34DC8E4D79
Authority key identifier: 89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa
Signing time:             Thu 10 Jul 2025 11:40:32 +0000
ROA not before:           Thu 10 Jul 2025 11:35:32 +0000
ROA not after:            Thu 09 Jul 2026 11:40:32 +0000
asID:                     266005
IP address blocks:        181.191.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl
                          rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c7:9a:94:e4:d2:3a:29:e4:60:a4:b4:be:fd:4f:34:dc:8e:4d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3
        Validity
            Not Before: Jul 10 11:35:32 2025 GMT
            Not After : Jul  9 11:40:32 2026 GMT
        Subject: CN=F403E30AC9328BEF7772362E4ECF353612537F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:80:9c:a3:65:a7:c7:67:f7:fc:aa:8d:db:
                    01:5c:cd:ee:a2:1f:d0:0b:17:c1:f3:3e:56:3d:c0:
                    96:de:e2:f4:86:1c:6b:a5:56:fc:ca:59:95:eb:ce:
                    b1:90:00:bc:21:6c:11:96:42:c9:6c:89:24:15:0a:
                    ec:09:68:ed:aa:18:87:5c:d6:27:d1:57:93:ce:cc:
                    6b:a1:21:30:51:d0:26:10:ed:11:41:86:74:3d:2d:
                    eb:b4:ac:0a:0b:2c:db:de:e6:64:98:79:d6:2c:61:
                    c4:17:a0:70:97:37:48:1c:d5:b3:b9:4d:f8:1b:85:
                    4f:31:b0:8d:44:b3:9c:e9:14:66:bc:c8:eb:8a:ea:
                    c0:db:ce:34:89:63:ca:b1:b0:39:03:69:9e:46:5b:
                    69:7d:e5:95:54:eb:ca:4a:70:b4:2d:06:47:7d:f9:
                    6c:c1:16:2a:a4:75:b2:7c:82:ba:ef:61:0a:c7:59:
                    8a:82:09:84:67:4a:88:79:04:a4:43:61:21:e9:6f:
                    a4:9f:84:46:97:a6:30:47:29:29:bd:4d:1a:00:71:
                    02:21:37:37:1a:f4:2f:7e:f4:b0:24:23:52:f6:7d:
                    36:e8:61:b6:2d:4c:39:fb:30:5e:8c:69:c0:fa:26:
                    5b:c7:f8:c2:39:15:e7:9e:70:c2:9c:f4:f4:c4:c1:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:E3:0A:C9:32:8B:EF:77:72:36:2E:4E:CF:35:36:12:53:7F:52
            X509v3 Authority Key Identifier:
                keyid:89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:30:a8:68:35:4e:27:07:c5:6a:f5:48:48:b6:3f:56:32:cb:
         ea:aa:09:a8:9e:0a:a8:c2:c1:4e:d5:e3:3c:e3:53:fd:a1:eb:
         3f:95:90:ac:b5:c4:f3:88:9e:99:63:b0:fa:ee:15:c8:65:4d:
         28:7b:9a:dd:7f:d8:bc:88:e0:80:13:26:9e:d1:1b:15:1a:bc:
         26:b3:af:9c:07:6d:df:19:5c:24:27:24:45:96:ad:1d:e1:3c:
         ad:e4:d1:88:66:90:b5:c8:91:61:05:89:b9:d8:74:b0:36:b3:
         32:a1:79:90:1b:83:ee:3e:5b:aa:5b:ea:c1:b7:6c:f3:48:23:
         52:c0:9b:b0:e1:fe:bb:e8:95:4e:d5:83:16:81:df:78:14:5f:
         ce:ac:69:ea:b7:ef:d1:ca:08:4e:fc:c8:c8:97:7c:6a:5f:a7:
         a0:19:d3:bf:53:5e:fe:05:09:1d:82:89:36:cf:9e:c6:17:c4:
         32:a3:b6:11:03:5f:66:6f:5f:4e:02:b7:88:7a:01:20:ad:60:
         9e:65:23:6c:94:e0:0d:16:4b:43:a0:e9:69:e8:ed:c7:17:26:
         0c:25:7b:c0:e5:93:66:35:71:06:1e:28:54:58:28:37:15:db:
         e3:ed:09:0c:1f:e2:40:f1:b0:60:3d:88:1b:96:6a:b5:39:d5:
         3d:71:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:34:55 2025 by rpki-client