Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
File:                     3138392e33382e38302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          KTnhZQL8mHtUyQVe/ZvcbQDe6yGvn9Y15GxmGucLFA0=
Subject key identifier:   F5:A5:11:E3:71:80:E2:5A:96:ED:96:F4:52:F4:AF:58:F2:BD:48:77
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       71D2248A16EC50190BE32AC06D92E27DCC3DC969
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
Signing time:             Thu 17 Jul 2025 16:11:01 +0000
ROA not before:           Thu 17 Jul 2025 16:06:01 +0000
ROA not after:            Thu 16 Jul 2026 16:11:01 +0000
asID:                     28299
IP address blocks:        189.38.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d2:24:8a:16:ec:50:19:0b:e3:2a:c0:6d:92:e2:7d:cc:3d:c9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Jul 17 16:06:01 2025 GMT
            Not After : Jul 16 16:11:01 2026 GMT
        Subject: CN=F5A511E37180E25A96ED96F452F4AF58F2BD4877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:f7:a9:63:e4:bd:83:73:fa:cf:9f:7d:b2:
                    e6:32:c7:c0:7f:24:10:ad:d3:f4:60:a6:5b:7b:08:
                    19:c8:e8:d3:d4:d2:15:e0:59:44:cb:23:35:0b:64:
                    9b:14:93:f4:f3:31:22:35:10:3a:cd:5f:af:be:ef:
                    0f:b1:9c:c8:c6:05:3a:3f:1e:ea:f7:5e:46:b4:4f:
                    0f:0e:1f:67:53:bd:79:5a:37:32:81:44:49:2f:a7:
                    df:a4:93:04:a8:9d:9b:8a:a6:30:bc:7b:07:1e:84:
                    db:ba:8e:2a:d8:af:89:e7:98:44:39:b5:ca:6e:7f:
                    f7:a6:26:65:a6:59:17:cd:c8:a3:55:10:65:a5:70:
                    dd:d1:e9:34:c0:b4:8e:a2:dd:fe:4d:4c:02:8b:58:
                    9a:91:a9:3d:8f:05:2b:30:aa:b6:44:7a:5c:96:76:
                    32:1d:d1:3c:ab:ec:85:92:ab:84:43:8e:da:a6:2c:
                    16:5b:d6:dc:c8:4f:c8:bf:1e:5d:98:18:81:0a:e5:
                    94:5f:a7:2d:fc:20:8b:68:9e:2b:51:28:6d:cd:dd:
                    6c:7f:02:82:e4:cc:9a:04:77:4d:8c:3f:ef:a6:44:
                    5c:b0:81:76:5e:26:04:e6:ef:86:20:4f:f9:2a:5a:
                    90:b6:07:dd:bd:cc:8b:32:0e:9a:09:2e:0b:ce:82:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A5:11:E3:71:80:E2:5A:96:ED:96:F4:52:F4:AF:58:F2:BD:48:77
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:f6:88:c7:01:4d:fb:33:66:1c:a8:32:dc:17:33:7f:cb:fc:
         f4:b3:cc:5e:d7:a3:00:c2:6a:f0:ce:c1:ec:73:da:11:7c:d4:
         ea:b0:63:5f:43:a6:76:61:5a:26:5e:0d:ca:8a:c4:7d:27:81:
         ae:36:c1:95:e1:88:20:d4:06:32:fc:d8:b7:03:3b:6d:d0:4a:
         b7:2a:01:d6:4f:6a:73:32:2e:c9:e7:d4:3c:0c:d2:08:04:69:
         07:3d:5a:ed:ec:e2:fe:e2:0a:a8:d4:51:a9:2c:12:71:e5:46:
         2b:ab:03:62:0a:82:3a:e9:c2:1a:7a:4c:6c:85:13:29:40:29:
         fc:5a:3d:f0:6b:57:7b:bc:f5:a9:ab:7c:3b:39:4e:98:70:02:
         c0:13:0b:93:ab:ed:f3:40:c4:0b:69:cd:74:3d:bc:bc:aa:c4:
         ae:b3:eb:1d:aa:0f:7b:72:8b:09:6f:ec:c4:1d:ca:71:82:76:
         9e:a4:3b:fa:bf:0b:e0:b0:73:67:67:80:5f:c8:48:2b:ce:c0:
         5d:34:72:70:d2:f5:55:c5:69:5f:cd:17:30:9f:7c:26:ab:29:
         fc:f1:57:db:05:b7:9a:2f:1b:c2:1f:50:09:6f:25:b3:9d:50:
         ab:24:cf:70:a6:13:ef:f7:e2:83:5c:f5:54:17:7a:71:63:09:
         f7:ef:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:57:37 2025 by rpki-client