Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3231312e302f32342d3234203d3e203238323939.roa
File:                     3139312e362e3231312e302f32342d3234203d3e203238323939.roa (raw, json)
Hash identifier:          V4LPNRn4MMc0IO7NC/W+yP+zqdFDHFpe1g5h0nja6HY=
Subject key identifier:   D9:EE:3C:F5:B9:1B:75:24:AB:A1:47:6D:18:C0:D0:A9:DF:35:6C:7E
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       270178F2E4D5AD3CACF3D9D596741FCAC56C0D94
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3231312e302f32342d3234203d3e203238323939.roa
Signing time:             Thu 17 Jul 2025 16:10:04 +0000
ROA not before:           Thu 17 Jul 2025 16:05:04 +0000
ROA not after:            Thu 16 Jul 2026 16:10:04 +0000
asID:                     28299
IP address blocks:        191.6.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:01:78:f2:e4:d5:ad:3c:ac:f3:d9:d5:96:74:1f:ca:c5:6c:0d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Jul 17 16:05:04 2025 GMT
            Not After : Jul 16 16:10:04 2026 GMT
        Subject: CN=D9EE3CF5B91B7524ABA1476D18C0D0A9DF356C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:8d:18:14:d6:c0:d0:6d:d4:29:68:ba:9b:
                    81:ca:e9:87:cc:4d:77:71:e7:6a:c0:70:7a:f1:a6:
                    dd:57:7b:0f:9d:85:57:95:89:8d:f6:8d:09:3e:f9:
                    05:18:18:10:f4:da:7c:fe:22:6b:af:db:70:5d:95:
                    ac:cf:6a:89:56:08:d7:d1:20:13:67:60:6f:22:2a:
                    a2:fc:85:7b:75:09:68:fa:8a:8b:14:ee:15:86:fd:
                    36:94:a6:b7:e8:2b:e1:6a:29:a4:b4:ed:99:63:79:
                    f2:0d:92:76:f0:5c:42:1e:94:0c:d3:01:16:10:be:
                    ed:cb:73:3a:94:7a:02:85:fb:b0:43:25:d9:6e:29:
                    84:9f:d1:58:7e:14:11:60:df:0f:1e:82:a1:67:32:
                    e2:a0:2c:ff:c4:e7:b8:47:10:26:98:04:c6:ce:85:
                    90:a0:07:34:0a:73:b1:9d:73:05:f5:83:a1:2b:58:
                    e7:8e:28:1d:ab:b3:90:ad:70:34:da:0d:c9:9f:a6:
                    8c:1d:b8:e6:fc:af:5b:f5:0a:63:09:b8:40:b2:5c:
                    06:91:24:98:0b:8c:90:6b:66:03:1c:b2:31:3b:63:
                    90:16:39:05:e2:e2:2f:fe:0c:05:21:1f:79:17:f7:
                    0d:3a:5c:3d:de:ba:45:0b:e5:e1:f2:c6:90:f8:f7:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EE:3C:F5:B9:1B:75:24:AB:A1:47:6D:18:C0:D0:A9:DF:35:6C:7E
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3231312e302f32342d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:9f:81:53:b0:52:64:98:83:d4:97:ae:64:1f:fe:65:d3:a7:
         9f:06:45:06:0b:77:84:fd:98:61:49:fa:43:fd:70:fe:86:23:
         63:af:51:ad:d9:92:46:2b:43:a8:f5:e9:a6:df:c3:c2:af:43:
         35:ac:3b:f2:0f:53:a8:31:00:de:ed:be:f3:27:e0:52:fa:9c:
         3d:61:b2:e2:c3:a2:ed:a1:a7:e6:e3:d8:48:a5:d9:ab:bc:cb:
         8d:4e:50:bc:e1:b6:bd:16:3b:0c:e0:37:52:c3:48:5d:c9:93:
         24:ba:55:8b:f5:8c:1d:9b:6b:e4:88:70:cc:f8:c3:0b:0c:6a:
         23:29:1a:84:48:1d:92:37:38:b7:c1:04:4e:79:b8:af:ae:7a:
         dd:84:c8:c1:36:7e:bc:89:44:ee:6a:37:fa:f9:80:52:96:19:
         54:ed:c2:85:88:e6:e1:a1:e6:33:38:4f:6e:1b:33:02:59:02:
         cb:61:39:37:94:a3:83:e7:73:40:9c:d6:6f:4a:0e:4c:2f:9c:
         9c:e0:e9:72:ab:fb:e6:8d:e6:ab:dc:50:62:9f:d0:46:a0:eb:
         5e:f4:de:a9:de:ce:0e:0b:65:40:1a:10:ce:27:fd:40:45:7d:
         96:4d:66:28:a2:90:04:93:30:50:98:8f:d7:55:92:66:8a:c5:
         ea:13:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:58:22 2025 by rpki-client