Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3234203d3e20323634323132.roa
File:                     3138372e302e3233322e302f32322d3234203d3e20323634323132.roa (raw, json)
Hash identifier:          Q4Bbnoj7EKpcseaIw7LmCKbSDnhrRkj/1QogXmpaupk=
Subject key identifier:   71:67:76:D7:FA:CF:00:E3:29:11:DF:06:C3:D3:EA:11:87:C8:EA:83
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       1FCB407BA10B6F690D0524B6178802493BE400E8
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3234203d3e20323634323132.roa
Signing time:             Tue 29 Jul 2025 21:43:32 +0000
ROA not before:           Tue 29 Jul 2025 21:38:32 +0000
ROA not after:            Tue 28 Jul 2026 21:43:32 +0000
asID:                     264212
IP address blocks:        187.0.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 23:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cb:40:7b:a1:0b:6f:69:0d:05:24:b6:17:88:02:49:3b:e4:00:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Jul 29 21:38:32 2025 GMT
            Not After : Jul 28 21:43:32 2026 GMT
        Subject: CN=716776D7FACF00E32911DF06C3D3EA1187C8EA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:2a:90:03:a6:8e:0c:9b:2e:98:e2:a9:1d:
                    1a:ef:01:19:d9:2a:0b:f8:e6:24:35:d6:ae:37:f7:
                    23:69:77:c4:ca:ba:9f:47:be:89:76:da:89:72:37:
                    6b:15:15:99:bc:b8:d6:30:8e:12:91:6d:6d:ad:b7:
                    3e:ee:cb:ac:9a:ed:68:4c:04:2a:fa:35:a6:5e:72:
                    98:e2:f5:1f:40:5a:4d:67:06:e1:f0:ab:10:df:79:
                    2c:6d:b1:0f:0e:49:19:d0:78:0f:8b:0b:18:c6:2e:
                    29:cf:6b:4e:09:47:ce:50:4a:5c:50:23:a3:91:15:
                    d1:f5:7b:22:65:41:44:77:36:ca:7f:3d:f6:9c:cd:
                    1e:f5:1e:ac:8c:e6:39:19:64:b9:91:bf:4c:80:cb:
                    66:08:9c:b5:b8:2a:4a:e1:39:c0:c8:b5:1b:46:e3:
                    e6:76:0c:e3:ca:07:1f:c0:71:62:2c:73:9a:02:10:
                    c2:3b:2a:a8:1b:ae:df:7c:78:df:8c:e3:73:4c:35:
                    4c:9e:fe:77:9b:c3:e2:7f:87:83:bd:ab:df:6c:5f:
                    72:4b:92:0c:fc:90:e3:da:2d:c5:27:dc:48:c4:e4:
                    e5:f7:fb:81:9d:16:53:7c:a5:41:70:f8:fb:b2:9a:
                    00:dd:a3:da:52:8a:8f:4e:c7:8c:04:1d:77:0c:8c:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:67:76:D7:FA:CF:00:E3:29:11:DF:06:C3:D3:EA:11:87:C8:EA:83
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3234203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:a4:db:44:1a:6a:8c:35:43:d7:3b:c0:19:45:9e:2c:fc:4d:
         02:be:d4:04:49:78:6b:44:12:44:dc:90:f1:ef:ac:f2:5b:3f:
         5b:89:28:b8:16:da:83:6f:07:83:f6:1c:8f:1a:2a:30:4b:a2:
         08:a8:b6:dd:b5:b4:e4:4a:6a:f5:91:b5:8e:1d:0c:20:fb:64:
         e3:0d:e3:cb:55:c6:ee:bf:c2:2f:e9:c9:16:d4:da:ba:04:21:
         84:dc:b8:b2:94:bb:fe:61:fe:8e:f2:df:92:df:a1:4d:89:ac:
         29:00:cc:d1:fe:7f:eb:5f:23:0b:18:da:f9:55:23:5d:b9:25:
         4e:e5:83:a1:5c:52:12:37:70:05:d4:1b:b4:49:1e:d5:15:f0:
         04:ea:df:e3:1d:43:86:c7:c9:4c:b4:fe:00:68:e7:db:01:2a:
         05:a9:c2:ea:e7:72:45:32:b0:9c:0f:8d:2d:a0:da:18:6d:78:
         e6:4a:c3:9c:2f:ed:6f:1d:1a:fe:67:a3:97:1f:44:bd:43:01:
         46:87:ee:2a:f6:73:5c:5b:fa:6f:e4:eb:e0:cb:cf:cb:a3:72:
         eb:12:55:f2:40:bd:65:bf:e2:53:da:2d:50:8f:e3:3e:1c:f6:
         66:39:72:86:f6:d1:4e:a6:d3:69:c4:9f:7e:ab:64:62:42:d4:
         da:d5:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 14:48:10 2025 by rpki-client