Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/3139302e392e3132362e302f32342d3332203d3e20323731353936.roa
File:                     3139302e392e3132362e302f32342d3332203d3e20323731353936.roa (raw, json)
Hash identifier:          uGWB+dLXvJyRVohmeQH5EDKbrZFb7329DIF62AsG+G4=
Subject key identifier:   A5:19:DE:58:5E:80:C1:7D:3B:D4:2B:72:62:1C:A1:3A:09:63:63:7C
Certificate issuer:       /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC
Certificate serial:       3E7EBAFCBAB7FFB2BAB7954021E90E0553A3B0E4
Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/3139302e392e3132362e302f32342d3332203d3e20323731353936.roa
Signing time:             Wed 27 Aug 2025 02:07:34 +0000
ROA not before:           Wed 27 Aug 2025 02:02:34 +0000
ROA not after:            Wed 26 Aug 2026 02:07:34 +0000
asID:                     271596
IP address blocks:        190.9.126.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl
                          rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7e:ba:fc:ba:b7:ff:b2:ba:b7:95:40:21:e9:0e:05:53:a3:b0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC
        Validity
            Not Before: Aug 27 02:02:34 2025 GMT
            Not After : Aug 26 02:07:34 2026 GMT
        Subject: CN=A519DE585E80C17D3BD42B72621CA13A0963637C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:00:83:45:13:27:fe:6c:f4:bb:da:9f:62:6e:
                    c8:0a:be:d6:52:b5:13:09:c8:b1:05:5f:3f:e5:f4:
                    f8:0f:20:5d:80:0c:11:bf:f9:2a:88:65:81:c7:96:
                    e0:ba:d5:9d:27:61:ad:5e:b4:7c:6f:46:a3:0a:a9:
                    5d:fe:ed:8b:cb:21:d7:06:56:22:e8:5d:a8:eb:b9:
                    86:85:72:33:58:0c:4b:e6:7c:19:de:01:d2:fe:59:
                    99:58:76:27:0c:a0:fd:bc:47:ca:2c:0c:72:41:8d:
                    00:fb:07:ab:b2:01:6d:c0:d4:4b:39:99:6e:47:10:
                    1e:79:63:2c:f4:c0:f9:3a:5b:db:e8:7b:70:36:74:
                    d9:bb:66:2b:60:8a:b6:ac:cc:1a:c8:08:66:5f:25:
                    05:24:b8:d1:5a:db:3c:ce:01:d6:c8:d8:68:f5:80:
                    fb:23:42:21:15:39:c1:af:21:ab:7b:38:f1:a6:9f:
                    48:f4:33:d8:8a:66:72:e1:58:4b:58:8a:e5:b7:3e:
                    5c:05:94:71:0f:a4:3d:19:5b:8f:40:8d:20:e8:fe:
                    b5:f6:3f:56:ff:1e:f5:86:9d:a8:b0:d3:d3:9e:1a:
                    58:f9:19:2e:3a:21:dd:8b:e8:83:dc:92:cf:90:ae:
                    54:f3:22:4b:ca:1c:55:4d:cd:9b:d2:fa:4c:25:78:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:19:DE:58:5E:80:C1:7D:3B:D4:2B:72:62:1C:A1:3A:09:63:63:7C
            X509v3 Authority Key Identifier:
                keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/3139302e392e3132362e302f32342d3332203d3e20323731353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:2c:a2:4a:00:61:2a:1b:58:5b:28:4d:10:f1:80:81:61:
         15:81:4a:3e:35:fe:81:aa:b5:23:b0:af:fa:c3:d0:1d:61:39:
         87:44:7f:aa:5f:e6:75:33:5c:bc:9f:0b:58:29:e2:4c:9b:35:
         c2:9f:7b:fc:36:28:59:e8:6e:19:af:29:19:0e:ad:1c:49:7b:
         a5:1e:92:3d:03:99:5f:03:7d:f2:34:dc:40:7e:d7:a2:4a:2d:
         db:79:75:69:b4:a3:66:10:76:6e:42:c0:53:fd:84:b6:42:5c:
         6e:bb:b6:1d:e6:0a:d1:37:5b:d8:76:12:a0:d8:25:ec:99:65:
         de:b3:20:95:29:d1:16:a8:ed:4e:4e:cd:0d:48:ff:6d:94:fd:
         bb:5b:5f:79:6a:d9:c0:35:64:65:78:c3:4e:c8:f0:65:23:ba:
         5e:a7:04:8d:1a:c4:21:6d:18:4d:f8:93:9d:11:c6:34:12:8b:
         41:f4:9f:a3:3b:9d:96:32:d9:3d:38:11:c5:fa:73:75:ea:aa:
         cc:d5:84:29:9b:3a:72:79:62:93:1f:af:89:48:21:63:68:9d:
         27:d1:7e:a5:55:24:7f:0b:a9:94:ef:d9:ab:e8:40:7d:9c:6a:
         98:31:e9:65:6a:5b:cc:f2:a4:6d:e7:39:c4:f2:4e:19:36:c7:
         63:a2:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:07:53 2025 by rpki-client