Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3234203d3e20323730343331.roa
File:                     3139302e3131352e38342e302f32322d3234203d3e20323730343331.roa (raw, json)
Hash identifier:          QREAWLWPOfszyiN7X0chJaW/jad17WrlLRuZWtyNcWw=
Subject key identifier:   3B:F2:F8:CB:8B:6E:8E:01:B1:86:4F:9D:62:F8:E1:96:22:C4:35:C3
Certificate issuer:       /CN=797EA179F58872917F817056DDA50640D6141177
Certificate serial:       62E89700DA970CE9F0CD04FCA04376F1B8FB6A6A
Authority key identifier: 79:7E:A1:79:F5:88:72:91:7F:81:70:56:DD:A5:06:40:D6:14:11:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3234203d3e20323730343331.roa
Signing time:             Mon 08 Sep 2025 02:04:25 +0000
ROA not before:           Mon 08 Sep 2025 01:59:25 +0000
ROA not after:            Mon 07 Sep 2026 02:04:25 +0000
asID:                     270431
IP address blocks:        190.115.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.crl
                          rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e8:97:00:da:97:0c:e9:f0:cd:04:fc:a0:43:76:f1:b8:fb:6a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797EA179F58872917F817056DDA50640D6141177
        Validity
            Not Before: Sep  8 01:59:25 2025 GMT
            Not After : Sep  7 02:04:25 2026 GMT
        Subject: CN=3BF2F8CB8B6E8E01B1864F9D62F8E19622C435C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:04:65:85:8a:05:15:6c:f1:d6:99:5e:40:
                    f9:96:3e:0b:62:80:d1:d9:b6:22:3c:e5:48:89:9b:
                    2d:2f:e4:81:bf:bf:8f:2e:28:bd:c2:02:6e:ee:b9:
                    c2:17:f5:72:99:5d:ae:3b:ef:bd:97:6c:0f:a1:a2:
                    78:82:b3:ba:08:7b:fb:bf:22:39:f8:e5:2d:28:75:
                    07:90:bb:04:f4:a9:5b:e0:2d:b7:08:6c:1f:0a:c1:
                    2b:74:3d:b4:ef:26:ba:5a:06:21:32:6e:31:d7:9e:
                    9b:95:f0:11:8f:2e:6b:44:d1:0f:39:82:61:9e:4c:
                    dd:9f:d0:f2:9d:14:5d:41:5b:2a:d9:62:88:8c:04:
                    7a:0c:f0:65:f7:64:0a:70:11:77:70:67:04:82:b9:
                    42:69:3c:34:15:18:3f:d9:a9:f6:71:56:75:83:8f:
                    23:7b:12:71:a8:c5:17:0a:0b:a7:3a:8d:cc:c0:d0:
                    6b:48:c4:7f:b3:5b:89:d3:f9:0f:6e:52:19:56:d6:
                    51:ab:f1:13:e8:97:1d:18:79:64:2c:b2:71:35:7e:
                    4d:8e:d5:4a:d1:19:ed:c0:4c:4b:3f:df:e5:bc:6b:
                    96:ee:70:d6:5d:11:e1:4e:4f:b1:84:c0:5a:4f:5f:
                    dc:42:8e:48:8b:b5:65:c0:6c:52:4e:44:eb:13:7a:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F2:F8:CB:8B:6E:8E:01:B1:86:4F:9D:62:F8:E1:96:22:C4:35:C3
            X509v3 Authority Key Identifier:
                keyid:79:7E:A1:79:F5:88:72:91:7F:81:70:56:DD:A5:06:40:D6:14:11:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3234203d3e20323730343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:38:0e:ad:4c:ba:a1:96:d7:cd:90:8d:81:19:de:f3:c8:84:
         18:e1:58:d7:52:ce:0d:38:b9:3c:c3:29:4b:4d:8f:e4:a3:bb:
         1e:cf:dc:e5:65:ec:47:66:21:73:31:34:1c:2d:a4:31:7a:ad:
         0c:1b:14:9c:af:14:54:4e:49:26:97:de:d0:33:11:df:11:16:
         a1:49:11:50:05:da:48:7b:72:37:1c:3c:ab:d4:32:54:cb:37:
         97:e5:30:93:ba:df:59:ef:45:36:2c:cb:17:23:f4:f1:fb:66:
         8c:61:32:85:17:cf:e0:8b:09:52:a9:d5:ac:f9:57:d1:9e:4d:
         92:5a:e7:33:b4:32:e1:4d:25:bb:0e:e3:9b:b5:d6:0e:a6:78:
         de:44:a6:f0:5e:92:db:77:2d:c8:62:6c:0d:7f:15:df:58:89:
         08:6b:42:34:fa:ea:fe:5a:14:66:e4:aa:2a:55:93:0d:86:50:
         93:47:d8:17:4a:44:b6:b3:31:45:80:74:36:af:d8:75:f5:df:
         4b:d6:3c:87:2a:97:cc:f0:b2:55:2f:1b:60:59:f5:ba:47:80:
         d0:72:50:ba:1a:a8:c4:f0:db:6d:e6:9f:27:4a:64:32:7e:57:
         fa:a4:de:b6:06:f5:72:c5:a2:8a:3f:0c:1a:58:af:00:42:6b:
         0b:5a:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:05:36 2025 by rpki-client