Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa
File:                     3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa (raw, json)
Hash identifier:          69FNN7OsSDMoUNwWm10xsI84dt2edF3jPfPMa6+xzBI=
Subject key identifier:   55:86:17:85:96:73:E7:AB:16:6E:50:AD:80:9B:06:9D:6E:58:B0:6C
Certificate issuer:       /CN=4177EB4445E439416051AB3B18D882B679B3BA71
Certificate serial:       19100E4A4A16325EEF871BB1B3647B9D67A1A046
Authority key identifier: 41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa
Signing time:             Mon 01 Sep 2025 16:50:16 +0000
ROA not before:           Mon 01 Sep 2025 16:45:16 +0000
ROA not after:            Mon 31 Aug 2026 16:50:16 +0000
asID:                     263515
IP address blocks:        191.243.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 05:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:10:0e:4a:4a:16:32:5e:ef:87:1b:b1:b3:64:7b:9d:67:a1:a0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4177EB4445E439416051AB3B18D882B679B3BA71
        Validity
            Not Before: Sep  1 16:45:16 2025 GMT
            Not After : Aug 31 16:50:16 2026 GMT
        Subject: CN=558617859673E7AB166E50AD809B069D6E58B06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:ac:6a:93:cf:1a:1f:c8:03:49:c2:da:5c:
                    e8:7d:f7:59:01:3b:e5:a1:ec:bd:d5:90:ed:6e:03:
                    25:86:d5:22:99:5d:ec:e4:2a:f3:4f:49:70:35:62:
                    a9:4b:76:48:42:2d:b9:fb:e2:0e:cf:87:df:b3:00:
                    5c:98:2f:24:1b:b3:28:fa:30:fb:70:14:a2:f4:4e:
                    07:1a:80:d6:f7:1e:62:81:02:db:d5:b7:7c:3c:39:
                    27:07:56:f0:1d:51:ce:6d:d1:2c:4b:4a:16:af:30:
                    24:c1:6d:09:b1:bb:9a:d0:c4:5c:2d:38:f1:52:40:
                    6e:fc:d0:99:ba:cf:ee:2c:a7:64:59:45:c2:ec:86:
                    8e:20:df:b4:da:a4:aa:fa:21:8a:4e:be:29:39:03:
                    ac:2f:a4:20:78:31:8a:94:5c:3a:4c:66:08:36:d9:
                    8c:f9:80:de:7f:a9:24:b7:20:71:23:ae:22:32:5e:
                    6e:f7:6e:28:2c:74:f8:58:af:14:35:7e:bb:65:14:
                    89:d6:2d:59:80:7b:1b:ca:67:7b:3c:60:12:9a:88:
                    4c:df:58:bb:6a:fa:04:87:72:a4:29:f9:6b:3c:5f:
                    38:1c:88:e1:3b:eb:1e:8f:2d:94:a9:21:32:3b:f2:
                    05:74:fe:c2:ba:5d:a8:90:b4:7e:d1:e1:25:94:42:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:17:85:96:73:E7:AB:16:6E:50:AD:80:9B:06:9D:6E:58:B0:6C
            X509v3 Authority Key Identifier:
                keyid:41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:15:73:94:c6:bf:3b:52:e3:93:ea:f9:76:e7:f4:6b:9d:02:
         8e:74:cb:e3:78:45:0f:ab:65:46:58:2a:e4:4c:f8:95:a1:fd:
         70:e1:81:03:84:37:bf:f3:97:14:a3:a7:e4:41:45:cb:35:25:
         ef:62:ab:50:e2:f3:04:b1:f9:42:bb:bc:e1:25:7b:60:be:a9:
         68:8d:1c:d1:7c:6d:8a:e8:55:42:0d:fe:f6:4d:07:4d:f9:62:
         7c:6e:8f:d2:ce:44:a1:72:74:43:c6:23:23:70:10:08:b3:0b:
         93:8c:9a:b4:d8:5a:8e:75:95:76:e4:60:ec:67:98:f4:e0:95:
         52:cb:66:b2:3b:f2:bf:78:d4:8c:ca:70:2e:80:45:b0:7a:f6:
         af:b1:75:3d:09:a0:9e:d6:cd:01:11:d2:66:fe:6e:07:80:68:
         0d:44:d9:fe:5d:f5:10:99:5a:99:72:2e:33:0a:eb:83:c0:47:
         4e:bb:32:a2:8b:22:6c:4b:df:81:03:11:7b:05:4f:8f:52:74:
         bc:af:c9:b6:03:04:df:38:bc:91:43:18:ca:bb:b9:fb:05:18:
         84:1a:64:94:a1:37:07:1d:d4:be:18:d6:74:6f:9a:1e:b0:8b:
         9d:e1:85:ee:60:b6:1f:74:47:27:28:cd:59:7f:c5:a3:b1:a9:
         e9:15:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:37:04 2025 by rpki-client