Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa
File:                     3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa (raw, json)
Hash identifier:          hx0IXzvf7oJzQDfxfnPqzpLBT0EjpJ4JWcJZsJnlI4k=
Subject key identifier:   ED:34:40:B6:C8:8C:40:48:A9:60:C3:93:D7:2E:D9:E5:32:A8:64:6B
Certificate issuer:       /CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
Certificate serial:       646556FE752FFFB88C4C83CC6CFAD02CB3005637
Authority key identifier: E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa
Signing time:             Thu 28 Aug 2025 15:21:11 +0000
ROA not before:           Thu 28 Aug 2025 15:16:11 +0000
ROA not after:            Thu 27 Aug 2026 15:21:11 +0000
asID:                     262901
IP address blocks:        191.240.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl
                          rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:65:56:fe:75:2f:ff:b8:8c:4c:83:cc:6c:fa:d0:2c:b3:00:56:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
        Validity
            Not Before: Aug 28 15:16:11 2025 GMT
            Not After : Aug 27 15:21:11 2026 GMT
        Subject: CN=ED3440B6C88C4048A960C393D72ED9E532A8646B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:1d:ab:13:11:00:97:c0:1b:b6:6c:2e:7d:
                    ea:71:08:76:df:a4:0b:3e:76:a5:e0:3a:99:c6:84:
                    b0:f8:5a:da:00:44:ad:f8:ee:09:14:8d:28:d2:6d:
                    5b:9e:14:db:bd:84:ad:36:66:ce:79:96:05:92:36:
                    ac:8f:21:29:f7:2e:40:53:72:9b:90:2a:bf:42:6b:
                    41:1e:a2:69:44:2c:88:8b:72:ae:0d:fe:ac:a2:00:
                    da:01:82:92:17:10:1e:e0:2e:e9:85:c6:13:14:8f:
                    2d:c1:fa:6d:fc:32:f1:e6:d9:8b:d0:69:a0:4a:3d:
                    48:1f:98:24:6c:6e:ad:d0:cb:f7:f6:dc:4c:1b:35:
                    5f:03:c0:5d:eb:93:bd:1f:de:56:2d:a9:ea:db:81:
                    42:2a:92:23:69:ad:d0:0c:03:f2:0f:42:8a:f7:ec:
                    3a:32:a1:a8:dd:c2:f5:bd:3c:d4:e0:96:fa:a2:37:
                    f5:4c:b9:78:29:0e:9a:5f:31:27:06:49:b7:c1:3c:
                    70:26:c8:52:f6:34:e1:8d:33:53:52:0a:c7:b4:20:
                    94:a4:be:7c:33:26:14:45:d5:66:41:71:8b:4e:cc:
                    93:91:8e:7e:c2:f4:d1:1e:97:3b:d0:87:47:1b:c4:
                    8b:34:85:08:03:30:55:9b:db:47:fb:b4:8b:85:c8:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:34:40:B6:C8:8C:40:48:A9:60:C3:93:D7:2E:D9:E5:32:A8:64:6B
            X509v3 Authority Key Identifier:
                keyid:E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:6b:2e:b1:b1:3d:b4:2d:83:8d:38:83:00:c7:76:b4:fd:
         8a:c7:23:78:9a:c3:b8:a3:4b:e7:57:8b:fe:73:3c:a5:2f:78:
         73:de:54:d2:9d:34:d6:94:7d:db:1b:3c:41:9a:23:29:b5:59:
         20:22:be:6b:77:7f:c5:bb:dd:4b:f0:5f:66:eb:3e:ab:89:ff:
         42:dd:fe:bd:9c:cd:10:b4:04:7d:b9:d8:87:71:46:9c:6d:a1:
         b3:8b:1c:3d:d0:d3:16:97:43:2e:ef:d8:42:14:a9:9f:03:d3:
         83:5c:c6:ab:b0:88:8b:8d:0f:04:85:33:9c:54:ec:fb:0f:83:
         2d:be:a8:ec:78:75:f7:53:ce:db:cd:5a:31:0b:f4:6e:78:a2:
         d1:68:33:94:b2:6c:2e:de:1a:d2:7b:d9:63:ac:d8:1b:89:f1:
         2c:72:7e:eb:22:10:bc:50:2c:c1:ec:e0:d6:dd:79:de:8a:0d:
         c0:e2:e7:cb:f8:9c:6f:c7:f9:16:c8:a5:b6:98:6a:71:0b:9b:
         70:c0:f9:7c:e7:b2:f8:7e:c4:d1:85:a0:fb:b7:5a:3e:84:6c:
         2c:ea:03:a9:c6:aa:e9:4a:01:eb:7f:fd:bb:d8:05:2a:b7:09:
         99:3d:ca:ed:3c:44:da:bf:98:00:57:d5:1b:da:60:e0:db:44:
         41:17:00:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:07:02 2025 by rpki-client