Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32332d3233203d3e20323634353637.roa
File:                     3139302e38332e34302e302f32332d3233203d3e20323634353637.roa (raw, json)
Hash identifier:          kFHeg0KFASZEBJxDwGOoxogLSaXuTHAIgEfO/yRLtmk=
Subject key identifier:   C0:EE:19:1C:E8:BE:82:B9:AB:00:45:6E:59:14:C0:CB:C3:9F:BF:DD
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       2C2AA582D112E3E03954CC8C76EB98FD02030DA4
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32332d3233203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:22 +0000
ROA not before:           Tue 17 Jun 2025 19:52:22 +0000
ROA not after:            Tue 16 Jun 2026 19:57:22 +0000
asID:                     264567
IP address blocks:        190.83.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2a:a5:82:d1:12:e3:e0:39:54:cc:8c:76:eb:98:fd:02:03:0d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:22 2025 GMT
            Not After : Jun 16 19:57:22 2026 GMT
        Subject: CN=C0EE191CE8BE82B9AB00456E5914C0CBC39FBFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:84:9f:62:92:e2:8c:9f:c4:f5:d7:7d:d1:f5:
                    6b:1f:21:82:34:0a:37:7b:e0:b6:e8:b6:7e:63:d3:
                    88:ae:cc:ae:e1:04:45:72:5f:31:f5:cd:74:91:e1:
                    ca:7d:35:01:a2:42:76:3b:31:1b:73:68:3c:9b:3a:
                    43:20:fe:a2:64:2b:3f:93:5d:c5:3b:a8:90:33:e4:
                    89:6d:f4:60:cd:94:b1:55:ba:43:74:e2:d9:1a:0f:
                    47:bd:2b:7f:a5:ad:34:7c:30:06:36:53:9b:40:6f:
                    f0:67:6f:dd:4f:db:2b:79:e4:27:d9:ed:99:b4:35:
                    db:35:71:24:d4:c4:25:fe:ec:5b:a2:8a:ca:1b:c0:
                    18:80:2d:c7:2a:c2:e3:65:39:c7:f4:9c:fb:ba:2a:
                    15:cc:0f:49:36:a7:a1:5f:77:02:7f:57:af:e5:85:
                    b6:7b:89:89:f3:31:fc:d8:25:ca:cb:bf:64:f6:b5:
                    5b:5c:cb:70:0d:08:77:43:57:cb:d2:7b:e1:15:47:
                    8f:8c:18:df:90:85:a8:68:15:c2:17:98:25:de:4d:
                    f9:8a:f9:c3:2a:cf:51:7b:32:dd:39:0c:55:9e:29:
                    5b:cc:a1:ef:0d:0a:4e:2e:a9:81:7f:55:22:f1:93:
                    a1:79:52:77:8f:2a:f9:34:7e:7b:de:af:37:e2:e8:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EE:19:1C:E8:BE:82:B9:AB:00:45:6E:59:14:C0:CB:C3:9F:BF:DD
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32332d3233203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:d6:3e:5e:48:45:17:c6:4a:f5:ec:c2:ea:68:10:f0:1a:
         f2:1d:5e:b7:3a:21:71:5e:99:c5:22:ec:3f:e5:9b:a6:aa:44:
         c8:16:39:3f:af:70:c5:48:11:66:18:aa:6b:1a:24:0d:9d:75:
         d3:3e:a1:3b:06:99:c5:b5:c5:6f:09:99:ce:c1:3d:91:e9:19:
         ac:23:fe:64:3e:fb:98:68:39:8a:e7:13:91:85:1a:87:16:27:
         14:71:29:0f:88:6a:da:ca:2d:51:03:d8:b8:61:9b:43:31:66:
         48:41:60:4d:e3:ba:09:43:ee:53:b2:f9:e1:25:ac:00:6e:06:
         b8:a2:87:ec:9b:fb:11:f8:81:5f:34:fc:71:5e:f1:e1:59:62:
         f5:35:9c:e1:4e:b9:cc:81:c6:81:80:d2:ca:df:8c:f0:ef:f3:
         5b:83:28:1c:27:df:b8:0d:8c:c1:f7:09:fc:ee:8b:5a:08:d7:
         2a:11:56:6b:95:d5:c2:f5:ab:ac:98:5b:91:ce:d9:a9:1d:82:
         ec:79:58:5c:10:a3:cc:48:ee:e6:a6:d9:54:77:3d:84:cf:61:
         9f:52:a8:13:0f:06:89:95:3e:6f:d9:28:00:89:0f:1b:6b:f9:
         b0:87:24:d8:a1:52:81:c8:9c:bc:d0:1b:00:3f:ef:6d:7f:ea:
         c1:9a:1c:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULCqlgtES4+A5VMyMduuY/QIDDaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCOTI0OTNCNTk5QzFGNjQwQThEMzk1NkIyMDk1NjUy
QzZFMUFBMDAeFw0yNTA2MTcxOTUyMjJaFw0yNjA2MTYxOTU3MjJaMDMxMTAvBgNV
BAMTKEMwRUUxOTFDRThCRTgyQjlBQjAwNDU2RTU5MTRDMENCQzM5RkJGREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDphJ9ikuKMn8T1133R9WsfIYI0
Cjd74Lbotn5j04iuzK7hBEVyXzH1zXSR4cp9NQGiQnY7MRtzaDybOkMg/qJkKz+T
XcU7qJAz5Ilt9GDNlLFVukN04tkaD0e9K3+lrTR8MAY2U5tAb/Bnb91P2yt55CfZ
7Zm0Nds1cSTUxCX+7FuiisobwBiALccqwuNlOcf0nPu6KhXMD0k2p6FfdwJ/V6/l
hbZ7iYnzMfzYJcrLv2T2tVtcy3ANCHdDV8vSe+EVR4+MGN+QhahoFcIXmCXeTfmK
+cMqz1F7Mt05DFWeKVvMoe8NCk4uqYF/VSLxk6F5UnePKvk0fnverzfi6BXdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwO4ZHOi+grmrAEVuWRTAy8Ofv90wHwYDVR0j
BBgwFoAUfLkkk7WZwfZAqNOVayCVZSxuGqAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdOMmFNY3ZYVDc4UzlMQnhSMk56ZnNxVVBNekVFS3A1MnlMQnJicVh6
WmQvMC83Q0I5MjQ5M0I1OTlDMUY2NDBBOEQzOTU2QjIwOTU2NTJDNkUxQUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQjkyNDkzQjU5OUMxRjY0
MEE4RDM5NTZCMjA5NTY1MkM2RTFBQTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHTjJhTWN2WFQ3OFM5TEJ4UjJOemZzcVVQTXpFRUtwNTJ5TEJyYnFYelpkLzAv
MzEzOTMwMmUzODMzMmUzNDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvlMoMA0GCSqGSIb3DQEBCwUAA4IBAQAI0dY+XkhF
F8ZK9ezC6mgQ8BryHV63OiFxXpnFIuw/5ZumqkTIFjk/r3DFSBFmGKprGiQNnXXT
PqE7BpnFtcVvCZnOwT2R6RmsI/5kPvuYaDmK5xORhRqHFicUcSkPiGrayi1RA9i4
YZtDMWZIQWBN47oJQ+5TsvnhJawAbga4oofsm/sR+IFfNPxxXvHhWWL1NZzhTrnM
gcaBgNLK34zw7/NbgygcJ9+4DYzB9wn87otaCNcqEVZrldXC9ausmFuRztmpHYLs
eVhcEKPMSO7mptlUdz2Ez2GfUqgTDwaJlT5v2SgAiQ8ba/mwhyTYoVKByJy80BsA
P+9tf+rBmhxR
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:07:19 2025 by rpki-client