Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32342d3234203d3e20323634353637.roa
File:                     3139302e38332e34302e302f32342d3234203d3e20323634353637.roa (raw, json)
Hash identifier:          QY9fg2LgUTfVmNm/eG2Fpl6Vc264kopH2v4IpD9OCJQ=
Subject key identifier:   6B:E7:D7:4A:2A:EC:3B:89:FB:BB:11:67:08:00:79:B1:5D:12:4E:DD
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       17CC419AE66EBA26CEC366CBF1D3F02293EA0814
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32342d3234203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:22 +0000
ROA not before:           Tue 17 Jun 2025 19:52:22 +0000
ROA not after:            Tue 16 Jun 2026 19:57:22 +0000
asID:                     264567
IP address blocks:        190.83.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cc:41:9a:e6:6e:ba:26:ce:c3:66:cb:f1:d3:f0:22:93:ea:08:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:22 2025 GMT
            Not After : Jun 16 19:57:22 2026 GMT
        Subject: CN=6BE7D74A2AEC3B89FBBB1167080079B15D124EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:3b:b9:be:72:d7:03:d1:9c:45:fd:7a:30:
                    ab:85:e8:92:e6:35:4c:69:e9:3e:56:53:e8:8a:c9:
                    e4:a3:11:68:10:d3:77:65:0f:e9:e3:9a:eb:b6:a8:
                    da:22:da:b8:c3:f8:72:6e:93:55:b1:e9:b2:52:88:
                    95:3f:e4:3c:91:b3:56:6a:da:5c:16:de:1a:61:58:
                    ff:a9:43:b8:13:a7:77:33:95:3f:b3:9d:56:1c:70:
                    6c:63:44:c7:f9:ab:7f:d4:07:67:9c:e0:c4:e9:03:
                    0c:50:ba:a9:4f:04:0a:fa:25:96:2e:6a:93:c2:b7:
                    83:c6:ae:8f:38:30:55:fc:91:10:c8:be:a6:d5:84:
                    a1:06:38:fe:9b:0d:7c:4e:d8:24:ea:0c:cf:da:55:
                    9a:1c:ad:dc:0d:44:5c:44:3a:ed:04:91:fd:f1:84:
                    b1:05:e5:8c:a3:09:8c:9a:79:f0:75:1a:70:b6:75:
                    65:8d:29:26:9a:ab:57:1f:72:f1:99:16:58:23:9e:
                    d4:66:58:69:a1:99:e9:ae:8e:c9:93:af:66:ea:82:
                    37:67:8c:da:3b:14:39:4b:96:d5:bf:93:19:0b:f9:
                    fe:a7:95:0b:25:dd:57:36:cd:da:54:dc:cb:4f:7b:
                    d0:7b:f3:c4:a9:f4:f5:16:12:8e:c8:73:ec:79:f9:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:D7:4A:2A:EC:3B:89:FB:BB:11:67:08:00:79:B1:5D:12:4E:DD
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32342d3234203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:87:59:4e:6d:6b:c3:f8:68:6b:77:c6:02:4d:2f:de:32:e6:
         07:c4:12:7f:10:45:35:e0:d6:e7:11:eb:db:9b:2c:a3:83:69:
         33:06:84:6e:db:94:ee:5f:b9:ce:5a:21:2a:7c:d7:96:68:bb:
         3b:37:b8:4e:c5:d9:9a:d3:d0:81:27:d2:1e:b2:7c:35:0b:31:
         56:f5:2c:b1:1b:d1:ee:2c:c1:aa:82:b1:c8:6e:45:b9:36:07:
         61:da:a8:bb:92:26:68:c4:59:0b:3a:8a:fc:90:a9:7b:41:b3:
         43:ed:6a:1a:68:7e:45:da:78:50:e9:fd:0e:58:f5:50:10:2e:
         90:d6:af:cf:d3:2d:b8:2d:2c:fc:55:48:25:34:fa:6a:fb:bc:
         df:95:10:cc:69:36:58:7b:97:cc:2d:c3:5b:c0:6b:8e:37:fb:
         f4:1b:e1:99:16:46:7d:61:cd:76:81:64:88:28:7c:ba:0f:5c:
         01:47:a5:09:e7:d9:ef:b8:58:61:91:d6:1a:ff:54:3c:6f:06:
         3b:38:58:da:60:89:50:a4:cd:64:0e:55:61:b0:20:47:63:15:
         1e:f5:60:8d:f4:b8:0b:7a:9d:00:9f:e5:f0:3d:6f:de:be:5c:
         83:7d:a0:2d:35:ee:cf:76:71:c5:68:00:e3:bf:fc:f3:29:73:
         77:6e:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:13:10 2025 by rpki-client