Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34312e302f32342d3234203d3e20323634353637.roa
File:                     3139302e38332e34312e302f32342d3234203d3e20323634353637.roa (raw, json)
Hash identifier:          RsS3xbapd9/oJVaFHoKWc5iywvVvMucp0onwNqNpHz4=
Subject key identifier:   77:0B:EA:3D:21:DF:B4:22:C9:45:CF:0F:42:12:F4:01:7F:22:6A:A2
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       2E3A13FAEB0652AFDC51845408429540F236A6AF
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34312e302f32342d3234203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:22 +0000
ROA not before:           Tue 17 Jun 2025 19:52:22 +0000
ROA not after:            Tue 16 Jun 2026 19:57:22 +0000
asID:                     264567
IP address blocks:        190.83.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3a:13:fa:eb:06:52:af:dc:51:84:54:08:42:95:40:f2:36:a6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:22 2025 GMT
            Not After : Jun 16 19:57:22 2026 GMT
        Subject: CN=770BEA3D21DFB422C945CF0F4212F4017F226AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:6e:d8:ea:b4:ab:6a:3a:a3:cc:17:18:e8:
                    c0:95:b5:5a:df:53:46:dc:2b:cb:3f:54:89:3e:d3:
                    62:ac:07:3f:d1:68:02:a0:54:f4:46:f6:89:fb:85:
                    bc:3b:c9:63:77:0e:a3:a9:c5:91:c0:8b:4a:61:3d:
                    d7:02:dc:15:f7:35:54:72:87:74:7c:78:b2:c0:e6:
                    2c:b4:4f:d1:bb:99:6e:2d:df:8f:6b:68:47:98:6b:
                    0f:d2:87:7e:b1:a4:03:36:7f:2c:cb:05:88:a6:d0:
                    30:db:30:93:77:7f:ca:75:1c:85:8f:97:66:82:68:
                    c2:d3:c0:39:69:cc:f1:2d:30:4f:69:68:80:1f:6c:
                    13:08:3b:57:c5:ce:b8:d7:6f:23:7e:b5:5c:41:a3:
                    6a:1b:ee:16:78:d7:c1:bf:1b:a9:c5:ab:af:a2:58:
                    cc:51:70:ff:5b:66:62:c3:14:33:3f:18:7b:c9:04:
                    ff:b7:77:ea:fe:c0:84:1c:b6:c5:17:03:a4:41:25:
                    9b:85:cc:25:03:97:08:2d:79:70:5f:bf:df:33:d6:
                    48:87:81:a7:48:24:60:6e:85:4b:ff:45:a7:af:93:
                    47:39:bb:bf:8d:7d:04:d0:13:4f:ea:c3:61:0a:35:
                    c0:cf:5b:0b:0e:41:4a:aa:5b:31:11:64:d1:ef:fe:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0B:EA:3D:21:DF:B4:22:C9:45:CF:0F:42:12:F4:01:7F:22:6A:A2
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34312e302f32342d3234203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:3e:41:fc:92:bd:87:c4:25:f2:44:0c:42:64:eb:d5:3c:
         6f:a2:3c:90:8f:42:e0:9e:a7:fb:31:5d:dd:38:fe:ea:29:3e:
         de:05:e3:e0:01:eb:43:37:8f:c6:f1:2a:38:96:93:6f:d7:4f:
         db:15:7d:89:8d:b1:7c:09:f9:c1:83:92:00:7c:02:a0:ae:2f:
         59:eb:a5:7d:e0:6f:a9:84:d5:d5:be:e5:52:1c:f5:ea:c7:0e:
         94:29:4e:27:92:19:e2:20:aa:6e:89:55:7a:04:45:5c:7e:05:
         aa:9f:00:8a:18:bc:27:a9:44:ed:93:56:df:a4:eb:9f:10:ad:
         57:ac:a7:c8:31:ee:ee:02:33:53:bb:f8:0f:9d:d8:10:70:b8:
         ed:2d:ce:a8:25:1f:7c:a2:9f:fe:f7:52:72:85:a7:81:8a:85:
         86:e5:ec:43:87:5f:71:e3:73:98:3e:73:e6:48:1c:ea:77:e6:
         02:b9:c0:b9:c3:f7:d7:47:17:5b:6d:f0:81:82:8c:1c:8e:c4:
         1a:ad:37:f5:c8:57:a9:cc:ad:b6:a3:35:5e:b7:29:08:01:02:
         81:1a:82:1a:77:33:8a:ee:68:60:c0:39:9f:4f:76:73:01:8c:
         9b:fa:a6:6c:0d:cc:10:b3:39:1b:ad:ce:cc:92:68:4a:b6:96:
         5f:a9:b1:ed
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULjoT+usGUq/cUYRUCEKVQPI2pq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCOTI0OTNCNTk5QzFGNjQwQThEMzk1NkIyMDk1NjUy
QzZFMUFBMDAeFw0yNTA2MTcxOTUyMjJaFw0yNjA2MTYxOTU3MjJaMDMxMTAvBgNV
BAMTKDc3MEJFQTNEMjFERkI0MjJDOTQ1Q0YwRjQyMTJGNDAxN0YyMjZBQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69G7Y6rSrajqjzBcY6MCVtVrf
U0bcK8s/VIk+02KsBz/RaAKgVPRG9on7hbw7yWN3DqOpxZHAi0phPdcC3BX3NVRy
h3R8eLLA5iy0T9G7mW4t349raEeYaw/Sh36xpAM2fyzLBYim0DDbMJN3f8p1HIWP
l2aCaMLTwDlpzPEtME9paIAfbBMIO1fFzrjXbyN+tVxBo2ob7hZ418G/G6nFq6+i
WMxRcP9bZmLDFDM/GHvJBP+3d+r+wIQctsUXA6RBJZuFzCUDlwgteXBfv98z1kiH
gadIJGBuhUv/Raevk0c5u7+NfQTQE0/qw2EKNcDPWwsOQUqqWzERZNHv/neTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdwvqPSHftCLJRc8PQhL0AX8iaqIwHwYDVR0j
BBgwFoAUfLkkk7WZwfZAqNOVayCVZSxuGqAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdOMmFNY3ZYVDc4UzlMQnhSMk56ZnNxVVBNekVFS3A1MnlMQnJicVh6
WmQvMC83Q0I5MjQ5M0I1OTlDMUY2NDBBOEQzOTU2QjIwOTU2NTJDNkUxQUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQjkyNDkzQjU5OUMxRjY0
MEE4RDM5NTZCMjA5NTY1MkM2RTFBQTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHTjJhTWN2WFQ3OFM5TEJ4UjJOemZzcVVQTXpFRUtwNTJ5TEJyYnFYelpkLzAv
MzEzOTMwMmUzODMzMmUzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvlMpMA0GCSqGSIb3DQEBCwUAA4IBAQAk+D5B/JK9
h8Ql8kQMQmTr1TxvojyQj0Lgnqf7MV3dOP7qKT7eBePgAetDN4/G8So4lpNv10/b
FX2JjbF8CfnBg5IAfAKgri9Z66V94G+phNXVvuVSHPXqxw6UKU4nkhniIKpuiVV6
BEVcfgWqnwCKGLwnqUTtk1bfpOufEK1XrKfIMe7uAjNTu/gPndgQcLjtLc6oJR98
op/+91JyhaeBioWG5exDh19x43OYPnPmSBzqd+YCucC5w/fXRxdbbfCBgowcjsQa
rTf1yFepzK22ozVetykIAQKBGoIadzOK7mhgwDmfT3ZzAYyb+qZsDcwQszkbrc7M
kmhKtpZfqbHt
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:15:52 2025 by rpki-client