Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34322e302f32342d3234203d3e20323634353637.roa
File:                     3139302e38332e34322e302f32342d3234203d3e20323634353637.roa (raw, json)
Hash identifier:          oZxwnvszv8aoqBw7NtvOX89OsY/gOh54DQ/cUHsd7dg=
Subject key identifier:   6F:9F:2E:FB:1A:13:B8:5B:92:8A:99:43:E8:F1:0C:D9:17:80:6D:82
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       2883524CE8414782C2D016C8918040588B5C04FA
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34322e302f32342d3234203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:21 +0000
ROA not before:           Tue 17 Jun 2025 19:52:21 +0000
ROA not after:            Tue 16 Jun 2026 19:57:21 +0000
asID:                     264567
IP address blocks:        190.83.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:83:52:4c:e8:41:47:82:c2:d0:16:c8:91:80:40:58:8b:5c:04:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:21 2025 GMT
            Not After : Jun 16 19:57:21 2026 GMT
        Subject: CN=6F9F2EFB1A13B85B928A9943E8F10CD917806D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:71:55:b1:0e:a0:59:89:ec:29:9e:b5:10:
                    90:0e:77:5c:17:59:f4:f0:8f:7d:7e:b2:1c:dd:cb:
                    52:5d:c7:e3:52:ce:1d:11:47:6b:68:16:d2:75:8e:
                    d2:d7:b4:96:78:8c:39:6f:fd:58:d2:e9:f5:76:ad:
                    f8:28:dc:ac:bd:f1:e3:a5:b2:5c:f0:0b:79:bd:19:
                    45:49:57:31:90:25:b0:aa:48:d2:34:8b:67:93:b5:
                    44:47:6c:9c:3f:2e:58:fb:4e:ef:6a:89:f8:51:97:
                    ee:59:45:de:d8:bd:05:d6:0f:b8:8f:42:4b:d9:3f:
                    3a:d2:b9:91:39:64:9c:e2:71:4f:96:4b:ba:8f:13:
                    09:66:84:b6:f6:11:83:17:2f:8f:d9:d6:91:88:5b:
                    63:67:a3:c1:6c:4d:d7:ac:77:bf:87:ed:fc:28:61:
                    e9:65:c0:35:a1:eb:35:75:5d:fc:5b:c5:1d:60:28:
                    5b:a5:62:80:bd:f9:2e:b5:60:f9:f4:e7:3a:a9:18:
                    06:37:62:5a:36:ee:ea:9d:51:21:6c:9d:a3:cf:2c:
                    61:ce:a7:23:55:ef:d8:e6:ce:71:c2:62:d6:8a:a8:
                    00:3c:e2:6f:b1:44:3a:91:31:a6:f2:96:2a:5f:62:
                    61:32:be:90:ba:d8:23:19:05:7f:e9:0c:8f:ee:79:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9F:2E:FB:1A:13:B8:5B:92:8A:99:43:E8:F1:0C:D9:17:80:6D:82
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34322e302f32342d3234203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:dd:ba:e9:f1:03:51:bf:4f:dc:b7:c0:5b:cf:37:4a:c1:3a:
         b4:da:3e:83:53:fa:62:20:64:12:26:83:ff:bd:d6:ad:39:62:
         5d:17:5c:56:72:30:c3:2b:a9:d9:0c:f8:b3:dc:83:c8:af:25:
         54:c3:62:9d:88:36:91:e5:ff:36:ff:83:26:36:47:3f:2f:88:
         63:2c:e0:96:c2:ad:ab:ae:fd:e2:46:f5:e7:ed:a4:c9:47:aa:
         9f:4a:7a:c7:bb:72:00:3e:ba:bd:65:c4:92:12:c5:87:21:ee:
         da:c8:8f:e3:f7:ee:be:46:82:cb:8a:7a:2a:f1:3b:13:18:9e:
         1f:0f:44:00:d6:96:a0:c2:32:ba:e6:7b:04:94:d1:90:d2:43:
         5a:f4:50:52:da:b7:d2:09:1e:47:5e:b9:ad:84:26:da:47:bf:
         5a:91:8d:b3:09:c8:e5:4d:65:1d:87:0d:d9:64:fa:89:ec:ac:
         5a:f8:f0:00:a8:75:0d:6f:0c:31:7d:57:be:cd:e4:5a:f6:7f:
         74:6e:31:93:88:65:97:eb:ca:84:e2:08:2c:9c:aa:a8:77:f2:
         5b:7c:d8:2c:4d:ac:0e:f3:56:85:fb:76:42:8c:4d:ae:b9:21:
         01:ba:74:52:3b:77:4b:26:e6:56:65:db:36:ff:92:57:3a:d7:
         dc:25:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:14:12 2025 by rpki-client