Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa
File:                     3139302e38392e37362e302f32342d3234203d3e20323730333539.roa (raw, json)
Hash identifier:          tuVDtcdFxKONVT2+GLGWlZHFRJDcc0yTqn2fUN2ij+A=
Subject key identifier:   E1:A2:D2:ED:99:AB:F7:CC:83:37:57:3D:D9:6F:95:DD:83:B4:37:03
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       7061817C7C6FE1278F3BB527239CCB8F36818F5F
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa
Signing time:             Mon 08 Sep 2025 21:21:39 +0000
ROA not before:           Mon 08 Sep 2025 21:16:39 +0000
ROA not after:            Mon 07 Sep 2026 21:21:39 +0000
asID:                     270359
IP address blocks:        190.89.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:61:81:7c:7c:6f:e1:27:8f:3b:b5:27:23:9c:cb:8f:36:81:8f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Sep  8 21:16:39 2025 GMT
            Not After : Sep  7 21:21:39 2026 GMT
        Subject: CN=E1A2D2ED99ABF7CC8337573DD96F95DD83B43703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:ee:41:32:cd:c2:32:9b:3a:2f:a5:01:d4:
                    16:01:fd:4b:67:2f:12:34:14:78:3c:c4:df:58:7e:
                    c8:c3:e1:a2:f3:d5:c1:29:38:07:0c:cc:b2:e6:c7:
                    1a:53:74:c1:ff:ea:03:86:96:48:e0:61:0a:96:a9:
                    96:63:0b:53:fa:88:53:05:ba:9c:b4:1a:1b:f3:61:
                    a5:c9:fa:2e:b5:31:7b:92:65:6f:6e:c3:07:fd:c0:
                    67:ab:a5:0e:32:58:80:ee:1a:19:fb:95:cd:1f:c9:
                    5d:0d:bc:a9:fa:e6:15:4c:3a:82:6d:7d:59:db:2c:
                    f5:a7:eb:69:66:10:14:63:75:93:cc:9a:5b:d6:37:
                    a8:e2:8d:35:dd:6e:00:ee:a0:85:49:a9:7f:db:6e:
                    16:f7:5f:c9:71:73:dd:34:ae:59:d6:58:b9:ef:d0:
                    0a:07:a2:4e:10:79:e4:cf:b1:2f:76:fb:0e:47:a3:
                    a2:ea:25:0d:4e:77:ac:5c:3e:14:ff:8e:28:68:17:
                    6e:8b:5d:2e:40:21:ec:53:e0:de:cd:d0:f8:be:71:
                    8b:3d:c7:4b:a8:a6:f0:66:68:b2:f7:06:78:7d:a3:
                    77:3d:75:38:21:05:d3:dd:2c:cd:e0:22:6e:70:ec:
                    81:a4:68:a0:a4:2a:e3:1d:fa:d7:f7:3b:a5:4f:12:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A2:D2:ED:99:AB:F7:CC:83:37:57:3D:D9:6F:95:DD:83:B4:37:03
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:49:6e:76:4b:85:3c:dd:31:6a:48:53:77:95:3c:f2:d9:a2:
         5a:ab:39:56:0d:57:91:8a:df:44:fb:92:50:1a:1d:ff:9e:ad:
         5e:99:c8:be:d3:a1:3c:c0:13:64:17:47:85:21:9d:ae:96:68:
         75:50:9b:29:3a:1a:bc:3b:07:50:33:ae:fc:af:d3:fb:54:34:
         c5:96:24:be:33:81:0e:b1:0d:b4:90:3a:28:bd:a2:d4:25:c4:
         b2:ee:1a:71:c0:59:28:37:5a:3d:b4:62:a0:f8:8f:c3:84:18:
         47:29:98:6d:46:70:f6:87:64:d9:28:49:10:d3:42:80:37:ce:
         81:73:f5:7f:f3:a5:68:35:1a:55:89:db:6c:b1:49:b3:55:1a:
         ce:d4:2d:8f:6b:a8:f4:1b:81:bc:35:df:a0:4e:79:e6:ba:8f:
         29:7a:dc:0b:05:d3:14:97:1c:06:f8:1f:25:9f:56:71:af:02:
         e6:bc:3e:db:23:05:c7:a0:1b:96:d0:44:a2:47:1f:8a:09:60:
         7c:21:c9:5b:cb:77:a3:3c:0a:9b:ec:c4:d3:21:23:b8:5d:a3:
         f6:1f:6b:6d:c0:ca:84:2a:af:65:16:5c:b7:27:58:e9:65:37:
         7f:0e:98:10:e1:57:56:a7:3b:18:35:09:37:b7:9c:fc:04:66:
         25:55:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:58:21 2025 by rpki-client