Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/3139312e33372e31322e302f32322d3332203d3e20323633333530.roa
File:                     3139312e33372e31322e302f32322d3332203d3e20323633333530.roa (raw, json)
Hash identifier:          K17H+8R3bf4Ik/EEIIS2q9ds9+VT0iYutYHN78cPwsM=
Subject key identifier:   40:F3:05:A9:D1:3A:C4:B5:90:78:5A:3D:90:61:77:A3:6B:96:21:DC
Certificate issuer:       /CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
Certificate serial:       787DBEC422FBCE960938346080DAA2E0570149E2
Authority key identifier: 65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/3139312e33372e31322e302f32322d3332203d3e20323633333530.roa
Signing time:             Wed 17 Sep 2025 18:29:52 +0000
ROA not before:           Wed 17 Sep 2025 18:24:52 +0000
ROA not after:            Wed 16 Sep 2026 18:29:52 +0000
asID:                     263350
IP address blocks:        191.37.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl
                          rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 07:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7d:be:c4:22:fb:ce:96:09:38:34:60:80:da:a2:e0:57:01:49:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
        Validity
            Not Before: Sep 17 18:24:52 2025 GMT
            Not After : Sep 16 18:29:52 2026 GMT
        Subject: CN=40F305A9D13AC4B590785A3D906177A36B9621DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:a1:17:7c:aa:10:6f:50:62:d3:d2:ec:d3:
                    a5:78:cd:38:0c:42:71:30:01:27:c9:8d:54:df:10:
                    2d:ac:33:5e:80:5e:2b:28:36:7a:dd:3c:b2:2d:cf:
                    33:8c:41:41:e8:30:2a:81:3c:31:49:9c:e7:37:02:
                    df:2f:1b:50:ee:a8:b9:dc:d0:03:44:b2:9a:8e:78:
                    45:64:97:6d:67:f5:6c:ac:39:98:ab:1e:25:bb:8a:
                    ed:0a:f0:1f:a5:b1:68:25:08:d6:6f:fc:a4:ea:5a:
                    d9:17:74:24:a0:99:c4:0e:6c:59:59:c2:1a:ba:74:
                    f9:84:62:ab:14:a9:96:1b:34:ae:bc:30:cb:e3:18:
                    22:d3:c5:f3:56:cb:67:bf:72:07:de:11:ca:0f:27:
                    fa:7d:d1:b7:59:44:02:66:96:03:ff:ff:86:74:b5:
                    c6:89:47:72:b7:db:27:6e:6d:1a:6f:da:d3:c4:c6:
                    4b:72:35:5d:b2:8f:5a:fb:33:3c:b1:6c:4c:73:d3:
                    3d:fb:67:ad:2b:1a:75:a9:77:81:a0:ea:47:4b:81:
                    4a:ba:32:1a:8b:2a:7b:9f:45:13:d4:e1:b8:0c:f6:
                    fd:a0:3b:db:39:01:a5:ea:5f:04:c4:3a:dc:29:d9:
                    f6:72:5f:60:6e:40:be:d6:0a:18:03:67:09:10:29:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F3:05:A9:D1:3A:C4:B5:90:78:5A:3D:90:61:77:A3:6B:96:21:DC
            X509v3 Authority Key Identifier:
                keyid:65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/3139312e33372e31322e302f32322d3332203d3e20323633333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:88:46:b0:1a:a9:4a:d3:d1:f4:cc:d8:06:f5:66:89:2f:
         fb:d1:c2:fa:49:12:51:e3:33:7b:64:a8:f3:97:72:49:2b:36:
         64:a4:71:73:08:a5:bf:3a:a2:29:d0:d3:d2:46:71:2b:91:96:
         9b:1e:23:28:da:61:ee:cd:63:a8:d0:a8:79:9e:c8:64:bf:58:
         fa:2b:0d:3f:fa:4e:c7:c1:b4:36:af:b4:43:7b:d4:47:77:74:
         bf:63:9e:c4:20:d3:bb:30:60:93:ac:4b:09:f9:30:ca:d5:8d:
         55:c1:a9:2d:8b:ab:82:b2:23:8b:5c:24:85:8f:98:b2:06:ec:
         e3:e6:09:20:58:14:66:7e:f6:30:f5:21:37:b0:1c:1f:63:26:
         37:a2:7d:08:02:f6:17:a4:5c:e3:ec:01:38:0f:bc:7f:42:69:
         14:a9:e3:db:a4:a5:cf:d0:c6:aa:65:12:26:94:90:65:91:2c:
         fd:fa:a5:f3:ff:52:4c:d4:ae:be:65:d4:55:a2:6b:69:8d:3d:
         a5:f4:e3:99:32:dd:13:3c:f0:b0:4e:02:79:6e:3c:ab:92:3b:
         9b:5e:bf:95:7d:8d:7d:fd:f7:d5:46:87:54:4d:6d:06:fa:5c:
         1d:f6:59:7d:04:d5:b8:86:79:f4:49:2d:f7:fe:31:fc:ad:53:
         74:eb:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:49:15 2025 by rpki-client