Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/3139302e38392e36382e302f32322d3234203d3e203136393231.roa
File:                     3139302e38392e36382e302f32322d3234203d3e203136393231.roa (raw, json)
Hash identifier:          aCmNFHu7ksiBPs3NA2jkRR3B1X7zIvDdtuB0fEJQkWA=
Subject key identifier:   27:04:08:2F:FC:C3:4C:FE:3D:F7:36:F1:6F:BE:7F:12:ED:EB:85:8D
Certificate issuer:       /CN=1A6816C54D1FDAC43B441011433CC59E3BCB3648
Certificate serial:       5614BC45B85859244B4EC880DBD12B53D0B4A272
Authority key identifier: 1A:68:16:C5:4D:1F:DA:C4:3B:44:10:11:43:3C:C5:9E:3B:CB:36:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/3139302e38392e36382e302f32322d3234203d3e203136393231.roa
Signing time:             Wed 27 Aug 2025 18:55:08 +0000
ROA not before:           Wed 27 Aug 2025 18:50:08 +0000
ROA not after:            Wed 26 Aug 2026 18:55:08 +0000
asID:                     16921
IP address blocks:        190.89.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.crl
                          rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 13:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:14:bc:45:b8:58:59:24:4b:4e:c8:80:db:d1:2b:53:d0:b4:a2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A6816C54D1FDAC43B441011433CC59E3BCB3648
        Validity
            Not Before: Aug 27 18:50:08 2025 GMT
            Not After : Aug 26 18:55:08 2026 GMT
        Subject: CN=2704082FFCC34CFE3DF736F16FBE7F12EDEB858D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:99:9d:03:8c:1d:ab:a0:eb:22:b0:6e:cb:
                    cf:01:4c:cf:4e:51:c3:f6:9f:32:b5:11:2b:ba:2d:
                    9c:e3:bf:34:9c:49:a8:0d:12:16:76:8e:58:6a:68:
                    e0:ed:40:bc:95:4f:0d:6a:f1:9c:a8:51:ad:06:d4:
                    13:85:6a:a7:23:a0:31:92:de:82:42:3b:53:58:3c:
                    75:80:c9:d7:c5:eb:c3:cf:88:e4:74:df:d7:b5:74:
                    b4:bb:ca:1d:63:71:90:77:54:23:14:c6:73:b9:96:
                    13:d6:61:65:e9:8c:99:43:ec:1f:62:89:74:e9:56:
                    e3:90:0b:94:3c:43:83:35:f8:91:f6:b1:ed:e1:58:
                    dc:0a:9c:5c:dd:60:9e:94:66:bf:18:81:fd:0a:78:
                    61:11:ec:10:25:50:fd:1e:d3:ad:db:c3:e2:10:00:
                    af:37:e4:69:89:a9:29:bd:a2:d7:04:15:a9:4e:2a:
                    52:80:b5:a8:8e:e5:d0:e1:d3:13:70:70:4e:c7:28:
                    d2:b4:50:67:d2:d5:b5:c0:4b:db:96:a9:a9:b3:05:
                    ee:09:8d:07:35:71:1f:19:93:a3:30:0c:2b:2c:b8:
                    90:9f:b9:53:ad:0c:8f:41:07:52:f8:ba:8b:f6:3f:
                    2d:cc:e2:89:44:75:05:36:30:ea:17:b6:05:01:4a:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:08:2F:FC:C3:4C:FE:3D:F7:36:F1:6F:BE:7F:12:ED:EB:85:8D
            X509v3 Authority Key Identifier:
                keyid:1A:68:16:C5:4D:1F:DA:C4:3B:44:10:11:43:3C:C5:9E:3B:CB:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/3139302e38392e36382e302f32322d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:41:95:72:a3:91:94:81:38:88:94:22:26:cd:00:17:02:18:
         bb:c4:5f:a9:dd:26:2b:e4:9d:e3:3f:52:6c:11:ea:3c:af:e3:
         ca:78:b4:69:fb:96:ff:6c:3b:80:fd:bd:fd:3e:a4:4b:7d:ee:
         38:12:c7:d8:b8:45:e2:e0:b7:d8:98:e2:49:f2:21:76:35:46:
         1b:d5:99:1e:dd:cd:4e:58:2b:b2:f4:11:f4:32:c8:d7:6e:67:
         e9:c6:56:f9:0b:02:3e:a8:30:e2:a2:8c:1a:8d:c8:da:af:23:
         c0:22:ed:d0:90:dd:a3:6f:44:b4:8a:48:b2:54:d3:f9:0a:e2:
         94:01:ba:16:d8:0c:34:88:25:cc:2b:a4:cb:ec:66:81:26:c4:
         72:36:ad:e8:08:8c:14:77:a9:6c:dc:2f:41:6c:67:1b:92:35:
         0e:92:f2:d1:10:d8:71:85:d5:0c:9a:13:df:81:64:10:f1:80:
         38:84:24:e0:f1:55:e1:10:89:1d:27:dd:d2:19:ca:0a:d8:01:
         9d:23:ea:bf:41:d7:db:29:88:7b:cd:ec:f8:8c:9c:d2:0d:61:
         9a:be:c2:61:41:18:3a:d1:8d:77:88:bc:38:99:97:82:5c:34:
         1e:5a:33:45:39:47:f7:4d:31:2f:ee:30:79:7d:3d:f1:84:5a:
         e4:74:18:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 21:25:13 2025 by rpki-client