Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa
File:                     3139322e3134312e322e302f32332d3233203d3e20323637343430.roa (raw, json)
Hash identifier:          L+/g0fW5IRUxOSnFCSNlIxPaunuxtEzSIzCfiepew08=
Subject key identifier:   B2:9E:34:B4:3B:61:29:84:A9:79:A8:29:69:18:83:04:C3:64:3A:C4
Certificate issuer:       /CN=22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA
Certificate serial:       35FF07BDFF5FB51629C9B301E97FD1355BEA7F6B
Authority key identifier: 22:BB:A4:A3:F1:1C:75:C5:D9:04:F2:E8:B7:27:71:6D:D0:4F:FC:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa
Signing time:             Mon 03 Nov 2025 14:14:53 +0000
ROA not before:           Mon 03 Nov 2025 14:09:53 +0000
ROA not after:            Mon 02 Nov 2026 14:14:53 +0000
asID:                     267440
IP address blocks:        192.141.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 21:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ff:07:bd:ff:5f:b5:16:29:c9:b3:01:e9:7f:d1:35:5b:ea:7f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA
        Validity
            Not Before: Nov  3 14:09:53 2025 GMT
            Not After : Nov  2 14:14:53 2026 GMT
        Subject: CN=B29E34B43B612984A979A82969188304C3643AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ca:b0:f1:5f:52:48:f2:9f:a6:b7:cb:36:01:
                    36:7b:7d:d5:7f:f4:21:94:17:e2:1e:8f:ea:0d:1e:
                    2c:c4:a6:7d:cf:1c:8d:69:3e:db:68:65:43:50:fb:
                    e9:57:b0:6d:fa:60:d9:72:71:65:3b:cb:0b:49:b7:
                    e0:43:c1:7e:9b:2d:04:6f:14:55:49:a9:69:74:00:
                    3c:50:42:f0:bf:08:af:ba:41:0d:96:57:cd:78:ea:
                    43:a8:ff:3c:23:a8:6f:e3:fd:be:d8:ee:6f:6e:05:
                    c3:0a:fe:22:65:31:bc:b1:e0:57:b5:7e:e3:7d:63:
                    eb:1f:65:95:59:fb:26:58:86:e4:90:75:ee:e9:c3:
                    60:8f:66:f3:86:c6:c9:03:c8:a1:3b:ba:59:14:a2:
                    f6:37:62:f2:42:9a:17:01:1f:15:6b:c5:fa:a2:4e:
                    c7:cc:ce:bc:4b:bc:a8:f3:3c:e7:2a:b8:4b:8a:df:
                    e3:ee:9e:35:67:55:6d:a5:16:38:d2:b0:15:4b:c0:
                    31:c2:be:fe:20:3c:77:c6:b8:95:af:a4:ae:24:4b:
                    15:37:39:e1:f3:39:f0:49:56:0a:33:e7:a8:e3:d4:
                    f0:ce:87:68:bf:16:67:27:cc:77:e1:fd:72:7c:22:
                    cb:79:1b:82:25:74:0d:32:ec:28:bb:ae:f1:7f:ab:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:34:B4:3B:61:29:84:A9:79:A8:29:69:18:83:04:C3:64:3A:C4
            X509v3 Authority Key Identifier:
                keyid:22:BB:A4:A3:F1:1C:75:C5:D9:04:F2:E8:B7:27:71:6D:D0:4F:FC:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:cb:cb:6a:5e:5c:b6:4e:59:01:b4:8c:43:f8:8a:71:30:40:
         29:62:aa:a2:57:6e:c5:e1:c4:1a:54:7a:16:31:93:24:aa:19:
         33:a5:77:c5:8e:5b:6d:48:64:b7:06:fe:be:d1:6c:9c:6e:22:
         a4:60:68:44:33:e6:d4:3c:b4:23:66:b9:ff:dd:fc:a0:19:87:
         6d:a8:c3:bb:96:1e:be:b5:11:68:dd:7e:61:2d:36:6e:8d:56:
         04:ea:ac:f5:d3:d0:7a:cd:b5:46:a8:17:51:e7:2f:1b:9c:40:
         8a:b1:c1:39:73:a3:9a:9b:9b:47:1d:49:1d:98:3d:94:0a:9b:
         73:88:29:79:38:db:dd:de:25:71:5a:ec:23:ef:e7:e4:ee:a5:
         71:54:23:5f:4b:c9:60:ec:51:08:e0:51:82:59:df:ac:f2:bd:
         41:29:99:ac:66:c9:91:e2:7b:3c:89:04:cb:e1:02:81:4d:cd:
         9f:73:74:dc:ba:30:c7:55:81:24:f4:36:c5:91:0b:e3:4e:9e:
         31:a1:5d:aa:de:f6:a0:37:64:2b:9e:7d:c9:60:87:c3:50:51:
         4f:54:c0:75:49:cf:79:da:5d:0c:bd:6d:31:cc:89:d9:d4:d5:
         ed:5c:0f:45:93:70:0d:6c:92:56:18:bf:b1:14:e0:dd:84:5b:
         17:aa:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:38:30 2025 by rpki-client