Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/3139302e38392e3138342e302f32322d3332203d3e20323730333930.roa
File:                     3139302e38392e3138342e302f32322d3332203d3e20323730333930.roa (raw, json)
Hash identifier:          QUDY+VzgzahDyt7gXARjwY4O3S7CzIpxJiG/TwQ7Ptw=
Subject key identifier:   76:71:4D:AC:EF:A7:BC:68:22:F4:36:A5:04:D4:85:4A:26:D3:D3:6D
Certificate issuer:       /CN=15730E3A6867D29F195428CD09644FEB75828102
Certificate serial:       11A145576411342516F45FD327F1EAF15674F733
Authority key identifier: 15:73:0E:3A:68:67:D2:9F:19:54:28:CD:09:64:4F:EB:75:82:81:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/3139302e38392e3138342e302f32322d3332203d3e20323730333930.roa
Signing time:             Fri 24 Oct 2025 02:58:37 +0000
ROA not before:           Fri 24 Oct 2025 02:53:37 +0000
ROA not after:            Fri 23 Oct 2026 02:58:37 +0000
asID:                     270390
IP address blocks:        190.89.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.crl
                          rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a1:45:57:64:11:34:25:16:f4:5f:d3:27:f1:ea:f1:56:74:f7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15730E3A6867D29F195428CD09644FEB75828102
        Validity
            Not Before: Oct 24 02:53:37 2025 GMT
            Not After : Oct 23 02:58:37 2026 GMT
        Subject: CN=76714DACEFA7BC6822F436A504D4854A26D3D36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:fe:e9:b4:4b:41:d3:46:27:fc:23:37:cb:
                    ef:e2:58:0b:7e:35:a7:7a:30:a5:13:58:89:52:2c:
                    c8:7a:6d:4e:07:b9:ca:f8:dd:96:4c:b5:3f:35:82:
                    9c:62:f0:85:cd:20:de:a9:ce:0d:47:16:cf:20:b3:
                    de:c6:19:53:ca:13:1b:a4:13:e6:80:61:38:02:97:
                    e2:ef:ec:e9:e0:7f:e0:38:40:6b:9e:1b:50:30:ea:
                    ae:22:ae:12:98:4d:52:cc:2d:78:60:4e:bf:f5:96:
                    9c:b5:c4:d6:1d:97:e3:64:b1:0e:dd:21:ab:63:ab:
                    68:2d:ed:cf:f5:b1:82:d4:e7:e5:af:ee:18:3e:dd:
                    67:81:55:77:ec:06:cf:57:e7:6e:33:9d:8f:79:22:
                    9d:48:4c:d5:f7:5c:9c:d3:01:40:eb:cc:e9:a0:68:
                    4f:81:71:29:cf:83:de:bb:81:42:e6:40:6f:b5:40:
                    cd:8b:f3:9b:9e:75:7c:f7:35:23:6b:5f:42:9a:23:
                    0e:3a:ad:aa:0f:96:31:26:f9:44:12:07:d2:9a:5e:
                    db:a7:3f:49:59:f5:df:57:eb:15:01:f1:28:bd:0b:
                    8f:a8:e0:03:6c:b0:cf:10:42:b8:74:43:1c:73:d9:
                    81:8c:63:08:de:8e:57:03:f7:e9:c1:39:39:94:c0:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:71:4D:AC:EF:A7:BC:68:22:F4:36:A5:04:D4:85:4A:26:D3:D3:6D
            X509v3 Authority Key Identifier:
                keyid:15:73:0E:3A:68:67:D2:9F:19:54:28:CD:09:64:4F:EB:75:82:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/3139302e38392e3138342e302f32322d3332203d3e20323730333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:52:81:05:8c:56:80:05:0c:ae:19:31:f2:00:16:d8:ea:76:
         62:33:10:07:0d:f6:49:b5:64:4a:34:07:7d:80:64:a6:1f:18:
         d3:ba:2e:bf:92:d2:dd:8e:42:83:d0:29:71:f6:0d:c4:72:9a:
         77:73:38:14:1f:f2:65:01:e0:de:17:c1:b7:ce:49:0e:a4:82:
         c3:d3:44:1e:39:e5:8e:fe:1b:22:4c:b8:5d:8f:ad:8b:0e:2c:
         f2:07:2e:b7:25:11:54:e3:94:7d:4f:7b:ec:63:b7:c9:40:11:
         22:fd:e0:d6:2a:e2:0f:18:ba:3f:5d:41:3f:79:a5:52:f0:9a:
         f5:c4:f7:62:66:7e:24:8a:75:79:26:e4:ff:d0:88:cc:58:94:
         01:ca:a3:f2:b9:38:4b:44:51:ac:6e:7f:bc:6f:57:f7:e7:13:
         a5:29:95:2b:3e:fa:fd:1f:37:9a:2d:0e:d0:8f:d4:bc:b5:b7:
         12:28:d2:17:0d:9a:2c:9c:1a:0f:cf:67:9b:c6:85:f9:88:79:
         e7:36:f6:5d:33:ef:af:63:88:e8:08:8e:2a:63:97:6a:9a:52:
         6f:4d:46:db:89:b3:e5:86:69:aa:53:21:d7:42:bd:73:b9:c1:
         8f:bf:65:4f:e1:32:5f:ae:9b:f3:22:ab:fd:a8:68:8c:45:78:
         b6:b7:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:03:26 2025 by rpki-client