Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/3139322e3134302e38302e302f32322d3234203d3e20323734353932.roa
File:                     3139322e3134302e38302e302f32322d3234203d3e20323734353932.roa (raw, json)
Hash identifier:          433xuJUfjpnD2Hfc8nxhyHWDDVy7Ilp/5BWBP0Axgg8=
Subject key identifier:   FD:57:09:7D:E6:02:DA:31:FC:CD:91:5D:43:46:A1:61:CA:B7:0F:00
Certificate issuer:       /CN=E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B
Certificate serial:       6FFD844F91A578513A2A0DB9387093486540ABA1
Authority key identifier: E6:DE:35:A8:79:ED:E5:C8:C5:F3:56:38:2A:AC:3C:CA:0D:61:D7:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/3139322e3134302e38302e302f32322d3234203d3e20323734353932.roa
Signing time:             Wed 28 May 2025 20:47:52 +0000
ROA not before:           Wed 28 May 2025 20:42:52 +0000
ROA not after:            Wed 27 May 2026 20:47:52 +0000
asID:                     274592
IP address blocks:        192.140.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.crl
                          rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fd:84:4f:91:a5:78:51:3a:2a:0d:b9:38:70:93:48:65:40:ab:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B
        Validity
            Not Before: May 28 20:42:52 2025 GMT
            Not After : May 27 20:47:52 2026 GMT
        Subject: CN=FD57097DE602DA31FCCD915D4346A161CAB70F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:2e:69:00:e3:1a:d9:3a:13:7c:c0:2c:cf:
                    f4:b5:86:eb:d8:16:08:8a:3e:8b:b0:be:1c:ea:cd:
                    a2:3e:06:f4:41:80:d7:64:f9:5d:2b:2b:fd:6f:50:
                    d5:d5:6c:8f:31:c6:8c:ce:26:ae:91:9c:cd:86:84:
                    11:a2:98:d1:ec:ff:bd:36:21:08:85:87:1f:d4:b2:
                    7d:9f:c7:d4:67:d4:e3:64:05:d2:3c:a8:78:98:9f:
                    39:2e:23:90:f2:56:dd:ff:8a:6d:55:f1:f0:d4:23:
                    64:43:25:6a:9f:5a:43:c0:25:e8:fa:35:82:d7:f4:
                    2a:a5:cf:54:cf:60:57:cb:c6:8e:cd:1e:93:0f:fa:
                    c8:65:b6:8b:70:35:ff:3e:60:e7:5d:fc:33:d3:3f:
                    82:41:94:c3:8b:97:40:7f:0f:5e:11:a2:57:d5:c9:
                    ac:04:d8:8b:f8:d1:00:ed:bc:d6:c5:ff:b1:fb:63:
                    66:f9:a5:67:fc:cd:86:e8:92:b7:61:c8:49:fd:3c:
                    77:4d:78:21:62:c9:1f:f0:c6:ba:10:a9:ed:7d:3c:
                    f8:40:6b:b4:64:d8:41:a0:76:54:3d:d2:f2:14:da:
                    87:6c:de:59:86:62:7d:8d:dd:af:11:0f:35:97:ee:
                    a5:32:0d:ba:f7:0d:ce:4d:63:63:cc:f2:69:2f:92:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:57:09:7D:E6:02:DA:31:FC:CD:91:5D:43:46:A1:61:CA:B7:0F:00
            X509v3 Authority Key Identifier:
                keyid:E6:DE:35:A8:79:ED:E5:C8:C5:F3:56:38:2A:AC:3C:CA:0D:61:D7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DE35A879EDE5C8C5F356382AAC3CCA0D61D75B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DL7VBrVgG5WddTvFR8MorC45RBKNYtqcX9EBG6Na8w7U/0/3139322e3134302e38302e302f32322d3234203d3e20323734353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:77:82:8d:1a:df:f2:b9:bd:61:9c:bc:07:e4:ed:3b:0d:b4:
         5a:8c:05:df:58:f4:47:ef:1e:11:64:2b:9b:18:b0:7b:4d:dd:
         46:18:9e:b7:2b:f3:9b:d8:94:c6:db:17:d8:01:68:b5:46:46:
         11:f5:09:72:b0:67:53:52:91:db:5a:1c:e7:55:98:3b:b2:ff:
         9e:7a:e4:28:cd:c9:0d:3a:b7:62:a2:b1:f5:c8:de:24:fd:f0:
         cd:37:b2:7c:af:0c:dd:fb:9e:6a:fe:72:de:5e:6a:31:5a:b9:
         47:55:b4:a2:1f:a7:38:b4:9e:e8:85:b8:e6:4a:23:05:e1:55:
         69:b3:a2:f9:b7:11:dc:03:8a:bf:91:65:03:12:96:e7:30:ad:
         dd:7f:88:82:bd:39:69:56:da:63:f0:29:0b:48:e3:2a:89:0f:
         d7:c5:66:1c:8d:1c:6e:8b:c2:26:1d:f5:47:d9:bf:f6:d3:00:
         c1:89:eb:36:c7:9f:50:4d:82:35:42:10:bb:dc:41:70:2f:95:
         2c:19:6b:88:7a:f9:07:71:1b:0c:9a:9c:58:d2:3a:1c:98:0c:
         3c:7c:2c:f4:74:ee:a9:4a:c1:ab:b7:d9:9f:f2:88:04:60:b2:
         49:53:a1:d0:e2:b7:17:a2:af:8d:02:e0:71:4e:de:ef:30:50:
         41:e4:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:48:10 2025 by rpki-client