Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa (raw, json)
Hash identifier:          x90+A6PCgRTCnj5MxgkPN8v77D+QZ6eDur/AiajiT60=
Subject key identifier:   1D:46:0A:8A:99:01:C5:08:F9:07:72:7F:3E:0F:37:64:0B:72:C5:59
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       5AC78AF1EE4E724F071B8B29B599644AB6DB9ADC
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
Signing time:             Wed 10 Sep 2025 12:35:00 +0000
ROA not before:           Wed 10 Sep 2025 12:30:00 +0000
ROA not after:            Wed 09 Sep 2026 12:35:00 +0000
asID:                     271111
IP address blocks:        192.140.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c7:8a:f1:ee:4e:72:4f:07:1b:8b:29:b5:99:64:4a:b6:db:9a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Sep 10 12:30:00 2025 GMT
            Not After : Sep  9 12:35:00 2026 GMT
        Subject: CN=1D460A8A9901C508F907727F3E0F37640B72C559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:f8:d8:f8:75:4c:09:0b:5b:2d:e2:64:a4:
                    f2:3f:f5:4b:d8:54:da:5f:2d:ce:c3:53:50:d9:13:
                    ce:f9:4d:d8:70:e0:71:43:66:ce:65:77:93:0e:fa:
                    fb:d6:30:b2:e0:9c:dc:6c:92:39:47:7a:5f:8e:8e:
                    6a:bf:82:1a:ab:40:f4:c6:3c:9d:9d:a4:83:37:3d:
                    a5:9d:38:d2:10:a7:70:38:de:c1:c9:4d:10:a3:c7:
                    8a:20:b5:73:f3:64:0c:72:82:18:20:db:1f:a2:c0:
                    8a:d3:1d:4f:d6:48:9a:83:27:8e:d6:d5:8f:0c:ae:
                    22:2c:3e:43:d7:40:ca:34:69:f0:5c:a7:0b:b3:52:
                    19:4f:b2:5c:2c:71:e2:cc:e6:41:1b:5a:33:01:fb:
                    e6:89:c9:fe:c9:05:d4:d0:49:a8:d6:48:25:9b:c3:
                    89:d7:6d:c6:79:ee:4e:f2:91:78:59:46:ec:6d:97:
                    4b:21:00:f4:f0:88:50:a3:7e:d5:77:4f:9e:ee:df:
                    d0:65:7b:e8:ec:c6:d0:81:6d:28:c9:7d:4c:59:77:
                    53:9f:38:3d:75:a4:28:97:1e:19:dd:48:ea:5d:b3:
                    5b:90:0a:00:91:9f:19:52:90:0e:66:9c:5a:69:29:
                    33:16:b0:1b:bc:ef:e4:6f:eb:04:8d:1c:8a:61:96:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:46:0A:8A:99:01:C5:08:F9:07:72:7F:3E:0F:37:64:0B:72:C5:59
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:e4:88:2d:a1:3a:03:c8:7c:6c:bc:7b:1a:f7:f0:05:b7:fa:
         7b:67:1f:19:ac:e3:3e:e6:aa:14:72:46:85:bf:c4:8b:8c:d0:
         4f:50:5b:1b:fb:4e:d9:38:b8:de:17:b8:07:a7:ac:6e:0a:6d:
         8a:55:f9:b8:8d:a7:6a:a8:c5:ec:74:28:fa:d5:b4:17:d8:24:
         ad:ef:80:63:1f:24:00:94:16:57:49:50:77:fc:e9:44:ac:f4:
         71:99:26:c8:17:53:07:21:bb:e4:18:64:f6:b6:dc:4a:d5:64:
         b8:f0:18:8b:c4:e4:32:e7:97:dd:74:6d:3e:b5:f5:4f:67:4a:
         2e:5f:4d:bd:81:33:35:a6:1c:48:af:25:0c:29:ca:69:9b:03:
         8f:4c:16:75:4a:98:08:b6:6a:d6:68:af:a0:4d:5f:01:bd:46:
         2e:8c:bb:33:8b:eb:0a:88:ed:e5:76:d9:65:40:a0:ec:a0:a1:
         71:4c:8d:96:a9:32:80:cb:e1:9c:c6:93:5a:c0:69:82:d9:e0:
         87:28:c3:5b:0b:47:6e:c5:43:49:5a:d1:2c:4f:58:d8:88:52:
         65:42:85:a6:ba:37:d9:20:a3:24:11:7a:66:1d:84:f7:d0:da:
         7b:29:e5:54:6e:a4:5d:73:02:e5:f5:1a:ca:74:9f:86:fc:55:
         08:7a:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:47:04 2025 by rpki-client