Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          xBlV8Ip5/YGRTOQc7yczbFRYcWfaWhVQ26IOppqm2pE=
Subject key identifier:   9C:C2:5F:F9:1A:BE:B1:E0:73:5B:28:37:A9:06:B3:41:24:C8:E9:2F
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       552819F94CA4D26CBB719E9A0AEE03C422BEF6BC
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa
Signing time:             Wed 10 Sep 2025 12:34:59 +0000
ROA not before:           Wed 10 Sep 2025 12:29:59 +0000
ROA not after:            Wed 09 Sep 2026 12:34:59 +0000
asID:                     271111
IP address blocks:        192.140.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:28:19:f9:4c:a4:d2:6c:bb:71:9e:9a:0a:ee:03:c4:22:be:f6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Sep 10 12:29:59 2025 GMT
            Not After : Sep  9 12:34:59 2026 GMT
        Subject: CN=9CC25FF91ABEB1E0735B2837A906B34124C8E92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:53:52:9a:78:9b:e7:c9:9a:99:73:bd:62:
                    c0:52:1c:3f:d8:b3:7c:ba:a9:53:ef:e2:ea:c9:d1:
                    aa:3f:d3:f3:49:9e:67:81:94:45:60:ea:89:20:30:
                    dd:e0:bd:6b:73:56:5b:53:e2:00:c8:ae:79:ad:09:
                    41:d9:f3:4e:50:a9:f6:27:ad:be:86:ca:d4:40:87:
                    96:bb:35:81:80:0c:7d:10:c8:0e:a6:cf:f1:18:c2:
                    b8:76:54:ff:51:41:c0:93:f6:79:85:53:43:18:fa:
                    5c:1f:3b:9e:24:9f:3b:fd:ca:e3:93:1f:09:3e:c7:
                    19:ea:bb:a9:cb:18:9f:c5:90:56:9f:a0:9a:13:7d:
                    a0:cd:73:5d:4d:01:f3:1e:e8:2a:4c:af:33:30:89:
                    4a:a6:7b:82:f9:05:25:bc:7f:00:fd:bb:53:f2:b5:
                    ef:2d:8b:fc:14:8b:7a:2d:1e:75:49:9d:6a:7f:6d:
                    a9:0f:5d:0e:8f:1b:61:42:f4:52:b2:64:92:ea:03:
                    31:9b:a4:f0:1c:4e:57:5d:3b:d1:0f:4f:37:b0:b1:
                    f2:a4:e8:3c:eb:fb:5e:88:d4:07:a8:2c:d0:f3:d2:
                    32:ce:42:45:9b:40:40:11:ff:71:4e:f0:78:24:99:
                    3f:54:df:a1:91:92:66:09:d3:84:47:06:fd:62:8e:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C2:5F:F9:1A:BE:B1:E0:73:5B:28:37:A9:06:B3:41:24:C8:E9:2F
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:d9:52:cb:6f:eb:14:c2:5b:f0:86:8d:e6:09:a5:cf:1f:d9:
         d7:2c:44:98:c8:83:41:7c:61:8b:23:33:3c:35:f4:45:65:66:
         87:cc:2f:ed:2b:97:ac:e9:7f:39:fc:d8:cc:25:51:cd:c9:a1:
         72:f9:99:4d:9d:1a:c4:ad:47:0e:e2:8e:2e:9a:28:e7:7b:bc:
         6d:e4:f9:5c:e6:c5:37:d1:ef:09:a2:03:ed:25:7b:b8:8d:e6:
         1d:37:09:ce:8b:69:eb:e5:8c:0c:e6:85:ee:11:22:bf:f8:df:
         6d:24:3e:17:84:92:52:e7:f3:08:35:e3:88:e9:65:e6:18:a6:
         98:56:1e:e5:11:33:b2:ba:45:bd:68:89:8c:8c:6b:da:aa:89:
         8b:56:3b:5e:b9:c2:c7:76:bb:93:54:01:6b:13:83:4b:f9:4b:
         9a:7f:b0:86:64:a1:49:8f:2d:0b:bc:7f:56:71:8c:ba:7b:cf:
         ab:8b:8b:89:fb:a3:c2:c7:d2:63:e0:e6:0a:19:77:d9:8c:ef:
         0e:74:96:bc:f0:76:2f:3c:3a:8b:84:9a:1f:55:2e:3f:a7:0b:
         1a:69:bf:9c:96:08:4b:89:8a:e9:ec:47:cc:a5:10:9b:1e:aa:
         78:0e:f6:4e:1b:04:6f:d6:c1:78:c7:cd:78:ae:0a:63:af:c8:
         ed:e8:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:14:28 2025 by rpki-client