Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier:          j0jpdLq1RhpBG5NMWDatMQFTMX/HyNXMf2+ZnxmGjP8=
Subject key identifier:   9A:60:C5:8C:29:25:8D:B0:9B:10:EA:71:24:1F:64:66:6A:C7:7B:76
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       1EF66D0473D16ABCBBD18F9C1739A1C3732699FF
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:06 +0000
ROA not before:           Thu 29 May 2025 14:24:06 +0000
ROA not after:            Thu 28 May 2026 14:29:06 +0000
asID:                     263518
IP address blocks:        191.243.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f6:6d:04:73:d1:6a:bc:bb:d1:8f:9c:17:39:a1:c3:73:26:99:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:06 2025 GMT
            Not After : May 28 14:29:06 2026 GMT
        Subject: CN=9A60C58C29258DB09B10EA71241F64666AC77B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e7:e4:3a:3f:90:64:bf:52:73:dc:ca:36:63:
                    84:43:48:2e:ac:33:1b:84:85:93:f9:19:7a:4c:5a:
                    2f:ee:9a:9a:95:1c:da:fe:e8:f9:09:37:bd:56:1c:
                    25:7c:32:d1:5b:bd:96:eb:70:f2:c9:23:63:30:0d:
                    d0:f7:5b:d9:c5:11:6f:f0:68:f4:ae:ba:6a:3a:34:
                    34:05:7f:6d:3a:9b:9b:95:68:05:9a:16:1f:e9:8a:
                    29:48:d7:a0:81:54:78:37:29:e4:9e:71:f1:ca:5b:
                    21:50:77:9c:6a:52:80:30:c0:db:9c:c2:3f:0f:b5:
                    c9:eb:84:86:d5:01:6a:a8:d5:a6:10:62:a5:83:55:
                    b0:5f:e4:69:39:14:70:6c:e8:5d:cc:85:4f:5c:77:
                    26:09:c8:ff:a7:f1:4e:f6:99:be:a4:03:50:33:14:
                    ba:54:76:6b:50:30:73:cb:78:7c:8f:2a:7f:56:1e:
                    1b:95:45:ad:7a:9d:1c:1b:56:af:7e:04:4a:4d:f7:
                    e7:02:b0:49:4e:88:5d:ad:f7:97:2c:c9:66:0b:0d:
                    cf:7c:03:f5:5a:7b:af:e9:6f:79:44:c9:99:8b:96:
                    21:58:d3:91:e9:69:7f:49:90:f9:27:c0:c4:ba:05:
                    a2:31:c7:85:b5:e5:bc:f7:82:6c:46:92:1a:66:af:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:60:C5:8C:29:25:8D:B0:9B:10:EA:71:24:1F:64:66:6A:C7:7B:76
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:44:f3:fa:1c:e1:8c:6d:50:42:42:e2:71:d5:ac:90:52:
         1e:aa:dc:69:9b:8d:f3:e7:04:6f:58:37:b2:f1:05:7b:b2:d8:
         ef:fd:81:c3:44:ee:26:47:ec:ef:bf:e5:79:08:ed:fb:e4:21:
         65:e5:30:b2:13:de:31:83:37:37:f7:20:22:1f:d6:51:ba:51:
         57:8a:5b:db:31:97:f6:49:e8:68:a1:c9:b7:7f:83:c6:1d:cb:
         a5:b6:f3:3c:a0:df:c7:fa:3e:86:72:0b:47:1a:4b:cd:73:f7:
         42:a6:7a:4a:b0:b7:20:77:ab:5e:fb:5e:d1:aa:57:d5:d1:21:
         c1:4f:44:00:9f:fb:4d:e6:ce:2e:9b:cd:46:db:53:7b:43:04:
         52:9f:f5:04:e7:56:0d:84:d5:b7:42:11:61:db:70:77:6f:05:
         dc:3d:f8:ab:be:07:e2:21:fa:e6:e3:37:f3:cf:15:78:27:29:
         15:ce:7b:e9:74:68:dd:c6:2c:84:17:88:3d:14:ec:20:d6:8a:
         d0:46:1e:59:75:4e:54:ca:0a:c6:63:2a:3b:67:24:47:2b:2e:
         dc:2a:be:48:28:0e:86:a2:2f:12:23:63:46:d6:e9:fc:90:22:
         69:68:7e:70:a6:93:2f:06:c7:e4:f8:00:60:5e:ca:a6:07:67:
         f3:c6:b4:71
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHvZtBHPRary70Y+cFzmhw3Mmmf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA1MjkxNDI0MDZaFw0yNjA1MjgxNDI5MDZaMDMxMTAvBgNV
BAMTKDlBNjBDNThDMjkyNThEQjA5QjEwRUE3MTI0MUY2NDY2NkFDNzdCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN5+Q6P5Bkv1Jz3Mo2Y4RDSC6s
MxuEhZP5GXpMWi/umpqVHNr+6PkJN71WHCV8MtFbvZbrcPLJI2MwDdD3W9nFEW/w
aPSuumo6NDQFf206m5uVaAWaFh/piilI16CBVHg3KeSecfHKWyFQd5xqUoAwwNuc
wj8PtcnrhIbVAWqo1aYQYqWDVbBf5Gk5FHBs6F3MhU9cdyYJyP+n8U72mb6kA1Az
FLpUdmtQMHPLeHyPKn9WHhuVRa16nRwbVq9+BEpN9+cCsElOiF2t95csyWYLDc98
A/Vae6/pb3lEyZmLliFY05HpaX9JkPknwMS6BaIxx4W15bz3gmxGkhpmr9rpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmmDFjCkljbCbEOpxJB9kZmrHe3YwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr/z1DANBgkqhkiG9w0BAQsFAAOCAQEAF/RE
8/oc4YxtUEJC4nHVrJBSHqrcaZuN8+cEb1g3svEFe7LY7/2Bw0TuJkfs77/leQjt
++QhZeUwshPeMYM3N/cgIh/WUbpRV4pb2zGX9knoaKHJt3+Dxh3LpbbzPKDfx/o+
hnILRxpLzXP3QqZ6SrC3IHerXvte0apX1dEhwU9EAJ/7TebOLpvNRttTe0MEUp/1
BOdWDYTVt0IRYdtwd28F3D34q74H4iH65uM3888VeCcpFc576XRo3cYshBeIPRTs
INaK0EYeWXVOVMoKxmMqO2ckRysu3Cq+SCgOhqIvEiNjRtbp/JAiaWh+cKaTLwbH
5PgAYF7Kpgdn88a0cQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:47 2025 by rpki-client