Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134342e302f32342d3234203d3e20323730333639.roa
File:                     3139302e38392e3134342e302f32342d3234203d3e20323730333639.roa (raw, json)
Hash identifier:          lAKLl02+VWOyFc0YZfqmrfOExhQ3O7m9juZfCJjhP5c=
Subject key identifier:   34:48:49:C3:51:EB:0A:8F:E8:EB:B5:29:8B:97:C4:F0:62:1E:4C:56
Certificate issuer:       /CN=1648EAC84265789F83961B9066BFD7F62B77CC79
Certificate serial:       78C405BBE33B0E8A1F4776CC8AD67F561AB93AAF
Authority key identifier: 16:48:EA:C8:42:65:78:9F:83:96:1B:90:66:BF:D7:F6:2B:77:CC:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1648EAC84265789F83961B9066BFD7F62B77CC79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134342e302f32342d3234203d3e20323730333639.roa
Signing time:             Wed 27 Aug 2025 15:12:00 +0000
ROA not before:           Wed 27 Aug 2025 15:07:00 +0000
ROA not after:            Wed 26 Aug 2026 15:12:00 +0000
asID:                     270369
IP address blocks:        190.89.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/1648EAC84265789F83961B9066BFD7F62B77CC79.crl
                          rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/1648EAC84265789F83961B9066BFD7F62B77CC79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1648EAC84265789F83961B9066BFD7F62B77CC79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c4:05:bb:e3:3b:0e:8a:1f:47:76:cc:8a:d6:7f:56:1a:b9:3a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1648EAC84265789F83961B9066BFD7F62B77CC79
        Validity
            Not Before: Aug 27 15:07:00 2025 GMT
            Not After : Aug 26 15:12:00 2026 GMT
        Subject: CN=344849C351EB0A8FE8EBB5298B97C4F0621E4C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:d9:75:3d:26:a5:cd:b7:20:55:4d:85:dc:
                    55:22:21:83:18:a0:01:06:e3:9a:16:ff:66:f6:23:
                    25:92:fd:77:c0:b0:2c:ad:2f:04:b1:d1:dc:37:98:
                    f4:f0:da:f2:cf:54:6c:76:c7:7f:e2:2e:c6:d8:5f:
                    6c:08:a8:d8:d6:1b:12:70:95:92:d9:16:f4:a0:13:
                    ff:2c:a3:18:5b:40:6f:5b:0e:7a:48:2c:a5:05:fa:
                    cc:b4:1c:1e:14:0d:22:02:e8:fb:3c:cd:53:09:01:
                    e9:d2:42:a5:d0:f2:8b:96:d1:89:3a:20:92:43:29:
                    a5:c9:5c:f3:0b:b4:a9:2a:25:f0:c9:6b:92:4b:42:
                    6a:5f:e5:fd:68:d7:1c:94:8f:0b:c6:a1:f0:5d:65:
                    81:45:8e:ec:3a:f0:73:69:aa:40:77:34:46:48:cb:
                    77:16:92:70:1e:ad:f5:99:fd:9e:ea:59:30:db:84:
                    17:37:1c:46:2d:47:03:c1:5e:9e:a8:20:6e:b8:b4:
                    3b:df:cb:fd:59:21:d7:58:cb:1f:c8:95:46:8c:ed:
                    06:61:d2:7c:31:86:5d:9d:65:f8:27:95:b3:0d:80:
                    25:4b:a4:b6:92:72:a2:fe:98:ca:b4:83:8b:28:f4:
                    4d:b7:ca:39:1e:6c:c5:35:50:8a:74:4a:07:77:32:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:48:49:C3:51:EB:0A:8F:E8:EB:B5:29:8B:97:C4:F0:62:1E:4C:56
            X509v3 Authority Key Identifier:
                keyid:16:48:EA:C8:42:65:78:9F:83:96:1B:90:66:BF:D7:F6:2B:77:CC:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/1648EAC84265789F83961B9066BFD7F62B77CC79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1648EAC84265789F83961B9066BFD7F62B77CC79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134342e302f32342d3234203d3e20323730333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:bd:29:ed:72:d1:d9:06:e5:5d:03:71:dc:31:e5:22:5b:cf:
         d3:0a:92:9d:75:74:ca:f3:7b:38:b8:ad:13:3b:2b:0d:ce:e8:
         ec:12:79:70:bf:3c:c7:97:76:d5:7f:0b:fc:4c:ff:c4:31:d3:
         38:bf:7b:c6:12:5b:fe:86:78:66:fd:e9:22:9f:49:d6:63:d6:
         a8:02:54:55:8c:8d:97:5f:50:db:a0:76:d0:30:ba:90:f3:a9:
         54:b6:e3:53:53:72:20:4b:f7:d3:97:b9:64:8e:9e:54:8c:d5:
         24:c6:9a:75:ed:01:a7:25:a3:ba:80:c0:57:2c:e8:f1:02:18:
         ec:be:e9:fc:dc:d1:43:d7:ed:11:f4:20:27:e8:7c:40:2b:0a:
         2d:fa:fa:42:6d:b0:43:71:23:5c:8d:2f:8e:6f:ea:4f:9d:d4:
         25:46:c3:a0:a8:88:e1:dd:dc:fb:fb:3b:2f:51:f4:f3:e2:ad:
         57:87:c7:76:53:26:1e:84:ee:b5:77:39:57:39:96:f9:ee:62:
         c4:18:c4:be:ab:6c:7f:ad:35:b2:8b:7d:89:69:a2:9d:c1:f7:
         a4:31:b4:7e:e1:40:05:0e:96:c0:84:57:02:00:1a:27:b8:ae:
         f4:35:21:4f:51:81:06:24:34:45:3e:0f:0b:2f:f7:5b:2a:51:
         b4:76:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:28:44 2025 by rpki-client