Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134372e302f32342d3234203d3e20323730333639.roa
File:                     3139302e38392e3134372e302f32342d3234203d3e20323730333639.roa (raw, json)
Hash identifier:          j//VNO5HmjqQg72cvQMQoJPypGrwnAgXuMS+isnJtNc=
Subject key identifier:   3A:7B:85:70:36:F9:E7:AD:12:FB:52:4F:1D:6C:D3:EF:FD:65:D0:46
Certificate issuer:       /CN=1648EAC84265789F83961B9066BFD7F62B77CC79
Certificate serial:       1BE3F69ED24051AF3D2796F8B6B6F16A9D2F3B32
Authority key identifier: 16:48:EA:C8:42:65:78:9F:83:96:1B:90:66:BF:D7:F6:2B:77:CC:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1648EAC84265789F83961B9066BFD7F62B77CC79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134372e302f32342d3234203d3e20323730333639.roa
Signing time:             Wed 27 Aug 2025 15:12:01 +0000
ROA not before:           Wed 27 Aug 2025 15:07:01 +0000
ROA not after:            Wed 26 Aug 2026 15:12:01 +0000
asID:                     270369
IP address blocks:        190.89.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/1648EAC84265789F83961B9066BFD7F62B77CC79.crl
                          rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/1648EAC84265789F83961B9066BFD7F62B77CC79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1648EAC84265789F83961B9066BFD7F62B77CC79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e3:f6:9e:d2:40:51:af:3d:27:96:f8:b6:b6:f1:6a:9d:2f:3b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1648EAC84265789F83961B9066BFD7F62B77CC79
        Validity
            Not Before: Aug 27 15:07:01 2025 GMT
            Not After : Aug 26 15:12:01 2026 GMT
        Subject: CN=3A7B857036F9E7AD12FB524F1D6CD3EFFD65D046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:17:c4:20:de:89:59:aa:5c:97:49:5d:ed:
                    85:ad:32:57:02:b5:e4:67:56:0c:b7:2b:0d:55:66:
                    a0:97:f0:48:9f:ed:72:f1:2a:74:cb:ac:d0:a9:16:
                    6a:73:37:f0:c4:38:52:db:6c:96:c6:d4:47:aa:eb:
                    c8:73:e3:0a:5f:96:21:3d:4b:4f:03:05:93:05:25:
                    24:38:0f:a4:0d:ce:64:66:96:50:89:f7:90:79:6e:
                    34:3f:be:76:52:b4:8f:3f:cf:20:44:8f:34:60:e1:
                    e5:d4:c5:19:55:64:75:00:0b:64:62:81:9a:fc:f2:
                    30:46:27:45:15:39:e0:db:00:57:82:e0:5f:b1:e4:
                    62:11:d6:aa:7b:55:f2:bf:c2:fb:d6:31:05:bb:a1:
                    d5:4d:2e:40:54:38:bd:3a:07:16:4c:b2:59:e3:09:
                    03:05:e1:06:26:8c:9d:92:fa:86:06:30:4a:de:26:
                    79:56:12:95:fb:94:fc:27:35:f2:b7:31:4a:b0:6b:
                    71:f6:8b:1c:69:9b:10:25:f2:95:a0:b0:22:28:7c:
                    de:c6:47:c9:ca:a8:8d:1d:2c:db:b3:56:c9:5b:c5:
                    d0:5e:8f:11:5d:6b:5f:a3:62:e0:9a:ec:b8:05:ae:
                    82:f0:9b:89:88:fc:b9:d7:2a:22:ce:42:a7:3f:8e:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:85:70:36:F9:E7:AD:12:FB:52:4F:1D:6C:D3:EF:FD:65:D0:46
            X509v3 Authority Key Identifier:
                keyid:16:48:EA:C8:42:65:78:9F:83:96:1B:90:66:BF:D7:F6:2B:77:CC:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/1648EAC84265789F83961B9066BFD7F62B77CC79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1648EAC84265789F83961B9066BFD7F62B77CC79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134372e302f32342d3234203d3e20323730333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:59:33:f8:ce:6d:73:ef:fc:41:76:15:b3:6f:26:34:74:
         97:78:43:97:e7:04:63:ae:5f:98:64:82:05:18:4a:85:d1:9e:
         80:71:dc:3d:56:03:d3:d0:bb:11:0a:44:0d:ec:65:78:d2:c6:
         64:c5:d2:7c:9a:89:92:f5:38:57:60:b0:3b:46:95:6d:70:fe:
         8c:f5:e2:10:6a:c5:1c:4c:3e:60:7e:33:8e:47:6e:13:a6:b4:
         60:25:4e:42:3f:38:67:49:61:6a:15:1f:9c:13:54:18:1d:af:
         75:a6:5a:ff:b0:9b:89:bc:0b:6c:3f:00:1d:84:cc:6d:e4:22:
         f5:fd:9b:f7:a8:b0:94:55:49:53:3c:58:78:1b:05:1e:de:8d:
         55:bf:f5:d5:df:be:11:02:71:c0:ce:13:f6:90:1d:51:d9:73:
         b0:d3:f2:a0:21:d8:4c:a5:32:cd:c9:d0:ab:97:04:c8:05:38:
         c1:d3:58:aa:c0:a5:b4:a2:3c:a0:66:82:41:86:bf:8a:73:63:
         8d:30:71:68:32:90:ec:d2:49:c5:05:39:77:93:21:17:59:6d:
         6b:ac:91:c0:89:e1:2c:f6:fa:c4:f5:a9:d0:93:96:80:41:de:
         d2:aa:9a:d2:22:f4:1f:6d:5c:78:7f:e3:cd:15:01:7e:22:b3:
         01:32:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:02:38 2025 by rpki-client