Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa
File:                     3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa (raw, json)
Hash identifier:          xXgG9pDThvIAB1i0BFmO9/TFqfAwVd3mINgCQT0d2Yg=
Subject key identifier:   4D:D3:CC:35:2A:75:A7:A0:0F:52:74:38:DD:45:6B:F5:15:93:50:04
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       551D72120FF3B86CE7CBF53C829B6C014C82FCBE
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa
Signing time:             Fri 18 Jul 2025 02:00:00 +0000
ROA not before:           Fri 18 Jul 2025 01:55:00 +0000
ROA not after:            Fri 17 Jul 2026 02:00:00 +0000
asID:                     270936
IP address blocks:        190.103.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1d:72:12:0f:f3:b8:6c:e7:cb:f5:3c:82:9b:6c:01:4c:82:fc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Jul 18 01:55:00 2025 GMT
            Not After : Jul 17 02:00:00 2026 GMT
        Subject: CN=4DD3CC352A75A7A00F527438DD456BF515935004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b8:26:cf:86:f9:43:04:b8:df:85:e5:cc:4d:
                    e9:d4:6e:f9:e2:95:e4:fa:ac:44:8e:95:83:bf:90:
                    90:c5:73:16:99:f0:83:e8:3c:ba:d1:c2:4c:93:21:
                    7e:e8:68:09:ae:8e:a8:ef:5b:f1:59:e7:d9:bd:56:
                    4a:24:d4:b7:c0:e8:32:55:fc:d2:ed:7f:7d:fb:18:
                    30:05:fa:85:25:b9:75:be:84:9b:08:d2:e8:db:c9:
                    f9:9c:4a:b4:0d:02:40:5d:94:23:2e:2a:b4:0b:ef:
                    a2:6d:ce:b3:0f:f9:85:62:62:e3:e2:7e:b4:63:f4:
                    05:bb:ba:37:3f:fd:5e:79:42:da:53:df:b4:17:7b:
                    9b:b3:41:92:1a:1d:50:96:38:92:ee:f5:b6:2c:3f:
                    de:d6:5a:a8:e3:65:b7:8f:a9:eb:37:b4:74:ec:e2:
                    0a:27:82:4f:d2:6f:38:2a:d2:27:1a:f5:f4:42:0a:
                    42:04:fc:f5:a1:53:13:09:12:f7:90:46:f5:00:04:
                    84:8d:a5:32:03:ac:10:26:e5:21:bc:63:b6:61:c8:
                    69:9a:96:03:2a:2f:72:a7:2c:a2:dd:0e:38:3d:0e:
                    04:ae:11:68:64:1b:3b:c6:64:18:ec:0e:9c:25:88:
                    8d:f3:25:23:42:74:b6:0a:ab:16:30:d5:1e:2f:d7:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:CC:35:2A:75:A7:A0:0F:52:74:38:DD:45:6B:F5:15:93:50:04
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:f2:3e:ea:25:af:f4:78:bb:e0:85:ae:78:6e:f1:88:f2:
         a2:98:07:a2:11:27:d0:5d:7a:a4:fb:50:4a:5c:99:4c:a1:84:
         08:2b:c8:10:f5:37:f9:ba:d5:19:3f:37:0d:8c:28:81:d4:70:
         44:2d:ef:59:51:21:82:e8:e7:e9:ce:01:75:51:e4:13:07:c7:
         9e:6a:4f:7b:bd:77:80:2f:51:f8:38:a3:55:6b:a3:1e:97:7c:
         de:94:3c:0b:d2:12:bb:a2:5e:79:24:70:d0:d9:09:fc:9c:48:
         47:e1:6f:5c:f5:34:c8:91:3d:91:a4:75:ed:79:d5:b7:f6:b8:
         e0:c6:8e:d7:09:65:8f:27:96:b2:b6:1a:8e:4a:41:81:ce:7a:
         e6:7e:2b:3e:a8:02:b6:f6:d1:67:44:3b:43:ef:c4:9e:94:7d:
         76:10:e7:69:b0:a9:9f:e8:e9:66:eb:0d:fe:a0:22:21:5b:f0:
         93:ef:b2:12:02:7f:bb:74:1e:fb:a3:d6:85:63:46:da:aa:8e:
         4c:8a:5a:81:55:2b:32:91:ea:07:af:72:d8:9d:d3:2b:57:d0:
         0f:74:05:cc:50:67:68:6f:a6:cc:16:5e:f0:d2:19:a0:3b:71:
         1f:a6:c0:83:de:bf:15:62:bc:3e:57:3c:91:4a:79:07:d9:55:
         1c:78:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:02:53 2025 by rpki-client