Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32332d3233203d3e20323634353637.roa
File:                     3139302e38332e34302e302f32332d3233203d3e20323634353637.roa (raw, json)
Hash identifier:          e0tJEFEk+eOxZ6coSBv+miT9s9Dn6K1JN6IaLRMyD+k=
Subject key identifier:   80:7C:AA:1E:9D:5C:99:95:D7:27:07:29:F1:7F:C3:B0:DD:70:6F:93
Certificate issuer:       /CN=6B14EA342D84DC5B584613046E346F9A5722784F
Certificate serial:       53B5E374C191237604CD66605475F7C63ACE0792
Authority key identifier: 6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32332d3233203d3e20323634353637.roa
Signing time:             Thu 24 Jul 2025 17:40:12 +0000
ROA not before:           Thu 24 Jul 2025 17:35:12 +0000
ROA not after:            Thu 23 Jul 2026 17:40:12 +0000
asID:                     264567
IP address blocks:        190.83.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b5:e3:74:c1:91:23:76:04:cd:66:60:54:75:f7:c6:3a:ce:07:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B14EA342D84DC5B584613046E346F9A5722784F
        Validity
            Not Before: Jul 24 17:35:12 2025 GMT
            Not After : Jul 23 17:40:12 2026 GMT
        Subject: CN=807CAA1E9D5C9995D7270729F17FC3B0DD706F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:57:b8:da:7d:8d:97:ab:2b:5e:09:33:dd:
                    18:f5:f1:2b:b7:ee:b0:cc:e2:02:32:aa:41:c6:f5:
                    2a:f5:86:59:a6:3a:26:8c:1d:ea:e9:d3:45:4b:a9:
                    73:c8:a2:5e:73:80:d1:3d:02:4a:a3:24:04:b9:c4:
                    d1:00:4d:2f:18:29:12:01:91:72:e5:6d:d9:4b:50:
                    25:4a:73:9f:75:3a:69:cd:3a:c9:9e:b4:3a:9e:e3:
                    97:1d:33:5d:40:b0:cd:ea:b8:93:ad:f4:7b:d2:16:
                    99:a0:e7:d7:89:b1:51:96:8b:86:b9:cc:30:5f:87:
                    dd:a8:a1:aa:9b:3c:65:a4:a0:13:9b:92:da:63:1a:
                    ab:f6:47:77:a2:81:9b:2f:fe:61:b7:a6:83:2f:8d:
                    20:d9:be:fb:8f:7e:cb:72:bd:cb:ef:ef:e6:90:dc:
                    71:26:b0:d1:50:bd:aa:74:c6:23:0d:c7:78:e4:9c:
                    be:07:30:31:cd:68:4f:32:22:80:0b:7a:94:c3:19:
                    5e:f6:71:e0:f9:4c:e9:bf:d4:ee:b6:8f:7e:4d:55:
                    b8:ea:a4:ed:59:91:09:62:d7:2d:e2:b2:e7:94:38:
                    e0:a1:4d:1a:bf:77:ae:94:cb:3b:2c:ec:31:5e:a6:
                    ca:9a:3f:13:5c:0b:55:d9:c9:bb:69:9b:10:73:d6:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7C:AA:1E:9D:5C:99:95:D7:27:07:29:F1:7F:C3:B0:DD:70:6F:93
            X509v3 Authority Key Identifier:
                keyid:6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34302e302f32332d3233203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:7e:0b:36:b2:04:d2:c2:58:3a:1a:de:7c:0f:51:d8:48:
         d4:ea:bb:62:8a:68:69:38:26:67:ca:4d:15:e9:a6:d0:0c:19:
         5a:25:ba:a7:1b:c3:c0:46:61:0e:de:d4:08:7a:b0:68:72:30:
         6e:dd:9c:80:29:e8:ab:bf:d7:64:bf:74:53:d8:1b:b1:c6:a2:
         dc:46:2c:78:32:cb:d5:ec:15:ee:9a:9f:74:98:94:f9:b5:ef:
         1e:da:33:af:be:4d:c9:92:ec:cd:0a:6f:4e:d2:ea:39:06:5c:
         a4:c3:c3:37:53:b7:f5:4a:6d:ca:ad:0f:d3:47:0c:1d:83:c7:
         ee:b7:e3:da:4f:cb:af:1e:0d:4b:f1:2a:05:52:08:f1:91:5d:
         e5:1f:49:4e:5e:a9:30:8a:a7:af:0c:be:45:71:b0:91:7f:55:
         44:ba:d3:b8:67:7e:52:6b:68:d2:05:42:4b:07:8d:7e:0e:b9:
         ef:80:52:3c:1b:ed:87:54:89:19:8d:f8:8f:6b:08:bd:1f:00:
         19:d0:34:63:07:5e:41:6b:ae:c0:ac:33:69:89:c0:35:b5:08:
         8c:85:ce:fc:f7:a3:8c:b8:9b:29:29:32:e0:77:d0:24:a1:20:
         07:06:d6:ca:92:73:ee:2f:f2:97:c3:c1:42:73:75:9f:6d:57:
         07:49:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:43 2025 by rpki-client