Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34312e302f32342d3234203d3e20323634353637.roa
File:                     3139302e38332e34312e302f32342d3234203d3e20323634353637.roa (raw, json)
Hash identifier:          DjFF3Lz5zp2Px+F0NmPwb7JKtQ6/o+WExV88xOFMDp8=
Subject key identifier:   CE:57:B9:77:B5:C6:21:C4:AD:BB:F2:68:05:07:18:FB:56:81:22:93
Certificate issuer:       /CN=6B14EA342D84DC5B584613046E346F9A5722784F
Certificate serial:       58A472994E1A82385E206BA483D6A5A5F83BC943
Authority key identifier: 6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34312e302f32342d3234203d3e20323634353637.roa
Signing time:             Thu 24 Jul 2025 17:40:12 +0000
ROA not before:           Thu 24 Jul 2025 17:35:12 +0000
ROA not after:            Thu 23 Jul 2026 17:40:12 +0000
asID:                     264567
IP address blocks:        190.83.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a4:72:99:4e:1a:82:38:5e:20:6b:a4:83:d6:a5:a5:f8:3b:c9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B14EA342D84DC5B584613046E346F9A5722784F
        Validity
            Not Before: Jul 24 17:35:12 2025 GMT
            Not After : Jul 23 17:40:12 2026 GMT
        Subject: CN=CE57B977B5C621C4ADBBF268050718FB56812293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:a8:47:a9:c9:cf:ec:36:96:ae:5e:61:07:
                    f9:f0:11:73:cd:83:09:61:66:38:b2:1e:68:24:2b:
                    a6:62:65:4e:07:fa:78:5e:3b:0a:29:a6:43:47:4d:
                    a0:03:57:a5:24:f2:93:a4:18:6b:38:49:c0:d2:24:
                    22:d4:92:d1:bf:10:92:77:91:cd:d7:5f:dc:11:09:
                    82:7b:0e:28:53:e4:75:ab:4c:00:d5:d7:d6:59:48:
                    a8:21:bb:5b:a8:96:57:63:c0:87:b3:ef:de:7b:76:
                    77:be:f7:32:dd:9d:11:cd:59:b6:5d:4c:4c:b5:4e:
                    ee:02:ea:0d:c5:b0:df:af:2f:f0:cb:de:52:9a:43:
                    f7:85:85:45:b0:09:82:eb:1c:f5:59:c5:8a:0b:13:
                    68:af:4c:c7:d7:91:c1:d3:c3:b9:e4:ba:74:b6:83:
                    ba:75:55:e4:3c:79:dc:a1:8d:7e:85:18:7f:6f:64:
                    2e:16:76:fa:07:d7:a7:ad:50:34:1a:dc:b6:43:f6:
                    ad:3c:5e:bd:c7:07:27:32:da:8d:ea:8e:79:3e:b6:
                    6a:9c:46:f4:2a:e8:e1:d1:b5:be:c3:e8:f1:76:3d:
                    e9:19:5c:5e:b0:5b:ce:9b:73:3e:5b:db:9b:74:6c:
                    fd:10:8a:10:fc:20:ca:46:b8:8f:36:4f:eb:bd:87:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:57:B9:77:B5:C6:21:C4:AD:BB:F2:68:05:07:18:FB:56:81:22:93
            X509v3 Authority Key Identifier:
                keyid:6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/3139302e38332e34312e302f32342d3234203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a2:c2:5b:33:98:9d:81:63:46:d4:51:a2:fd:bc:76:c0:97:
         4b:46:4a:b3:69:cf:74:5f:ae:fd:0f:86:c3:62:b5:9a:d6:e7:
         7a:c8:59:ba:28:4f:f5:77:ad:9c:a1:01:84:28:be:44:7e:af:
         4d:f6:ef:2f:80:66:b1:28:7f:7a:06:7c:03:2d:61:71:52:7b:
         bf:6e:41:04:ff:9a:b1:7b:c4:f6:21:09:6d:56:30:05:f4:cb:
         86:16:58:4d:4d:6d:85:0d:b6:39:49:5f:17:97:e0:1a:b0:2e:
         50:ea:46:aa:d1:46:e4:1b:68:9a:4a:c3:95:4d:a6:2e:40:46:
         2d:ac:36:75:8a:93:5d:fe:ed:3f:71:0b:77:82:f0:62:52:57:
         a8:15:9e:38:b6:99:2a:dc:b6:fd:0c:9c:da:26:3a:50:e3:a5:
         19:e6:d0:1a:b0:0b:00:47:d8:bc:b1:0d:83:97:71:bf:0e:b5:
         b5:63:62:aa:0c:e6:6a:1b:58:fc:25:7d:78:a7:41:bd:44:08:
         09:4f:99:9f:bf:d6:46:67:7e:a4:c7:fb:0c:64:96:5d:a6:1b:
         be:66:05:63:5a:4a:d2:ff:8e:f5:8e:d7:ce:e7:60:98:f7:56:
         c8:f8:d9:33:db:82:01:b8:9d:25:8f:70:c9:93:76:3f:16:f6:
         12:aa:25:b0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWKRymU4agjheIGukg9alpfg7yUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIxNEVBMzQyRDg0REM1QjU4NDYxMzA0NkUzNDZGOUE1
NzIyNzg0RjAeFw0yNTA3MjQxNzM1MTJaFw0yNjA3MjMxNzQwMTJaMDMxMTAvBgNV
BAMTKENFNTdCOTc3QjVDNjIxQzRBREJCRjI2ODA1MDcxOEZCNTY4MTIyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT0qhHqcnP7DaWrl5hB/nwEXPN
gwlhZjiyHmgkK6ZiZU4H+nheOwoppkNHTaADV6Uk8pOkGGs4ScDSJCLUktG/EJJ3
kc3XX9wRCYJ7DihT5HWrTADV19ZZSKghu1uolldjwIez7957dne+9zLdnRHNWbZd
TEy1Tu4C6g3FsN+vL/DL3lKaQ/eFhUWwCYLrHPVZxYoLE2ivTMfXkcHTw7nkunS2
g7p1VeQ8edyhjX6FGH9vZC4WdvoH16etUDQa3LZD9q08Xr3HBycy2o3qjnk+tmqc
RvQq6OHRtb7D6PF2PekZXF6wW86bcz5b25t0bP0QihD8IMpGuI82T+u9h/v3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzle5d7XGIcStu/JoBQcY+1aBIpMwHwYDVR0j
BBgwFoAUaxTqNC2E3FtYRhMEbjRvmlcieE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdOMmFNY3ZYVDc4UzlMQnhSMk56ZnNxVVBNekVFS3A1MnlMQnJicVh6
WmQvMC82QjE0RUEzNDJEODREQzVCNTg0NjEzMDQ2RTM0NkY5QTU3MjI3ODRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCMTRFQTM0MkQ4NERDNUI1
ODQ2MTMwNDZFMzQ2RjlBNTcyMjc4NEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHTjJhTWN2WFQ3OFM5TEJ4UjJOemZzcVVQTXpFRUtwNTJ5TEJyYnFYelpkLzAv
MzEzOTMwMmUzODMzMmUzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvlMpMA0GCSqGSIb3DQEBCwUAA4IBAQB+osJbM5id
gWNG1FGi/bx2wJdLRkqzac90X679D4bDYrWa1ud6yFm6KE/1d62coQGEKL5Efq9N
9u8vgGaxKH96BnwDLWFxUnu/bkEE/5qxe8T2IQltVjAF9MuGFlhNTW2FDbY5SV8X
l+AasC5Q6kaq0UbkG2iaSsOVTaYuQEYtrDZ1ipNd/u0/cQt3gvBiUleoFZ44tpkq
3Lb9DJzaJjpQ46UZ5tAasAsAR9i8sQ2Dl3G/DrW1Y2KqDOZqG1j8JX14p0G9RAgJ
T5mfv9ZGZ36kx/sMZJZdphu+ZgVjWkrS/471jtfO52CY91bI+Nkz24IBuJ0lj3DJ
k3Y/FvYSqiWw
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:56 2025 by rpki-client