Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa
File:                     3139322e3134312e322e302f32342d3234203d3e20323637343430.roa (raw, json)
Hash identifier:          IJM1oWGcr2B6ldMFnaAtH8OzO2oGPN9UBS/LjLeEf7Q=
Subject key identifier:   EB:AC:51:21:EA:4B:89:DF:0E:43:CE:F4:D0:0C:8B:99:D7:40:D5:C2
Certificate issuer:       /CN=22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA
Certificate serial:       1E6BAF4AFBB9EDA8DBD5056FB5952ECF5C4F38D7
Authority key identifier: 22:BB:A4:A3:F1:1C:75:C5:D9:04:F2:E8:B7:27:71:6D:D0:4F:FC:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa
Signing time:             Mon 03 Nov 2025 14:14:56 +0000
ROA not before:           Mon 03 Nov 2025 14:09:56 +0000
ROA not after:            Mon 02 Nov 2026 14:14:56 +0000
asID:                     267440
IP address blocks:        192.141.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6b:af:4a:fb:b9:ed:a8:db:d5:05:6f:b5:95:2e:cf:5c:4f:38:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA
        Validity
            Not Before: Nov  3 14:09:56 2025 GMT
            Not After : Nov  2 14:14:56 2026 GMT
        Subject: CN=EBAC5121EA4B89DF0E43CEF4D00C8B99D740D5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:94:b8:bb:03:0d:aa:46:09:2b:58:c1:30:
                    32:67:6f:12:b1:c7:5e:80:d6:d6:ae:54:db:49:8d:
                    bd:4e:6b:82:8c:f0:f1:9c:30:31:71:16:10:6e:b2:
                    37:91:69:8a:8b:2a:1f:99:05:69:79:aa:72:98:9d:
                    fa:e3:0a:36:7f:30:b0:1f:0b:ba:79:5d:18:ed:20:
                    6d:a4:82:f9:24:45:d3:37:15:18:f8:74:40:e7:24:
                    3d:1e:71:3f:30:1a:62:96:7c:0e:cb:a6:0a:7b:7e:
                    a9:53:cc:90:80:15:bb:88:96:f0:75:5a:1b:ac:7f:
                    3e:80:e3:55:fe:a5:ef:13:0e:59:b4:fa:00:62:1c:
                    10:c5:28:72:e4:47:5e:9c:02:da:b3:b5:92:ab:e1:
                    db:7d:f3:10:b9:d3:14:64:40:66:6c:f8:2c:d1:df:
                    d9:07:e2:ed:4b:c3:dd:4c:a5:2f:d1:06:57:52:5f:
                    4b:7f:ea:2e:7d:68:33:2c:8e:08:9e:0f:e2:7a:de:
                    59:a0:6e:5d:14:dc:b7:71:62:4f:5a:1b:f6:e7:ea:
                    ba:86:67:8e:96:09:c8:9e:6e:a1:36:2d:6c:ac:74:
                    c1:08:62:73:17:60:a1:a8:8c:8f:7e:14:c1:c3:56:
                    ba:c1:06:a9:2d:1b:2f:37:f0:7e:79:70:5e:3f:f4:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AC:51:21:EA:4B:89:DF:0E:43:CE:F4:D0:0C:8B:99:D7:40:D5:C2
            X509v3 Authority Key Identifier:
                keyid:22:BB:A4:A3:F1:1C:75:C5:D9:04:F2:E8:B7:27:71:6D:D0:4F:FC:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:3e:ad:f8:32:94:47:8a:dc:33:f7:eb:01:db:27:22:26:
         5c:40:12:f4:00:e5:54:5c:f8:a5:d3:e2:bc:3b:a3:a6:93:a5:
         f5:12:32:7a:d4:89:3c:c9:6b:62:a5:df:4f:bd:0d:a4:8d:ec:
         e4:49:ec:1a:1a:03:f0:be:50:20:8a:bc:a6:ac:74:7b:4b:2e:
         f6:04:2e:62:67:d2:20:a4:2c:8d:5e:c9:f4:22:cd:3d:e9:55:
         36:61:16:70:61:4b:ae:a6:eb:04:88:49:72:98:84:e4:d3:d7:
         c5:eb:47:ae:ed:ab:7f:ca:0c:6c:8f:36:c8:b5:72:9a:1c:e8:
         96:6b:1e:77:68:8a:e5:d6:1e:56:15:44:04:dd:19:3d:b3:dd:
         cf:d8:16:b1:3b:92:b0:e0:94:7d:05:3f:0e:03:63:ac:57:ef:
         ec:db:f5:d6:cc:7a:1f:67:f8:eb:7f:92:6c:9c:ad:da:24:4b:
         5a:be:c0:c3:cb:30:54:5e:d2:7f:ca:1c:61:9a:af:1d:0b:73:
         07:78:0e:2e:74:16:ce:dc:42:a7:22:6d:b5:a8:53:92:c7:a2:
         6d:4a:49:ec:8a:6c:4c:6b:9a:e7:f3:e0:a6:cf:ff:9d:de:dd:
         0f:2b:ce:33:a7:d7:77:6a:33:f9:81:10:a5:ea:a1:d9:d2:53:
         b6:6e:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:16 2025 by rpki-client