Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e332e302f32342d3234203d3e20323637343430.roa
File:                     3139322e3134312e332e302f32342d3234203d3e20323637343430.roa (raw, json)
Hash identifier:          SFLE66uUwZzUAbKeoNhf0SGHXxXvTV/zjx/mG/f6qyk=
Subject key identifier:   63:A7:21:3F:54:34:0E:54:DE:30:E5:5C:12:19:73:FE:2C:0E:B6:D9
Certificate issuer:       /CN=22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA
Certificate serial:       33F99E69BB6FC5CFF483C25E956C7AE9A5D6A473
Authority key identifier: 22:BB:A4:A3:F1:1C:75:C5:D9:04:F2:E8:B7:27:71:6D:D0:4F:FC:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e332e302f32342d3234203d3e20323637343430.roa
Signing time:             Mon 03 Nov 2025 14:14:55 +0000
ROA not before:           Mon 03 Nov 2025 14:09:55 +0000
ROA not after:            Mon 02 Nov 2026 14:14:55 +0000
asID:                     267440
IP address blocks:        192.141.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f9:9e:69:bb:6f:c5:cf:f4:83:c2:5e:95:6c:7a:e9:a5:d6:a4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA
        Validity
            Not Before: Nov  3 14:09:55 2025 GMT
            Not After : Nov  2 14:14:55 2026 GMT
        Subject: CN=63A7213F54340E54DE30E55C121973FE2C0EB6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:97:c7:0d:d5:0a:7a:7b:10:1d:6d:2e:d3:
                    03:f0:63:9e:70:7c:ef:a2:42:a8:87:31:0b:a3:de:
                    d7:c7:87:c9:04:bf:03:31:0e:22:2d:a0:7d:d8:b2:
                    4b:88:8e:af:83:b1:46:b4:6c:b7:c1:63:01:85:6a:
                    67:c1:96:2b:a2:a2:60:13:fb:b0:13:15:d3:a7:cd:
                    bc:75:fb:10:fd:60:2b:ae:a8:52:f3:bc:ed:cf:76:
                    42:ac:ab:31:83:2d:85:4f:da:86:be:08:b1:e2:30:
                    fc:4b:e5:e6:60:7f:4e:d8:52:8d:d9:90:0c:41:53:
                    df:93:ea:48:38:ca:79:a1:0b:5a:d3:e6:d7:4b:0b:
                    a8:36:6b:19:98:c6:12:c2:1a:e7:ca:62:aa:3a:91:
                    23:11:a9:e8:a8:6f:38:89:86:f0:df:fe:8d:25:fa:
                    2b:b4:9c:33:e8:4f:4e:b7:c0:2f:1c:d3:cb:fd:11:
                    13:ab:ef:0e:79:5f:5e:87:61:01:34:13:58:ae:16:
                    eb:cd:62:25:c0:58:a0:0e:b9:ea:b8:ac:77:c7:82:
                    68:82:53:d7:a7:cc:d9:44:82:c6:20:dc:5f:c2:23:
                    6a:c4:0a:07:72:a5:d9:ec:09:b3:fe:f3:1d:a2:9c:
                    cd:1b:d7:8d:4e:4a:52:34:bc:f6:d2:6c:a8:9a:ad:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A7:21:3F:54:34:0E:54:DE:30:E5:5C:12:19:73:FE:2C:0E:B6:D9
            X509v3 Authority Key Identifier:
                keyid:22:BB:A4:A3:F1:1C:75:C5:D9:04:F2:E8:B7:27:71:6D:D0:4F:FC:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e332e302f32342d3234203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:d8:0b:6b:e5:77:df:ee:40:9e:78:d6:01:de:ce:b1:ab:
         0a:d3:cf:ae:d9:df:27:de:f9:ab:71:bc:36:89:b8:8c:32:c7:
         b3:54:39:38:27:3f:18:79:fd:64:1d:68:65:ae:10:ad:11:a3:
         0d:d0:bd:15:93:e5:0a:49:63:f8:12:c4:f4:ff:67:33:a6:11:
         56:26:c3:8b:b8:f7:dc:05:ca:6f:b7:da:e6:ee:a7:f8:cf:ad:
         ef:b9:90:55:58:f0:ef:49:7f:b6:57:d3:4b:a0:65:d0:8d:8b:
         34:18:c5:b0:a0:51:1a:12:bb:c1:0d:63:16:a3:1c:be:2d:9c:
         a3:ed:86:99:a3:00:ee:00:57:d4:05:03:c9:96:f9:60:f8:ea:
         8e:ee:a7:85:67:0f:f4:aa:2c:ea:82:30:20:16:e5:25:67:51:
         5c:5b:2f:ff:2b:90:01:53:75:bc:4f:51:c1:01:24:44:10:20:
         81:59:2c:eb:d6:32:6f:55:b0:f1:48:47:9d:a9:4b:af:59:89:
         29:a7:bf:73:41:6f:7b:eb:19:81:ba:db:fd:ad:34:0b:1b:13:
         74:66:4f:b5:96:10:58:9c:4b:65:89:47:b5:ad:10:b9:a3:ac:
         2b:ec:af:aa:7d:a2:28:75:e2:34:ba:de:18:ef:6a:53:02:c0:
         1a:3b:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:01 2025 by rpki-client