Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139392e302f32342d3234203d3e20323730343039.roa
File:                     3139302e38392e3139392e302f32342d3234203d3e20323730343039.roa (raw, json)
Hash identifier:          /8sGlQOxtzZN2rAtj3S1SiJeVzX/TehxMXgkI+Z8i70=
Subject key identifier:   5C:4A:1E:65:AA:58:80:30:76:84:A6:84:DB:3D:18:3A:09:76:47:E3
Certificate issuer:       /CN=11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4
Certificate serial:       5181473677364D432CE54FD88ED5B493A5BD8ED0
Authority key identifier: 11:FE:E7:71:12:2E:6B:8B:AB:9E:5B:C2:56:6A:C9:18:DC:99:FA:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139392e302f32342d3234203d3e20323730343039.roa
Signing time:             Mon 16 Jun 2025 17:07:16 +0000
ROA not before:           Mon 16 Jun 2025 17:02:16 +0000
ROA not after:            Mon 15 Jun 2026 17:07:16 +0000
asID:                     270409
IP address blocks:        190.89.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.crl
                          rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 19:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:81:47:36:77:36:4d:43:2c:e5:4f:d8:8e:d5:b4:93:a5:bd:8e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4
        Validity
            Not Before: Jun 16 17:02:16 2025 GMT
            Not After : Jun 15 17:07:16 2026 GMT
        Subject: CN=5C4A1E65AA5880307684A684DB3D183A097647E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:69:b3:c2:d3:75:ea:a1:46:6b:78:cc:cd:
                    b7:e3:c0:56:6f:4a:47:e2:a0:fc:fc:5d:58:08:e0:
                    ac:a4:1a:d9:ea:20:8e:66:8e:0d:08:40:7f:c0:16:
                    b4:4f:f6:04:48:24:18:31:87:d9:d4:b4:f3:18:e8:
                    f8:e9:79:64:2c:a1:9b:7b:80:32:7d:9e:12:02:51:
                    37:56:c3:18:b8:fb:c2:ed:ec:70:29:5b:77:3f:14:
                    6a:6e:96:ab:bd:7e:26:6b:1a:2b:2e:df:07:c5:34:
                    62:34:51:8d:24:3f:67:22:11:81:8c:40:4f:be:a9:
                    83:0f:06:b0:37:52:31:44:af:dc:a6:bf:69:24:13:
                    53:dd:ff:e0:c8:66:e6:d5:38:db:44:ce:96:6c:fa:
                    12:2e:ca:e3:cf:bd:5c:65:db:87:d8:64:8d:3e:b8:
                    b7:f8:61:98:78:07:42:6d:4c:3e:8d:36:b0:83:2d:
                    b0:01:5b:49:73:dd:e0:3b:d7:25:98:33:48:62:64:
                    66:87:6d:83:c7:a5:58:15:8f:a9:62:1e:33:35:e3:
                    8b:95:5a:17:43:4c:45:7b:b2:dc:2e:23:11:91:0d:
                    49:f3:a5:5e:5e:c4:a2:eb:06:1b:d5:b4:82:f8:83:
                    4f:ed:29:c5:bf:b1:a2:e5:98:87:45:1e:20:35:96:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4A:1E:65:AA:58:80:30:76:84:A6:84:DB:3D:18:3A:09:76:47:E3
            X509v3 Authority Key Identifier:
                keyid:11:FE:E7:71:12:2E:6B:8B:AB:9E:5B:C2:56:6A:C9:18:DC:99:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139392e302f32342d3234203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:af:0f:de:ac:3f:81:ec:78:4f:03:fc:fc:2e:fb:91:3a:f3:
         72:9c:81:2a:db:d7:8e:92:d2:1a:1a:47:f5:5f:33:f0:14:43:
         36:e5:8a:96:47:7a:3d:3d:df:33:43:fe:8b:e2:2a:f1:75:4e:
         9d:7b:0d:31:89:a4:9d:e0:15:07:cb:61:93:40:d5:0c:79:34:
         54:08:36:8d:0c:64:9e:6d:27:c0:4d:d1:9c:d2:1e:cf:7c:f6:
         ad:10:11:c5:f5:00:d7:44:23:d4:c3:6e:b0:9b:55:ce:30:f2:
         b3:55:1b:ff:8b:a4:10:d1:93:28:0b:62:02:e5:31:47:93:41:
         6b:18:40:e9:ab:f1:d3:33:55:5d:23:a9:1a:ac:9f:5f:df:53:
         63:b6:0b:c1:f0:35:20:3c:9e:9a:56:4a:5c:73:b5:7d:29:61:
         46:98:b6:7a:25:02:83:f2:29:e8:60:ab:cb:08:f2:fe:17:7f:
         f8:8a:29:39:e3:67:d8:2e:dd:32:b8:7e:b5:ce:c4:1c:44:81:
         05:ab:e4:dc:10:8b:33:2f:e5:fb:fb:88:d8:e6:97:d1:db:ff:
         bd:f9:25:5f:5c:b9:9e:ac:98:ac:3f:6e:31:2e:cc:03:fb:14:
         13:b5:a5:ed:8c:95:1a:f5:c2:ea:a6:f2:96:64:25:ce:26:6f:
         f1:c2:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:55:24 2025 by rpki-client