Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa
File:                     3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (raw, json)
Hash identifier:          lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=
Subject key identifier:   3F:52:A7:E1:FA:B3:96:2A:44:1C:D6:7C:67:32:DD:A8:69:5B:A6:97
Certificate issuer:       /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0
Certificate serial:       71E8B01790CACFE85D14A574D22958B51523720A
Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa
Signing time:             Tue 03 Jun 2025 15:03:59 +0000
ROA not before:           Tue 03 Jun 2025 14:58:59 +0000
ROA not after:            Tue 02 Jun 2026 15:03:59 +0000
asID:                     266253
IP address blocks:        190.123.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl
                          rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 02:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e8:b0:17:90:ca:cf:e8:5d:14:a5:74:d2:29:58:b5:15:23:72:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0
        Validity
            Not Before: Jun  3 14:58:59 2025 GMT
            Not After : Jun  2 15:03:59 2026 GMT
        Subject: CN=3F52A7E1FAB3962A441CD67C6732DDA8695BA697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:25:e8:55:00:64:1d:16:39:7c:e1:56:88:
                    db:9c:33:cc:00:cc:c8:fe:27:8f:fd:d4:67:68:69:
                    59:54:30:90:36:f3:d9:5b:9f:16:c6:60:9c:e6:52:
                    77:ad:a8:cb:32:49:8b:10:e2:88:8c:f0:9d:26:e6:
                    b9:22:95:b0:b5:5a:a5:55:85:e0:8f:6a:2d:83:ff:
                    43:6d:ce:ee:c4:39:d2:25:b2:f3:83:87:4e:5a:af:
                    e7:e6:19:60:e8:39:b1:69:13:0e:1b:b9:32:00:65:
                    e0:ad:af:72:ea:9c:d4:f8:a2:1d:94:b2:8d:a4:30:
                    4d:07:e8:60:58:99:24:e1:39:aa:f5:7d:2b:7f:ad:
                    ab:df:01:f5:9f:d8:5b:27:1a:87:b6:b2:25:a4:84:
                    bd:f9:ef:91:9d:ac:35:e1:a0:37:58:17:c1:8a:07:
                    96:62:e6:78:51:13:61:f5:ac:26:bf:1f:04:26:7e:
                    08:e2:b3:b7:65:ac:b4:c5:9a:09:d3:9f:91:15:34:
                    f7:c4:66:9d:44:a4:e5:9a:01:8a:08:7c:17:58:ed:
                    9c:f2:a9:4d:38:22:dc:c4:68:3a:90:f1:6b:dc:d3:
                    30:71:01:cf:48:9c:31:77:c8:4f:72:00:56:b4:9f:
                    f0:ff:ac:ad:55:93:9e:87:51:7b:47:f0:ce:da:11:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:52:A7:E1:FA:B3:96:2A:44:1C:D6:7C:67:32:DD:A8:69:5B:A6:97
            X509v3 Authority Key Identifier:
                keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:5e:2a:b4:d1:77:16:10:ab:9f:00:9e:70:ab:2b:18:ba:6d:
         43:15:71:6e:41:55:ef:cd:c6:37:b4:ab:d9:b4:59:48:e6:ed:
         92:b8:d1:d2:fa:52:a9:f9:f3:4d:63:b5:3d:b0:80:43:f9:d1:
         2e:33:63:f5:fc:72:7c:2a:e4:76:46:bf:04:d4:97:3e:fd:76:
         50:a8:be:27:6d:ea:9e:b0:6e:07:13:8c:bd:63:b8:9b:f2:d7:
         9a:76:2e:fa:69:8a:ef:3e:6e:6f:10:74:48:07:18:10:d7:8f:
         13:27:e6:55:af:36:cf:85:3f:76:80:6b:3e:10:2b:ff:0a:47:
         55:09:86:c9:3f:e8:61:c4:73:37:bb:cf:60:23:d5:72:0d:34:
         65:a8:9c:a2:a3:92:7c:a2:15:c1:23:22:ca:f3:34:5d:ab:0d:
         86:fe:05:a9:55:87:46:96:53:ee:6a:20:24:b6:29:3e:9f:ad:
         cd:79:b1:08:a2:26:66:1a:98:41:1d:d5:22:38:ce:5d:da:f5:
         06:50:8a:ff:69:6a:3d:8b:0c:50:e5:39:cc:02:a5:a8:b4:2f:
         1a:fc:bd:dc:74:98:3a:b6:66:5b:21:2a:32:08:f0:00:b5:08:
         2d:d5:b4:1d:50:17:a6:bd:d4:8b:6c:16:18:84:29:a4:b1:83:
         8f:a9:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:59 2025 by rpki-client