Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3139312e3234322e34322e302f32332d3234203d3e20323731353136.roa
File:                     3139312e3234322e34322e302f32332d3234203d3e20323731353136.roa (raw, json)
Hash identifier:          GWBpEjifIF3zr0IPEjZ4U9RGMhXuCxOIRrwP6DNm48E=
Subject key identifier:   0F:4A:2D:D1:09:CD:45:F1:B5:AF:FC:50:69:E5:BC:21:AD:89:D4:E4
Certificate issuer:       /CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100
Certificate serial:       6E3267E41F1B3AE8E349509DE4292B862C4E35B2
Authority key identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3139312e3234322e34322e302f32332d3234203d3e20323731353136.roa
Signing time:             Fri 01 Aug 2025 15:11:49 +0000
ROA not before:           Fri 01 Aug 2025 15:06:49 +0000
ROA not after:            Fri 31 Jul 2026 15:11:49 +0000
asID:                     271516
IP address blocks:        191.242.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl
                          rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 02:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:32:67:e4:1f:1b:3a:e8:e3:49:50:9d:e4:29:2b:86:2c:4e:35:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100
        Validity
            Not Before: Aug  1 15:06:49 2025 GMT
            Not After : Jul 31 15:11:49 2026 GMT
        Subject: CN=0F4A2DD109CD45F1B5AFFC5069E5BC21AD89D4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:fd:f9:6b:5a:8e:13:85:7a:a7:23:a4:37:
                    af:c3:ce:47:8c:8d:6c:1a:04:3b:ed:8b:c1:e6:52:
                    b8:06:64:bc:12:35:6d:5e:14:36:4d:6d:8f:41:5e:
                    46:27:2d:c6:9a:22:45:e2:af:41:63:a6:a2:da:61:
                    6a:09:c5:c0:0d:3d:99:58:bc:5a:3d:1a:54:a4:1b:
                    6e:bf:a8:39:67:2a:1d:3e:2d:4b:46:d5:c5:60:cb:
                    20:cf:10:f6:a8:f5:c8:17:01:06:10:7a:48:2a:da:
                    9e:d0:c2:da:29:9d:aa:d5:73:eb:26:9d:98:d5:43:
                    10:7b:53:2f:22:d0:94:f4:c0:13:b1:ff:af:2f:a0:
                    dc:70:56:0f:5a:af:c1:16:19:53:d7:59:e2:a5:d3:
                    eb:7b:d9:0a:74:72:75:89:c5:a3:16:6e:14:ce:c3:
                    26:2e:85:8a:d1:4b:37:fc:f0:18:7b:ce:13:43:5e:
                    07:81:ac:09:67:bb:e0:45:cc:5f:da:c3:20:d2:e7:
                    65:16:bb:f0:33:bb:c3:f1:60:16:cc:f6:c5:57:7e:
                    f4:bd:1b:dd:86:ab:2c:5e:32:36:98:18:81:f6:3c:
                    50:54:cf:2e:5f:d3:74:04:84:8e:40:0b:7a:0e:c1:
                    9c:e6:32:2d:39:32:c6:13:c6:aa:68:df:1b:2b:56:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4A:2D:D1:09:CD:45:F1:B5:AF:FC:50:69:E5:BC:21:AD:89:D4:E4
            X509v3 Authority Key Identifier:
                keyid:8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3139312e3234322e34322e302f32332d3234203d3e20323731353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:cc:53:25:b0:00:20:cb:79:5f:fa:68:01:a1:7f:1d:ec:
         e0:fb:57:21:cf:a6:d9:ec:7e:0b:e9:9d:4f:01:21:6a:da:95:
         0c:89:c4:0a:1a:24:e1:65:33:1d:b9:aa:92:3f:6f:b1:6d:77:
         87:e4:2d:16:08:b9:04:f6:31:61:a4:e4:95:ec:9b:f1:f3:de:
         b7:32:67:0c:5b:ba:ca:ae:b0:9b:fa:d2:78:f8:46:93:a9:fb:
         1b:ba:b4:a5:ee:ef:ee:88:25:4c:92:d2:8a:f1:44:f6:33:75:
         94:93:05:de:3f:01:c5:7a:4a:c4:68:69:dc:4e:61:46:d7:25:
         c0:1b:b2:0e:5a:4b:8d:b0:10:96:5d:eb:50:38:3c:23:af:30:
         f9:82:63:a8:35:31:65:bc:5f:bf:a5:08:cf:c5:d3:73:4a:e3:
         e1:df:1c:bd:3f:78:73:b4:d6:40:0a:bd:ef:70:48:46:0b:b9:
         b8:30:b0:e7:60:ab:8e:7f:51:1b:33:32:75:c5:6b:a4:e3:0d:
         86:13:65:f5:d4:bd:44:6b:5d:93:85:0e:66:b0:21:d6:d3:f2:
         29:b2:4f:5d:06:0a:08:a1:ff:f1:f4:66:3d:bb:27:ce:cf:93:
         e8:59:ab:d6:ed:c3:62:d0:b8:3b:e9:9b:f9:bc:cf:90:e8:8f:
         d2:a2:b1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:17 2025 by rpki-client