Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3139312e3234322e34342e302f32322d3234203d3e20323731353136.roa
File:                     3139312e3234322e34342e302f32322d3234203d3e20323731353136.roa (raw, json)
Hash identifier:          C5MjkKI8WR8yW/gmqOUvb7uzWMbYZ7XJCuts3sWaP28=
Subject key identifier:   B7:D8:0A:BF:85:C7:C7:03:D4:95:0A:62:72:70:AB:D7:6B:0B:9C:A4
Certificate issuer:       /CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100
Certificate serial:       7D6FEB9EFB983FC026AA0F4B78B8E537EB047413
Authority key identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3139312e3234322e34342e302f32322d3234203d3e20323731353136.roa
Signing time:             Fri 01 Aug 2025 15:11:54 +0000
ROA not before:           Fri 01 Aug 2025 15:06:54 +0000
ROA not after:            Fri 31 Jul 2026 15:11:54 +0000
asID:                     271516
IP address blocks:        191.242.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl
                          rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 02:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6f:eb:9e:fb:98:3f:c0:26:aa:0f:4b:78:b8:e5:37:eb:04:74:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100
        Validity
            Not Before: Aug  1 15:06:54 2025 GMT
            Not After : Jul 31 15:11:54 2026 GMT
        Subject: CN=B7D80ABF85C7C703D4950A627270ABD76B0B9CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:e9:1c:f1:30:a9:cb:46:3e:8d:a4:1b:3c:
                    b7:76:c4:12:fe:63:53:8b:13:d2:68:60:06:6a:4f:
                    b9:f6:7c:1b:32:4a:6c:30:4f:ce:95:41:27:3c:1a:
                    ed:b7:b9:29:1d:1e:a4:b4:58:2d:fb:14:7e:aa:b5:
                    e5:3b:87:42:32:05:e5:91:bd:bc:86:f9:d8:05:db:
                    cd:2a:56:bf:4a:c6:8b:27:f3:eb:25:95:90:a6:eb:
                    7d:d4:21:51:35:da:56:b6:82:18:39:94:e1:92:69:
                    fa:1d:03:15:01:8b:01:7e:b2:94:36:21:72:e7:f2:
                    09:11:1d:97:06:22:ac:b7:07:28:d7:d5:9d:02:e0:
                    09:58:f1:21:e8:04:7a:76:fd:52:55:be:67:d9:15:
                    60:85:7f:17:76:5c:41:d0:5a:30:60:77:86:07:43:
                    ae:5a:e6:93:f6:92:0c:10:68:91:cc:fe:56:3e:06:
                    aa:3c:45:b5:cc:1b:b3:77:b6:e9:b0:0e:87:a2:3a:
                    19:b6:f8:2d:ee:c7:8e:5b:a4:58:11:04:92:0a:c2:
                    69:26:93:af:68:c3:60:76:25:ab:0e:cd:9e:70:61:
                    9f:62:ee:66:0d:98:47:e4:fe:56:83:6f:0f:12:19:
                    38:81:bb:e3:ea:f6:78:6b:1c:37:aa:cf:2a:2e:92:
                    de:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D8:0A:BF:85:C7:C7:03:D4:95:0A:62:72:70:AB:D7:6B:0B:9C:A4
            X509v3 Authority Key Identifier:
                keyid:8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3139312e3234322e34342e302f32322d3234203d3e20323731353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:66:51:4b:fc:f1:24:ea:f1:47:e2:4a:c2:dc:75:fa:58:c4:
         d5:e5:45:43:f9:85:41:45:1d:5e:91:95:bb:47:55:16:f9:24:
         28:1d:c2:ec:74:ae:fc:75:a7:fd:21:73:e4:99:39:e9:c9:7a:
         02:2c:a8:1d:61:ff:cf:4e:13:86:40:e2:57:dd:56:82:3d:31:
         a8:17:41:28:00:3f:51:a2:5e:bc:a7:9c:7a:40:c1:1b:eb:1a:
         32:8c:03:0d:3d:5a:e5:a7:d4:ff:31:7e:a7:e5:c3:87:17:b3:
         d4:53:1b:0d:5b:46:15:f4:3f:0a:07:b3:10:38:d3:e4:b2:5a:
         c9:15:b8:ff:ad:20:e0:3e:0a:1d:f8:36:e6:6c:e2:42:b5:cd:
         9d:1e:1c:de:b2:df:7e:5b:9c:e1:1e:d6:6a:07:66:24:24:e3:
         4f:d0:34:48:ac:ae:77:6b:03:62:cd:79:1d:06:92:aa:4e:61:
         26:77:6c:0a:a6:92:a4:a5:68:d1:84:c7:6a:85:07:7c:ca:ee:
         47:6c:f2:58:1a:0d:66:d8:ec:09:a7:8d:dd:c9:85:cb:e1:f3:
         a1:1a:68:98:dc:01:9b:82:70:b7:5d:c1:5d:ae:9f:e8:7d:74:
         50:fb:bc:88:38:ba:b9:2a:e3:86:e3:c8:86:b8:d5:75:69:6b:
         cd:0b:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:29 2025 by rpki-client