Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235332e302f32342d3234203d3e20323730343536.roa
File:                     3139302e3132342e3235332e302f32342d3234203d3e20323730343536.roa (raw, json)
Hash identifier:          netYRceIqC7l50gejfUJROWn9r/Gti3sglXDTGseNp4=
Subject key identifier:   AB:9C:BC:F5:B4:8E:33:01:A1:59:D2:C3:D7:F9:86:95:E1:EE:D9:D2
Certificate issuer:       /CN=085D77D4302255076FC0EF856AC7C40EF2F57975
Certificate serial:       3477B07B7DC9DE846047C88E0B462B88CF345FFD
Authority key identifier: 08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235332e302f32342d3234203d3e20323730343536.roa
Signing time:             Wed 23 Jul 2025 23:06:31 +0000
ROA not before:           Wed 23 Jul 2025 23:01:31 +0000
ROA not after:            Wed 22 Jul 2026 23:06:31 +0000
asID:                     270456
IP address blocks:        190.124.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl
                          rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 09:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:77:b0:7b:7d:c9:de:84:60:47:c8:8e:0b:46:2b:88:cf:34:5f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Validity
            Not Before: Jul 23 23:01:31 2025 GMT
            Not After : Jul 22 23:06:31 2026 GMT
        Subject: CN=AB9CBCF5B48E3301A159D2C3D7F98695E1EED9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:d1:d9:93:2f:c2:8d:b2:9e:9c:5a:8e:d9:
                    d5:5a:40:36:c0:55:39:4a:cb:c1:c4:6f:ea:f8:c6:
                    6e:4b:e5:28:cd:ca:95:81:12:17:bd:2a:d5:48:9f:
                    b5:6f:c5:37:9f:65:e3:ca:66:46:5b:56:97:84:2a:
                    d5:e3:25:dd:74:2a:d7:30:b4:64:c9:12:01:51:2a:
                    b6:5e:6a:61:e1:24:65:55:60:b0:ef:9d:b2:25:70:
                    fb:c4:0a:c0:6e:23:20:16:8f:40:43:35:9f:48:2e:
                    ba:cd:d0:05:52:34:b2:63:df:95:7f:c2:34:d1:29:
                    bf:44:e0:3b:d0:fd:aa:9c:be:b3:23:32:27:24:71:
                    20:1b:e2:1c:df:f0:7f:a0:cc:db:71:b0:83:ba:3b:
                    d4:46:d5:00:46:14:14:f8:2a:9e:22:36:f3:cd:ab:
                    09:fc:f2:c7:4a:5d:c6:89:6e:2c:53:45:4f:2f:ed:
                    e2:59:e5:31:6e:39:fa:53:5f:f4:f0:80:80:e4:39:
                    4c:da:5d:d6:6e:ed:ec:67:de:08:4b:33:f9:af:4d:
                    ff:50:24:b6:61:4d:e1:84:ba:01:2d:ab:6b:0a:9d:
                    3e:3f:cd:22:5d:88:ad:a1:ea:5f:f1:fd:9a:c8:0f:
                    5c:d6:5a:0d:28:d5:21:ed:6b:6d:ae:c8:f8:92:24:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9C:BC:F5:B4:8E:33:01:A1:59:D2:C3:D7:F9:86:95:E1:EE:D9:D2
            X509v3 Authority Key Identifier:
                keyid:08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235332e302f32342d3234203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:c3:d4:13:3b:39:d4:21:63:85:9d:68:ba:ce:56:0e:a0:
         e2:51:2b:a9:45:1c:3f:98:47:a6:8b:b0:9c:c5:37:66:38:27:
         8b:ad:9c:4e:85:f9:e7:0f:bc:e2:41:a4:dd:8f:63:eb:a9:e0:
         3f:5a:cd:0f:93:b3:9c:14:33:8d:a9:fc:3c:26:3f:53:99:54:
         f4:01:0f:f4:46:fe:2a:2e:27:43:f6:96:fb:be:94:63:92:81:
         39:75:4e:2c:36:d6:00:ca:fa:3e:75:ba:10:61:53:82:eb:bd:
         aa:7d:f1:e5:cf:b3:be:ad:fd:ef:8b:9c:b4:79:5e:c8:23:aa:
         e4:91:ab:b7:91:5c:cb:88:46:34:c8:17:40:ba:15:94:6c:20:
         7a:b5:d3:f7:fe:e5:89:a5:17:bc:e1:da:7b:c9:91:58:6f:46:
         ae:70:0b:6a:7a:63:a1:a9:9c:14:f2:bc:eb:b1:cf:e2:58:9c:
         85:f8:ec:97:40:36:bd:2a:1b:f5:50:9d:75:f6:f6:64:21:32:
         d6:93:68:a9:62:aa:f7:70:c5:97:6e:00:19:97:94:bc:f2:41:
         88:75:76:d6:f6:18:b0:0d:17:7b:57:52:95:c3:10:ae:c0:d8:
         3f:a6:34:e4:11:49:97:c4:7f:e0:33:a7:1e:c3:d7:b6:ca:e6:
         c9:ec:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:52:33 2025 by rpki-client