Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3139312e3234302e3135382e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3135382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          Zx8XfyU+wdry7D4Jmw9pZaaL0XtL68ooBKVTzO54m1Q=
Subject key identifier:   B6:4A:CE:C4:72:9A:3B:AD:AE:23:EB:A8:47:30:DE:28:06:1A:3F:7C
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       0B7589E30A3DC1CBA381FD3A354AC01BA2A47083
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3139312e3234302e3135382e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:20 +0000
ROA not before:           Tue 29 Jul 2025 14:03:20 +0000
ROA not after:            Tue 28 Jul 2026 14:08:20 +0000
asID:                     28165
IP address blocks:        191.240.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 09:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:75:89:e3:0a:3d:c1:cb:a3:81:fd:3a:35:4a:c0:1b:a2:a4:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:20 2025 GMT
            Not After : Jul 28 14:08:20 2026 GMT
        Subject: CN=B64ACEC4729A3BADAE23EBA84730DE28061A3F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:e4:a9:31:e6:0e:9a:70:d3:8a:1c:9f:a5:
                    32:07:b9:17:c1:bb:0d:b8:a3:76:bc:8d:25:9c:95:
                    ba:de:09:bd:c2:e3:74:c6:79:54:ec:69:2e:3a:b8:
                    a9:d1:22:dc:9c:5f:e2:b3:88:44:0b:90:46:a7:43:
                    85:30:52:27:43:74:27:78:bf:df:13:74:bc:4d:71:
                    0f:4c:9e:b7:dd:89:00:0d:23:4a:8a:1d:d4:99:90:
                    df:59:bd:6e:a3:15:38:f9:27:a5:2c:97:3d:89:5b:
                    e0:84:79:79:97:6c:77:0d:91:a1:79:d5:94:ed:42:
                    71:af:f6:5d:c0:b8:ae:8d:4f:4b:4b:87:d5:80:1d:
                    91:84:38:fe:be:ff:e6:95:28:c1:9b:ed:8d:c4:a2:
                    9c:43:6b:0b:04:8d:89:7a:a8:e8:8f:4d:65:f5:bd:
                    72:92:a3:c6:0e:53:ec:67:23:0f:cc:2e:f3:4e:78:
                    14:f2:76:70:be:fa:03:75:96:94:fa:b1:c4:9c:73:
                    2c:f3:e3:c2:9e:bb:0a:8d:b2:7a:9e:13:2c:51:69:
                    7f:d4:6b:e4:9b:6e:ef:08:47:51:93:3e:3c:49:61:
                    14:46:63:b0:5c:36:78:3a:4d:8b:fb:a3:09:c1:9a:
                    c1:a4:2c:69:70:5b:f7:4a:7f:68:4a:13:fc:6c:04:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4A:CE:C4:72:9A:3B:AD:AE:23:EB:A8:47:30:DE:28:06:1A:3F:7C
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3139312e3234302e3135382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:5b:32:d1:5b:2b:c2:44:59:59:7d:0c:bf:27:aa:7e:64:
         98:51:e9:0f:55:0a:cd:de:58:41:10:94:23:87:43:3c:0a:6b:
         19:c9:c7:a7:9c:a9:5d:8f:2d:97:9f:74:c7:70:8c:35:a4:ce:
         94:3c:e6:a9:7a:d5:ca:f3:cc:81:16:ad:ff:2c:d7:68:b4:2b:
         35:0b:16:75:f3:78:50:9f:71:f7:1a:aa:99:d8:5c:9b:73:0e:
         ce:e6:81:3e:73:ed:df:00:98:0c:ac:ab:8d:f1:c4:45:31:ae:
         fb:ab:fa:9c:63:6e:78:8f:8d:a4:cc:8e:9c:32:00:d8:c3:90:
         52:88:ef:10:8d:12:76:98:5f:77:67:c4:77:3a:d1:74:4a:2d:
         52:25:65:ae:02:c3:23:b4:a8:45:20:23:cc:ba:3e:ce:c3:69:
         20:01:64:cb:33:29:30:9b:79:dc:a1:00:fe:88:51:f6:be:af:
         85:1c:2a:a2:4b:58:2e:81:05:38:c7:4e:17:d1:54:29:de:58:
         53:10:20:e7:51:7b:1f:02:35:4c:81:c5:29:cf:d3:6d:22:6e:
         8f:3d:93:74:17:a9:e4:86:a1:17:81:28:70:a3:53:a2:1a:4b:
         fa:41:2e:1c:93:e1:09:6f:19:70:7d:65:c1:e0:02:f2:b2:c8:
         e8:8b:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:49 2025 by rpki-client