Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa
File:                     3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa (raw, json)
Hash identifier:          Gpf/tXyZICt+phsbh9jwR1ExPkNADbNeLUQZSEcPTR0=
Subject key identifier:   C0:EF:CC:6D:80:BB:B4:C0:E9:9C:3B:DF:F0:75:18:F3:8A:27:3A:BF
Certificate issuer:       /CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
Certificate serial:       40989FDFB42F51B57728DB9E04B3D23D7B239A70
Authority key identifier: A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa
Signing time:             Wed 16 Jul 2025 16:16:50 +0000
ROA not before:           Wed 16 Jul 2025 16:11:50 +0000
ROA not after:            Wed 15 Jul 2026 16:16:50 +0000
asID:                     270556
IP address blocks:        190.115.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl
                          rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:9f:df:b4:2f:51:b5:77:28:db:9e:04:b3:d2:3d:7b:23:9a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
        Validity
            Not Before: Jul 16 16:11:50 2025 GMT
            Not After : Jul 15 16:16:50 2026 GMT
        Subject: CN=C0EFCC6D80BBB4C0E99C3BDFF07518F38A273ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:c7:c0:25:c9:2f:98:14:b2:d2:92:ff:43:
                    f6:15:d3:28:5d:49:06:a2:97:63:2c:97:47:a4:b5:
                    37:a8:7f:8c:b1:9e:8d:98:6a:0e:4e:d0:5e:c1:80:
                    d5:cc:26:6b:44:c5:1c:36:d3:f4:2f:ad:6c:7d:65:
                    0a:77:31:d7:7b:c9:51:d0:9d:6a:2d:ee:1a:75:2c:
                    7b:5c:15:e0:4d:2e:58:ed:f0:d2:21:ef:d5:aa:f1:
                    be:8a:8f:70:07:a0:a6:03:48:91:d4:96:ee:a5:2e:
                    c5:f8:8d:c0:59:4c:a0:db:1c:0b:ca:b3:27:07:ec:
                    6b:c4:7e:ad:42:67:5e:c8:03:6e:96:ad:a9:5e:9b:
                    54:5d:79:bf:32:28:e6:53:af:64:42:82:2a:58:27:
                    f4:8e:b8:09:1f:f0:af:7c:df:98:56:29:2b:19:0b:
                    c3:f9:c0:79:91:dd:f4:fe:33:52:74:1a:5e:fa:1f:
                    e7:41:ad:8e:c9:ab:1b:bc:25:66:69:3a:3b:4d:ac:
                    8a:e0:c2:dd:9b:2e:53:22:e0:98:81:f0:7f:f6:af:
                    8e:45:72:5a:0a:2e:73:c1:43:ac:cf:1f:56:17:4a:
                    1f:bd:a1:c9:cd:58:52:e2:ff:bd:d0:3b:ed:9b:7f:
                    14:6e:68:c2:25:38:fa:1b:f1:69:4e:8d:c2:a9:8f:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EF:CC:6D:80:BB:B4:C0:E9:9C:3B:DF:F0:75:18:F3:8A:27:3A:BF
            X509v3 Authority Key Identifier:
                keyid:A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ee:39:83:28:86:89:ea:dd:61:4d:e6:73:d8:98:53:ee:37:
         58:c1:db:57:74:47:f6:04:5d:7a:b8:29:88:4d:53:f8:d4:46:
         0c:2f:5d:3d:f7:c2:9b:5f:dc:13:93:12:e7:6e:54:6d:ce:6f:
         7b:f8:44:92:65:88:c9:04:ba:7a:9e:e5:fc:46:16:fb:ff:55:
         b2:0a:78:3b:5b:9c:43:47:cf:aa:8b:57:52:2f:b1:9b:22:a3:
         b9:34:77:80:e2:04:a5:d1:fd:ae:9c:b0:c5:56:d0:70:bc:23:
         44:81:db:cc:cf:51:b4:b5:51:93:18:d5:83:6c:1e:3b:22:67:
         bd:0d:19:1f:b1:53:94:2a:78:8b:5d:2a:52:68:2e:d8:81:ab:
         3f:93:90:3e:41:90:d3:98:47:07:20:8e:3c:e2:b3:f2:25:c9:
         44:c6:c9:d9:c8:bb:42:39:1b:06:b8:b5:d1:61:3e:9a:cc:78:
         d5:33:20:e2:4a:48:cb:bc:36:77:55:95:60:70:a8:bf:7f:45:
         6b:1e:ca:b5:fb:76:80:ab:1f:a1:bb:16:6a:90:88:1c:40:e6:
         d7:e5:f0:cf:b5:eb:69:8d:d1:cb:85:42:cc:9f:c7:71:ad:15:
         25:dc:7b:cd:81:8c:da:fb:35:2d:4e:f1:7e:e4:46:07:f9:6e:
         b0:80:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:18 2025 by rpki-client