Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (raw, json)
Hash identifier:          EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=
Subject key identifier:   F1:A5:01:A6:96:61:21:44:D9:03:00:A2:43:3D:8B:63:DC:FE:81:67
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       3347FCA59E315CA82EFB2447CF31A5F2894D1769
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa
Signing time:             Wed 30 Jul 2025 17:38:48 +0000
ROA not before:           Wed 30 Jul 2025 17:33:48 +0000
ROA not after:            Wed 29 Jul 2026 17:38:48 +0000
asID:                     263482
IP address blocks:        191.242.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 19:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:47:fc:a5:9e:31:5c:a8:2e:fb:24:47:cf:31:a5:f2:89:4d:17:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Jul 30 17:33:48 2025 GMT
            Not After : Jul 29 17:38:48 2026 GMT
        Subject: CN=F1A501A696612144D90300A2433D8B63DCFE8167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:3b:d7:1b:ba:ec:f6:63:e1:38:33:20:c3:
                    c7:4c:03:07:a7:fc:a8:eb:1c:6e:15:68:90:04:b7:
                    02:fd:15:7f:71:b1:23:c2:c6:9d:9f:db:62:2e:21:
                    5b:1d:b3:c1:1e:00:a7:e0:98:b7:c8:a3:31:b8:f9:
                    66:4e:49:85:87:7f:37:bb:c9:33:9d:75:18:52:6c:
                    fc:17:17:18:36:81:91:8e:e3:6e:59:da:e7:f7:65:
                    df:f6:1c:d7:18:ff:58:0d:89:ea:c8:a2:0d:bc:66:
                    cd:8e:88:ad:d6:a1:87:d6:cd:b0:1e:2f:51:49:27:
                    b4:2b:2a:4a:aa:6c:da:ea:dd:aa:94:f3:96:fc:e3:
                    67:d1:81:cd:d2:26:3b:56:e0:d7:8e:49:6e:cf:0b:
                    63:0a:d6:be:b3:c0:d2:6f:8f:c1:e6:2e:2e:af:09:
                    ff:24:d1:ca:ef:7b:77:22:d0:61:37:4c:e9:9e:3a:
                    21:94:b6:1b:31:d7:c5:bf:39:d3:e3:39:cd:9c:e1:
                    6c:7e:15:d3:79:3b:dd:d2:be:40:95:7f:80:04:90:
                    1c:cf:32:ea:4f:6d:6d:8e:f0:e8:d9:4f:49:09:01:
                    8d:dd:6d:d7:95:c1:3b:5f:44:fd:5c:d7:5e:65:18:
                    18:db:24:34:6c:65:e3:57:de:3a:78:f1:18:87:c1:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A5:01:A6:96:61:21:44:D9:03:00:A2:43:3D:8B:63:DC:FE:81:67
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:b2:a3:88:a7:b1:46:7d:1c:f7:12:f9:e2:95:e5:e1:db:3f:
         01:5e:2e:b8:81:42:3b:4c:19:3a:a9:12:67:13:6f:d5:80:21:
         0c:2f:df:64:29:ab:f8:44:b9:27:31:a2:63:e8:1f:a0:8e:2e:
         ec:88:d8:93:e6:8c:80:74:bc:1e:2b:86:6f:db:28:67:05:1b:
         6f:df:85:05:ee:a2:50:14:cc:66:06:b2:62:70:c5:4d:a9:55:
         40:dc:0f:65:fc:5f:f9:b4:95:5d:74:f0:1c:be:64:4b:81:03:
         88:ab:15:d9:80:df:e5:27:49:f0:9e:dc:d6:3c:cf:64:b2:b6:
         11:47:af:1c:79:3c:6e:6b:d6:3e:f1:95:cb:78:dc:14:2a:be:
         88:56:31:eb:86:d2:f2:6f:a8:21:91:e6:20:dd:51:fc:cc:a1:
         0f:65:52:88:e2:4a:6f:5f:77:5d:cd:c8:76:52:8c:f1:be:0b:
         6d:6a:36:d0:61:d7:5f:ae:41:23:81:9e:c7:8d:ef:91:0c:3f:
         d2:4f:ef:55:a3:b0:0b:de:4c:da:e1:c1:5c:b8:57:2b:3d:24:
         09:aa:b4:5c:e6:95:a8:58:64:93:3f:17:a5:5a:d7:b1:15:fe:
         5c:ce:c7:df:ba:42:0c:21:40:d6:90:e4:99:4f:6f:f3:9a:6b:
         58:4b:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:56 2025 by rpki-client