Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/3139302e3132342e3137362e302f32302d3234203d3e20323633363136.roa
File:                     3139302e3132342e3137362e302f32302d3234203d3e20323633363136.roa (raw, json)
Hash identifier:          f4xgv0+MhyWPeT7zJ55OGrqYQGUEXyXCIFazHYUb15g=
Subject key identifier:   AC:4A:94:DA:E7:63:32:C2:28:88:DA:BC:70:67:DA:AB:14:B6:40:5C
Certificate issuer:       /CN=FED723E7FEF416679E265910E6E617325917A4CC
Certificate serial:       627F270A9017651881AB633F6452CD2EFCDF1119
Authority key identifier: FE:D7:23:E7:FE:F4:16:67:9E:26:59:10:E6:E6:17:32:59:17:A4:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED723E7FEF416679E265910E6E617325917A4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/3139302e3132342e3137362e302f32302d3234203d3e20323633363136.roa
Signing time:             Thu 12 Jun 2025 12:37:14 +0000
ROA not before:           Thu 12 Jun 2025 12:32:14 +0000
ROA not after:            Thu 11 Jun 2026 12:37:14 +0000
asID:                     263616
IP address blocks:        190.124.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/FED723E7FEF416679E265910E6E617325917A4CC.crl
                          rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/FED723E7FEF416679E265910E6E617325917A4CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED723E7FEF416679E265910E6E617325917A4CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 08:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7f:27:0a:90:17:65:18:81:ab:63:3f:64:52:cd:2e:fc:df:11:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED723E7FEF416679E265910E6E617325917A4CC
        Validity
            Not Before: Jun 12 12:32:14 2025 GMT
            Not After : Jun 11 12:37:14 2026 GMT
        Subject: CN=AC4A94DAE76332C22888DABC7067DAAB14B6405C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:20:76:e6:9f:26:3b:13:a6:c0:d6:04:d1:
                    44:a5:06:7c:b1:2f:7c:5a:88:bf:87:ae:62:e4:7f:
                    17:a2:67:22:cc:5d:f3:93:aa:a9:b5:e0:9f:0d:18:
                    50:6f:37:64:1d:9f:b5:74:f6:af:15:0b:de:eb:98:
                    42:ca:ef:37:66:d3:1b:e2:40:3a:de:7d:19:7f:69:
                    cd:23:e0:c7:93:c8:f0:a8:d5:29:25:5e:69:72:7a:
                    2d:b1:82:72:85:8f:54:17:ee:64:dd:d6:12:18:0b:
                    9c:f4:93:7c:3b:5e:72:57:49:d9:61:69:ef:ce:4b:
                    c9:c1:ed:68:b8:5f:41:ab:93:dd:af:55:81:ae:c6:
                    17:2c:12:81:f7:d5:7f:d8:a6:56:06:d3:f8:0e:7f:
                    34:a2:ed:ba:45:ff:72:e8:c7:80:01:9f:1d:30:81:
                    04:13:c8:4c:08:aa:5b:e0:01:b3:a4:e3:1a:29:f6:
                    f8:18:a2:a6:4f:34:21:46:2c:7c:6d:fb:a0:75:68:
                    a5:ea:c2:1a:e7:82:44:51:2a:52:73:56:0d:94:44:
                    48:47:b5:51:09:15:db:84:9e:58:72:91:4c:33:ef:
                    34:c5:9f:54:27:43:ca:38:e8:22:37:ad:dd:06:01:
                    01:16:4a:8c:6f:b8:87:07:4d:47:23:ab:0d:fc:d7:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4A:94:DA:E7:63:32:C2:28:88:DA:BC:70:67:DA:AB:14:B6:40:5C
            X509v3 Authority Key Identifier:
                keyid:FE:D7:23:E7:FE:F4:16:67:9E:26:59:10:E6:E6:17:32:59:17:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/FED723E7FEF416679E265910E6E617325917A4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED723E7FEF416679E265910E6E617325917A4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/3139302e3132342e3137362e302f32302d3234203d3e20323633363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:60:39:5c:a5:69:05:34:bd:29:e3:a7:43:32:88:a0:bd:e3:
         76:bc:d7:e0:69:d0:1b:a0:22:1c:2f:83:cb:97:9a:48:a4:d0:
         e3:31:df:a8:31:cd:7a:d9:ea:48:ca:01:f7:5c:56:3d:09:98:
         33:8b:a6:5c:9e:03:66:ba:c6:39:ce:8e:cc:37:4c:b6:e7:82:
         28:ca:0c:43:10:22:32:88:2d:8d:5e:6f:fc:2f:17:a1:c3:f9:
         4a:00:1d:00:33:a1:ee:3a:e5:34:59:76:b8:f6:62:90:54:1b:
         4c:44:8e:5b:13:7f:8e:a0:b2:0b:c2:20:bf:76:8e:b0:6e:4d:
         d4:68:2e:2f:09:fc:29:dc:84:d8:ea:67:c9:1e:63:8f:78:91:
         f5:d6:53:25:e9:e4:1a:3f:30:eb:03:e9:56:7d:fe:8c:1f:60:
         e5:1d:38:bb:25:96:d8:b7:44:d1:f0:09:30:8e:9f:fa:93:59:
         6d:5e:4a:10:de:ad:51:39:ac:bb:36:a3:cb:95:c9:fc:12:d4:
         03:7a:0f:03:de:54:ec:a5:9d:e2:0e:47:73:4f:f6:82:30:44:
         ba:6a:3d:85:ad:17:4a:3f:c1:e5:3f:58:2c:87:34:08:96:d3:
         f7:0b:f3:f6:6d:5b:1b:6a:6f:6e:59:6c:54:62:96:68:27:0e:
         78:a8:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:07:00 2025 by rpki-client