Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/3139302e3131352e3231322e302f32322d3332203d3e20323730383439.roa
File:                     3139302e3131352e3231322e302f32322d3332203d3e20323730383439.roa (raw, json)
Hash identifier:          PsBtYO6qWrGgWRd78eXCUKVwjm46jbLRZCdN6tkIWaE=
Subject key identifier:   86:A1:8E:52:8F:87:69:4C:09:63:81:B9:B2:1A:5D:94:DF:2A:76:42
Certificate issuer:       /CN=205BDAA59440034C4D1BF95271B3B291B494E890
Certificate serial:       2C9E45A512C0333EFD34DF868D8992D03225D1A7
Authority key identifier: 20:5B:DA:A5:94:40:03:4C:4D:1B:F9:52:71:B3:B2:91:B4:94:E8:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/3139302e3131352e3231322e302f32322d3332203d3e20323730383439.roa
Signing time:             Mon 28 Jul 2025 14:27:22 +0000
ROA not before:           Mon 28 Jul 2025 14:22:22 +0000
ROA not after:            Mon 27 Jul 2026 14:27:22 +0000
asID:                     270849
IP address blocks:        190.115.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.crl
                          rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 21:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9e:45:a5:12:c0:33:3e:fd:34:df:86:8d:89:92:d0:32:25:d1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205BDAA59440034C4D1BF95271B3B291B494E890
        Validity
            Not Before: Jul 28 14:22:22 2025 GMT
            Not After : Jul 27 14:27:22 2026 GMT
        Subject: CN=86A18E528F87694C096381B9B21A5D94DF2A7642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:0c:e2:1d:72:a4:2a:c0:97:e6:79:5c:1c:
                    30:d5:a6:2a:80:b4:c4:4e:8d:20:57:4d:10:80:d8:
                    0f:bb:f9:2e:91:c2:99:4e:ce:86:29:22:85:b2:aa:
                    38:65:8f:72:8e:83:63:e4:fc:e2:f5:63:34:cd:0a:
                    6f:18:f3:17:4d:58:fd:20:16:3e:fc:d8:37:ca:86:
                    5e:dd:70:cf:72:e6:e5:e7:3c:ef:ac:5c:22:31:a5:
                    6c:26:9e:91:55:46:e2:65:22:02:90:ae:7d:11:ca:
                    20:d1:0e:d3:4a:f8:34:f1:e9:4d:ca:1f:ba:6e:24:
                    ea:59:f0:83:f6:0a:38:5f:07:dc:49:aa:7e:ef:61:
                    e0:97:05:21:71:38:f8:07:4e:fc:66:9e:b6:fd:cc:
                    bb:83:b5:5d:4a:8d:ee:6f:50:e6:30:9d:37:d0:82:
                    21:6e:13:7b:6e:a5:51:26:34:6e:30:78:2f:30:f1:
                    c3:13:d8:57:ff:dd:58:56:35:b4:6e:18:67:9f:b1:
                    79:cb:e4:b9:3c:3b:c8:df:7a:1c:57:e1:31:00:c6:
                    22:41:b3:4a:e0:7e:21:47:e3:a0:3e:58:c1:6b:b3:
                    fd:c6:e8:d5:1d:07:3d:cb:f6:f7:fe:6f:ee:54:e9:
                    6d:30:49:50:51:d7:a8:9c:7a:f7:8f:de:17:8c:e1:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A1:8E:52:8F:87:69:4C:09:63:81:B9:B2:1A:5D:94:DF:2A:76:42
            X509v3 Authority Key Identifier:
                keyid:20:5B:DA:A5:94:40:03:4C:4D:1B:F9:52:71:B3:B2:91:B4:94:E8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/3139302e3131352e3231322e302f32322d3332203d3e20323730383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:45:d3:78:5e:a7:69:37:2c:ad:e9:5c:b2:27:3d:6d:6d:1d:
         4c:bd:3b:50:d3:22:20:64:6e:5f:11:82:78:e3:77:cc:28:40:
         bb:de:05:1f:3f:06:c9:b0:63:4d:3e:6f:3c:98:b9:68:17:1e:
         fd:9c:cb:3e:54:d1:2d:b2:86:04:41:d3:e1:54:43:0f:54:8d:
         8b:0b:83:a4:70:bd:d9:fa:4c:c0:f3:46:99:d9:b4:06:9f:45:
         4d:8b:b0:9a:d5:d3:ff:bc:1a:48:3f:32:05:ab:1e:0b:8d:bf:
         28:a9:e2:69:33:f8:9c:63:e5:5d:14:a3:d4:65:62:87:a7:7a:
         b4:86:46:2c:7d:e5:61:f2:c5:e6:0b:2f:da:ed:2e:cc:58:3c:
         53:14:4c:2c:b0:24:be:9d:ed:a0:0c:bf:9a:4a:3a:e6:c4:c4:
         1c:c3:17:ff:1c:a3:47:d3:c2:48:ba:2b:1e:f3:97:83:54:b3:
         80:a4:d7:17:94:42:fb:e3:a7:56:52:27:5c:8b:31:ab:4f:6d:
         b8:9c:ca:5c:cc:03:28:d5:f7:16:c3:54:18:5c:c6:e2:25:1a:
         9d:70:6a:80:e6:5c:3e:2c:05:c1:3c:cf:48:80:e6:bc:3c:4f:
         f7:f3:b4:b6:53:6e:28:fa:71:50:3b:d1:3f:c5:7a:e6:d3:9c:
         19:8e:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:33:46 2025 by rpki-client