Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          pRrUPVkv88yA3gEFo47KZ26/5h9U6iDw+2M0jDa5+m4=
Subject key identifier:   CB:F1:AC:99:FE:79:30:42:F8:0C:1C:39:EA:28:EF:1B:FA:B9:77:E1
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       4E019BCC1A38BECE9DF667FBA5041AECCFDFB366
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa
Signing time:             Thu 31 Jul 2025 15:08:24 +0000
ROA not before:           Thu 31 Jul 2025 15:03:24 +0000
ROA not after:            Thu 30 Jul 2026 15:08:24 +0000
asID:                     270711
IP address blocks:        189.127.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:01:9b:cc:1a:38:be:ce:9d:f6:67:fb:a5:04:1a:ec:cf:df:b3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Jul 31 15:03:24 2025 GMT
            Not After : Jul 30 15:08:24 2026 GMT
        Subject: CN=CBF1AC99FE793042F80C1C39EA28EF1BFAB977E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:80:f2:8c:98:bb:eb:06:b3:1d:80:5f:ea:
                    26:26:a9:b1:37:e3:99:02:39:1b:54:73:48:5e:cd:
                    bf:fa:bf:2a:bf:84:d4:a0:f4:48:03:63:5c:1d:c8:
                    da:32:7d:cf:c7:84:a4:60:49:8e:77:3c:f6:9e:6d:
                    35:77:db:d1:b8:4f:d2:3d:28:d1:1e:46:d9:ef:ba:
                    ef:ca:10:df:c5:e9:dc:57:f8:2e:85:a9:05:f0:88:
                    5a:69:cf:2b:31:7a:1b:ae:a8:b2:af:dc:2b:d6:17:
                    e3:e0:20:ad:d1:56:a3:41:13:52:d1:5c:d3:d6:c3:
                    88:43:7b:32:15:6a:5d:bc:34:0c:d1:f4:78:2a:47:
                    1d:e3:1d:d2:a9:52:9d:a9:3a:37:a7:51:0a:64:d0:
                    64:d8:53:38:71:d2:74:c0:7e:96:1f:db:bd:90:b6:
                    c5:d9:3e:b8:85:4f:9b:0b:1b:e0:02:ad:0a:53:33:
                    61:a7:01:d1:4a:cf:1b:f2:e1:32:02:30:fc:52:3a:
                    d1:ae:7e:4a:e8:59:5d:b7:b4:2d:8f:a2:32:09:c6:
                    35:39:70:e8:f8:00:76:8f:1c:ee:20:04:21:00:fa:
                    76:57:2f:de:d7:9a:8b:1f:34:3a:1f:dc:7a:bb:ff:
                    f4:02:48:ca:5b:68:92:92:a8:6b:79:57:e4:e5:37:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:AC:99:FE:79:30:42:F8:0C:1C:39:EA:28:EF:1B:FA:B9:77:E1
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:dd:e5:64:c3:6a:5c:5d:c6:e7:bb:1c:b4:36:bc:11:ef:67:
         74:e9:28:d2:0c:1b:70:f3:97:fb:d1:7c:73:43:10:a0:2d:e6:
         f6:59:0b:52:61:d3:be:1f:c6:77:56:c0:c6:57:a9:14:e1:85:
         11:51:c1:ff:9b:13:76:b5:a1:0a:c6:3e:53:b8:e9:78:d5:65:
         a0:2d:6e:8b:93:51:ee:94:3e:b2:60:b4:88:cb:2e:71:00:e9:
         76:01:fb:8c:da:5c:e4:5a:58:78:60:fe:88:4c:e1:a2:64:08:
         be:9d:df:47:31:c5:f9:fd:dd:c0:53:7f:8c:d3:9e:e6:fa:4c:
         9c:12:79:2a:4f:7d:47:27:c2:58:34:8f:ed:cd:c6:7f:a8:d9:
         0c:16:bc:6b:41:61:aa:9b:65:ba:0a:70:a7:11:91:69:38:21:
         e8:25:6a:a9:9b:7e:37:31:67:75:23:0b:a4:f5:f5:c2:28:f6:
         c4:82:32:ac:dc:dd:58:7d:40:5b:a4:49:38:7a:f5:6e:a8:2d:
         bd:77:11:0d:7f:84:51:e5:d6:90:a8:75:e5:b5:f2:e8:5a:81:
         59:2b:40:d7:83:4c:a7:50:f5:31:f9:b0:f5:75:2a:29:d8:80:
         f5:1e:3b:d5:0b:e0:2f:ce:0b:1d:14:8a:4a:bc:a9:eb:4d:31:
         09:33:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:25 2025 by rpki-client