Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133312e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3133312e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          yFgdz7l3rVWv9nJxn3pvytMNNWWbQjD15X6mF+aONq8=
Subject key identifier:   DD:43:1B:76:E1:B6:65:3B:4E:6A:75:A5:BA:FB:E3:77:28:6E:D2:C4
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       2103506FA756733EE77774D5ACF744B70095FB51
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133312e302f32342d3234203d3e20323730373131.roa
Signing time:             Thu 31 Jul 2025 15:08:25 +0000
ROA not before:           Thu 31 Jul 2025 15:03:25 +0000
ROA not after:            Thu 30 Jul 2026 15:08:25 +0000
asID:                     270711
IP address blocks:        189.127.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:03:50:6f:a7:56:73:3e:e7:77:74:d5:ac:f7:44:b7:00:95:fb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Jul 31 15:03:25 2025 GMT
            Not After : Jul 30 15:08:25 2026 GMT
        Subject: CN=DD431B76E1B6653B4E6A75A5BAFBE377286ED2C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:13:09:ff:f1:0a:d2:23:ff:18:70:33:1c:
                    6f:0f:86:b0:d3:c9:6c:77:ea:76:fe:26:5b:7f:3b:
                    9e:a5:96:d7:51:78:4a:a4:a9:c1:40:d1:b1:ff:75:
                    ca:80:ea:63:27:1d:29:cc:b2:91:99:81:d3:4c:b4:
                    7f:39:3d:59:20:39:3f:70:0d:c2:1d:4d:e0:95:7c:
                    ec:73:b5:9d:1b:a5:f2:bd:d5:49:e0:bc:a2:98:dd:
                    ce:4f:0d:5b:3b:31:d5:cc:e8:80:d7:11:78:9f:be:
                    90:e2:df:7b:c4:6f:98:54:73:64:fe:27:7f:be:4b:
                    26:47:06:50:36:a6:60:35:84:d6:a7:73:d9:d1:30:
                    a0:c4:67:4f:a5:13:3c:0c:f3:92:54:43:43:0b:de:
                    a0:2b:e9:c7:b9:bf:3e:71:f9:d7:6a:bc:f5:99:98:
                    33:3e:f4:c8:93:be:63:07:a5:88:82:e2:d1:39:98:
                    39:d3:89:0c:00:c7:fb:25:a6:d8:55:e1:76:e0:34:
                    98:f0:b5:e5:bf:29:e8:2b:a1:b6:79:e7:b7:c8:3a:
                    02:af:5b:1e:cd:11:cb:56:c0:0f:1d:95:57:35:ad:
                    a1:fb:01:3c:bc:96:45:b4:c6:20:40:26:23:9d:49:
                    69:a9:93:6a:62:26:4b:f2:f3:19:10:d5:c8:77:88:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:1B:76:E1:B6:65:3B:4E:6A:75:A5:BA:FB:E3:77:28:6E:D2:C4
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133312e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f6:b9:2e:11:fc:c7:34:1f:e5:24:5c:7f:71:24:fd:49:6e:
         8b:a8:d8:e1:3e:11:9a:09:17:1c:7d:6a:61:fc:51:0c:90:57:
         6b:75:2a:f4:87:65:c5:cb:b9:ea:e2:8c:51:7f:02:49:dc:29:
         e2:49:5d:1b:47:4f:b5:fb:a1:9f:c0:43:cf:7d:72:12:01:21:
         51:e6:f4:f8:15:c2:48:b5:7e:bf:ab:83:6a:b4:76:41:d6:9d:
         96:31:f5:10:cc:cc:62:90:7e:b6:bc:27:de:d7:7c:6d:d0:eb:
         0c:af:b4:04:ca:1b:7d:8b:98:41:69:ea:8c:d3:ec:41:c4:c5:
         d3:02:4b:70:7d:4f:73:be:69:f6:4e:41:d3:bc:fa:b9:2b:06:
         5c:51:cc:21:c6:c8:90:82:85:d5:3d:e4:e0:9b:65:67:83:07:
         af:83:c9:17:8b:db:64:0c:a2:42:93:47:dc:0f:5c:f5:a9:d8:
         33:d5:cf:c7:5b:c3:f7:bc:ad:ea:73:f3:66:b3:83:1c:60:75:
         42:87:86:df:30:a5:92:58:74:c4:81:e0:e9:af:81:54:fe:b8:
         a9:ba:5f:2e:39:7d:d7:0c:ae:5c:b1:91:24:46:83:8e:81:e2:
         c3:d6:a3:c7:bf:f4:68:04:b6:4e:b6:92:bc:98:0b:73:4b:32:
         b4:e9:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:52 2025 by rpki-client