Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32322d3232203d3e20323732373130.roa
File:                     3139302e3130392e3130302e302f32322d3232203d3e20323732373130.roa (raw, json)
Hash identifier:          DelA7kJK6FBIAgZSeoxgXzkiZtTZNC3Do8h+FDY2dAY=
Subject key identifier:   EA:FD:FC:47:F1:E6:89:D2:6B:F6:FC:64:C2:FA:8B:4C:6E:19:0A:D3
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       52B5078870F464F916084125005326313FCE3D44
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32322d3232203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 15:06:26 +0000
ROA not before:           Fri 01 Aug 2025 15:01:26 +0000
ROA not after:            Fri 31 Jul 2026 15:06:26 +0000
asID:                     272710
IP address blocks:        190.109.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b5:07:88:70:f4:64:f9:16:08:41:25:00:53:26:31:3f:ce:3d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 15:01:26 2025 GMT
            Not After : Jul 31 15:06:26 2026 GMT
        Subject: CN=EAFDFC47F1E689D26BF6FC64C2FA8B4C6E190AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:e8:54:dc:27:80:db:fc:22:0b:bc:11:5d:
                    ec:ce:86:cf:ba:ce:47:ba:fe:88:81:62:e4:60:e8:
                    0c:2c:88:1d:59:64:ad:15:87:5a:21:ea:8d:8d:49:
                    04:be:1d:6f:5d:a4:d1:26:82:09:63:9d:c5:93:09:
                    6c:5e:4f:e4:9d:96:11:e5:0b:bf:a3:2e:a1:64:8e:
                    b2:96:7a:26:a4:ef:9b:5d:97:27:54:03:1f:02:01:
                    d2:94:3b:11:fc:36:b9:e9:52:6b:04:d5:d5:50:bc:
                    94:e8:8d:73:38:ab:e8:e0:92:a3:c4:0c:fc:eb:68:
                    e8:f4:36:d8:68:14:3e:91:46:fb:a4:20:a1:5a:18:
                    66:7f:11:8e:c8:c0:b2:3b:de:e7:f2:9d:d1:46:1c:
                    5c:1a:f9:e6:1f:ae:e7:d5:2f:c9:c3:ea:8f:e6:c0:
                    a7:19:64:84:af:c1:30:83:9b:7d:26:19:72:0f:73:
                    05:f0:61:65:63:c8:9f:62:8c:a8:d1:e2:a4:05:40:
                    24:cb:46:82:42:c2:04:74:ff:99:a7:74:af:3c:7b:
                    1c:fc:df:1f:a6:e3:73:92:57:23:e1:af:09:3c:b0:
                    f5:48:2f:c5:c7:b0:10:07:33:90:88:31:57:39:d8:
                    82:55:0f:12:d8:0d:97:95:d4:e0:8f:cf:70:4e:63:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FD:FC:47:F1:E6:89:D2:6B:F6:FC:64:C2:FA:8B:4C:6E:19:0A:D3
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32322d3232203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:41:bb:65:55:82:88:a9:f6:4e:bf:91:da:b2:b3:72:8a:5a:
         46:8a:55:9c:00:32:cb:53:4b:0a:d3:00:f3:5a:0d:56:85:62:
         75:bf:17:e1:32:76:e9:85:00:4b:87:c6:06:f7:4d:07:94:54:
         4f:f3:37:ea:7e:0f:34:fd:9c:f9:53:bd:14:cb:5f:3e:5c:f6:
         94:e0:e4:63:4b:29:37:92:eb:22:6a:da:81:95:64:a7:bd:f4:
         5b:37:4a:a1:3b:3b:92:ee:99:40:5e:f2:18:75:c4:c5:96:da:
         8e:47:c5:ee:cb:64:84:2b:c8:56:bb:32:1d:41:a1:f2:17:dc:
         05:8c:bb:fe:6e:2e:4f:ef:dc:34:b4:f7:32:7c:d6:a9:9f:a0:
         26:de:7f:c8:6c:80:6f:78:d8:84:46:94:d2:6f:df:0b:58:ee:
         91:16:d0:d4:5e:d3:5d:67:df:17:cb:6b:26:da:eb:b9:7d:a9:
         22:7f:36:63:d6:31:d3:ef:80:a6:f1:e7:09:1c:93:b4:43:b6:
         05:67:b5:7b:80:0a:0e:12:92:3e:70:d1:fd:66:39:e7:4b:75:
         f2:a5:a3:09:85:a6:02:5e:67:53:00:c0:0c:e2:d4:6d:bc:45:
         21:e6:af:78:66:f2:e0:67:3a:10:f4:f1:40:46:45:7d:f1:9a:
         b1:fa:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:42:11 2025 by rpki-client