Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa
File:                     3138392e39322e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          rUyYTzgIZrSGv4tk8Dq6kJebf+TAaCG2GwXUEQexuH8=
Subject key identifier:   19:EB:57:68:D9:48:82:19:64:FA:88:4C:2F:89:E7:24:43:BD:DD:28
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       5E400A3C418B7A4348C82E80821340D7D9E9408E
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 17 Jun 2025 15:00:00 +0000
ROA not before:           Tue 17 Jun 2025 14:55:00 +0000
ROA not after:            Tue 16 Jun 2026 15:00:00 +0000
asID:                     22085
IP address blocks:        189.92.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:40:0a:3c:41:8b:7a:43:48:c8:2e:80:82:13:40:d7:d9:e9:40:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jun 17 14:55:00 2025 GMT
            Not After : Jun 16 15:00:00 2026 GMT
        Subject: CN=3082010A0282010100DF01AD14655CC9631D20FCDF7FF219D1489E886441F9F8DD92F54E6EB4229A681C4EE6023654C4108B9A7577E8A92394B97261F447D5B9D54DF55BC7633A4E9A67CAC871D2D9BA22ABB28747D148F92F6996A925AD946317362179B1E81FBE1CC5F816170BCCB76695BC38210F3868A9B7116EA1C253F82B888FC0C51BDB8F15AFE1F9CAE748100C1E4FF84A3E8F89BF23211410643D16407D58A08D1B452A0426BD2D9F9D1709A91CF266F9A61F31C2B89EC5681F0E9EFF1DC21EAC3082B0BF52772BA10705C0E8139540A959419DAE03A83E3D3387A64863EE3986A38CF316B11853646DAA80EF0323C2E1708932255B29C3A6F1F0D63A49F1CF26E9A3C25B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:01:ad:14:65:5c:c9:63:1d:20:fc:df:7f:f2:
                    19:d1:48:9e:88:64:41:f9:f8:dd:92:f5:4e:6e:b4:
                    22:9a:68:1c:4e:e6:02:36:54:c4:10:8b:9a:75:77:
                    e8:a9:23:94:b9:72:61:f4:47:d5:b9:d5:4d:f5:5b:
                    c7:63:3a:4e:9a:67:ca:c8:71:d2:d9:ba:22:ab:b2:
                    87:47:d1:48:f9:2f:69:96:a9:25:ad:94:63:17:36:
                    21:79:b1:e8:1f:be:1c:c5:f8:16:17:0b:cc:b7:66:
                    95:bc:38:21:0f:38:68:a9:b7:11:6e:a1:c2:53:f8:
                    2b:88:8f:c0:c5:1b:db:8f:15:af:e1:f9:ca:e7:48:
                    10:0c:1e:4f:f8:4a:3e:8f:89:bf:23:21:14:10:64:
                    3d:16:40:7d:58:a0:8d:1b:45:2a:04:26:bd:2d:9f:
                    9d:17:09:a9:1c:f2:66:f9:a6:1f:31:c2:b8:9e:c5:
                    68:1f:0e:9e:ff:1d:c2:1e:ac:30:82:b0:bf:52:77:
                    2b:a1:07:05:c0:e8:13:95:40:a9:59:41:9d:ae:03:
                    a8:3e:3d:33:87:a6:48:63:ee:39:86:a3:8c:f3:16:
                    b1:18:53:64:6d:aa:80:ef:03:23:c2:e1:70:89:32:
                    25:5b:29:c3:a6:f1:f0:d6:3a:49:f1:cf:26:e9:a3:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EB:57:68:D9:48:82:19:64:FA:88:4C:2F:89:E7:24:43:BD:DD:28
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.92.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:4e:3f:38:65:3a:97:04:be:ee:5f:f5:91:ca:dd:4f:48:
         d0:8e:3f:20:5d:19:92:90:de:fd:2e:bf:9f:6e:cc:55:e9:2d:
         6a:cb:f0:f5:3c:de:83:48:60:1d:db:8c:f7:14:b5:af:fb:c8:
         a0:90:86:06:96:8a:7a:5c:c4:7e:58:86:a2:2c:a3:a3:08:20:
         97:a1:c7:a0:b8:c7:f1:73:fb:5a:98:56:49:1b:cc:e7:b9:42:
         bd:10:ce:97:93:6e:79:3a:30:eb:3e:8c:8b:92:bd:7a:38:37:
         ce:aa:c8:f4:42:3c:3c:21:cb:48:30:8e:4a:4f:fb:f7:df:c3:
         d3:76:6e:4b:f1:27:74:7e:4a:d6:3d:34:d4:2e:d4:45:b5:8e:
         83:14:1e:3d:e9:7a:96:6c:99:95:23:f0:84:46:8a:c2:2e:89:
         7f:04:f0:6b:0c:92:a0:67:9a:9f:e6:ba:76:e4:b7:67:34:41:
         81:52:62:8d:59:5a:76:85:16:bd:2e:1f:a0:10:cb:cd:28:2c:
         24:1c:1b:82:6e:d0:3e:c3:1e:16:11:0b:d6:39:04:dd:50:2c:
         8a:15:05:00:45:56:4d:1c:de:cf:e2:ac:dc:37:e6:d7:61:ee:
         9b:51:ad:5a:8e:43:03:cb:6a:83:8a:e5:42:fc:67:83:31:bf:
         e5:04:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:38:32 2025 by rpki-client