Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3234203d3e203232303835.roa
File:                     3139312e3234342e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          dXFynrjQZ06LARzcP2wrsX9z/tRvmiTNpSDbW6xkt30=
Subject key identifier:   17:33:18:A9:2F:24:86:A1:89:3A:D7:7E:5D:5B:EC:8B:A2:04:87:EA
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       2BA839854AD3041D3205EADBE3202E7D9A066976
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 17 Jun 2025 15:00:00 +0000
ROA not before:           Tue 17 Jun 2025 14:55:00 +0000
ROA not after:            Tue 16 Jun 2026 15:00:00 +0000
asID:                     22085
IP address blocks:        191.244.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a8:39:85:4a:d3:04:1d:32:05:ea:db:e3:20:2e:7d:9a:06:69:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jun 17 14:55:00 2025 GMT
            Not After : Jun 16 15:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:a5:2b:ad:8e:f0:87:5c:b5:14:ce:73:4c:
                    19:eb:16:e9:95:bc:ec:cb:6e:f3:05:a1:e4:20:40:
                    db:21:e9:d8:2b:de:5c:13:7b:15:f6:a9:bb:e5:c8:
                    d9:af:b4:30:b6:d2:2b:54:24:ec:89:04:6b:07:2d:
                    b8:82:e3:08:67:43:c8:3f:66:fc:f6:40:ed:45:fb:
                    ce:45:d6:9d:e9:0f:79:a0:0f:a5:b9:31:a8:e5:6e:
                    3b:47:ed:55:8f:e1:47:2c:3e:d7:7b:59:ce:d4:7a:
                    13:cc:ea:85:ef:40:eb:d0:46:5d:20:b2:42:95:d5:
                    49:85:4c:f2:e7:59:28:cd:44:03:a0:4d:fe:1a:aa:
                    f6:3a:e7:f5:60:f2:b0:44:03:6f:73:aa:7c:0e:22:
                    92:2e:fa:2f:b3:cd:24:c7:29:45:e5:26:fc:3a:58:
                    0b:4f:a7:ce:23:df:c5:1c:37:a2:b6:6b:60:fe:60:
                    0b:92:bb:ce:13:7a:a4:72:e4:7d:0e:29:08:c3:d7:
                    fc:ee:b9:c6:36:d1:05:31:b7:ea:13:3c:ff:b7:8d:
                    c1:92:9b:2f:79:77:c2:48:b6:e0:73:b9:2d:c3:16:
                    95:23:af:6c:8e:bf:af:8b:94:07:dd:e3:d5:3b:18:
                    d0:24:e9:af:6e:8a:34:cd:b7:e2:87:c5:f9:bb:39:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:18:A9:2F:24:86:A1:89:3A:D7:7E:5D:5B:EC:8B:A2:04:87:EA
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.244.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1f:30:34:f8:c6:d3:b8:37:f8:5c:21:51:a7:aa:4d:05:aa:57:
         c9:85:f6:66:04:7f:5d:a3:64:9f:44:84:c6:f2:72:71:bc:b7:
         c7:3f:60:85:4d:c4:98:df:07:dd:da:36:42:53:6f:a5:4c:85:
         4f:88:f1:f3:08:dc:ba:bd:5b:ce:05:51:c3:77:3f:62:df:93:
         1a:f5:74:05:e6:5f:fe:fe:af:70:36:8e:51:e5:fa:41:e8:f8:
         5f:76:a7:09:fa:0f:70:11:a9:87:30:ca:92:4e:0c:3c:af:96:
         2f:94:dc:4c:87:fd:3e:41:30:2b:64:29:ce:73:26:f5:86:69:
         e5:a4:60:f9:f5:88:af:e8:48:69:ab:92:fb:f9:ce:09:ad:e0:
         47:47:51:20:26:92:4f:96:74:ed:96:78:6c:6a:a4:50:e8:b7:
         1d:c8:6f:f4:80:e7:8f:3c:17:7b:a3:ab:ed:5d:e9:fd:0d:3a:
         b5:78:2c:14:38:7b:0b:e2:78:69:44:72:9a:f9:d7:2b:5c:5a:
         73:22:b7:ba:2c:90:d2:20:e3:07:f7:3c:64:03:d1:00:63:5b:
         c7:e2:11:3a:a7:38:dc:08:81:c9:ae:e3:9e:88:26:1f:07:94:
         a6:25:08:29:9a:e4:6f:95:72:70:46:a7:29:63:37:7e:00:c2:
         17:b4:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:14:16 2025 by rpki-client