Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          Mrczj+8CLjVn2MLV8XaKfRzsI2sPL7q5IzWydbFBU5M=
Subject key identifier:   0D:78:A2:FB:DD:12:BD:65:34:9B:19:79:0C:45:84:24:95:F5:92:15
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       22D2E470A424FF4A385247E0292010DB40DC33BD
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa
Signing time:             Mon 04 Aug 2025 18:24:22 +0000
ROA not before:           Mon 04 Aug 2025 18:19:22 +0000
ROA not after:            Mon 03 Aug 2026 18:24:22 +0000
asID:                     263518
IP address blocks:        191.243.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d2:e4:70:a4:24:ff:4a:38:52:47:e0:29:20:10:db:40:dc:33:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Aug  4 18:19:22 2025 GMT
            Not After : Aug  3 18:24:22 2026 GMT
        Subject: CN=0D78A2FBDD12BD65349B19790C45842495F59215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ba:29:df:96:c9:72:85:10:03:97:6a:76:88:
                    7e:3d:e3:61:8f:23:1c:0d:86:b4:ac:eb:02:71:8b:
                    f3:bf:01:78:82:9e:38:f3:2f:b7:5a:c2:c5:ea:3a:
                    ca:6a:b9:06:8d:2d:b3:f7:fc:33:df:2e:91:ac:eb:
                    6d:e6:fd:25:d4:62:b5:d9:d0:ff:d0:97:d7:ec:74:
                    86:9e:6a:aa:fe:70:96:1e:4c:50:7b:e7:81:69:01:
                    bf:29:9c:67:d8:db:a3:4e:8e:85:e5:44:93:11:c3:
                    4a:e7:13:11:6a:29:62:27:07:68:89:96:cd:66:09:
                    6c:ae:6c:ca:0c:0d:94:dc:81:14:d5:01:6d:1e:e2:
                    d7:95:45:98:bd:a1:c8:ce:dd:a6:6a:61:79:43:79:
                    c7:a4:e2:93:d9:a7:da:f1:e4:1b:a2:5e:3a:32:19:
                    12:a1:1c:27:13:20:d3:37:44:7b:22:aa:67:74:93:
                    7d:32:42:e9:30:37:08:75:a3:2f:51:5c:29:06:45:
                    ef:e2:11:5d:37:56:01:0b:a1:ab:89:b1:1a:fe:43:
                    d4:ac:ca:df:d0:be:82:fb:7b:a8:0e:48:93:38:c7:
                    e2:4a:bb:3e:32:12:70:d6:e0:a5:b8:bd:a1:23:71:
                    1d:ba:91:5d:1b:b8:25:d7:05:63:74:b7:c1:e2:3e:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:A2:FB:DD:12:BD:65:34:9B:19:79:0C:45:84:24:95:F5:92:15
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:08:d1:1f:81:4d:44:7e:3b:0d:a4:14:78:7d:59:fe:3b:fa:
         98:f5:6b:dd:91:91:4a:b3:74:fc:ce:b9:24:65:0b:6a:ce:d5:
         56:92:fd:c9:72:55:29:b1:ca:da:37:24:fa:5a:1b:ef:b0:ff:
         4f:ee:da:c0:43:cb:24:89:1a:fb:f7:c4:1c:72:ae:c8:45:e2:
         21:56:9f:19:08:d7:8e:e9:24:7e:a8:e0:20:16:e8:28:1c:54:
         ef:ad:67:e5:08:85:4e:30:db:76:7d:54:6c:4f:8c:99:3f:64:
         16:9f:f1:00:b4:11:6c:ce:ea:40:ca:5c:05:14:ea:11:61:9a:
         10:b2:35:7d:09:96:ff:2e:5c:f9:b5:3d:36:fc:cb:63:28:49:
         94:e3:e2:03:9f:9d:f0:32:b9:9d:66:bc:18:e1:c1:3a:74:a4:
         96:ac:6c:6e:22:73:b5:cb:d4:81:36:2c:5f:91:9b:38:d1:34:
         cc:c7:64:49:3f:ca:2b:57:80:b1:9a:aa:72:77:64:82:8a:dc:
         6c:ff:cf:03:4d:c8:23:60:b8:ca:82:f0:eb:55:a6:da:08:25:
         4f:5d:b2:a1:e1:2a:88:c9:7d:39:59:dd:df:55:bb:d5:fd:5d:
         38:33:09:d9:89:51:3f:eb:8e:90:c9:59:13:a3:5b:29:6b:46:
         5f:61:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:42 2025 by rpki-client