Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          d81ydpq7nHpaXzMxPnP1qzAt1GLx9UI3GyRmMyScf5o=
Subject key identifier:   B6:DA:A3:99:EB:73:93:87:E9:07:26:FD:F4:68:4D:BE:27:7C:F4:C9
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       56E324554F305792969306D9FD97723F16E32F31
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa
Signing time:             Mon 04 Aug 2025 18:24:19 +0000
ROA not before:           Mon 04 Aug 2025 18:19:19 +0000
ROA not after:            Mon 03 Aug 2026 18:24:19 +0000
asID:                     263518
IP address blocks:        191.243.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e3:24:55:4f:30:57:92:96:93:06:d9:fd:97:72:3f:16:e3:2f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Aug  4 18:19:19 2025 GMT
            Not After : Aug  3 18:24:19 2026 GMT
        Subject: CN=B6DAA399EB739387E90726FDF4684DBE277CF4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:3c:be:9d:ff:f9:7a:f2:2f:61:4e:f3:de:
                    ee:f9:0f:7d:04:92:b9:bf:74:49:9d:a1:a8:fb:1a:
                    fe:1e:99:33:d1:69:af:ee:bd:e9:77:34:22:83:f9:
                    4c:51:c2:95:32:d8:d2:48:0a:04:96:a0:4b:29:89:
                    cf:15:a1:cf:2e:5a:e5:7e:2b:7f:d3:36:5e:c6:30:
                    2b:dc:09:65:27:a5:17:5e:bc:f8:62:0b:7e:3d:f3:
                    7d:e8:23:47:c2:9c:59:df:34:89:20:3c:9a:a6:a7:
                    ac:4f:a4:a2:d8:80:29:0d:a9:05:e7:09:cb:d0:a0:
                    ac:fd:5c:d0:e3:4f:2e:98:af:f1:87:cf:3c:86:c5:
                    75:1d:fc:45:2a:a9:55:a0:c4:1a:81:6f:5f:30:37:
                    45:68:3e:85:72:c6:45:82:f7:2f:40:30:6d:84:68:
                    39:c8:4d:b6:98:b0:38:09:93:f0:59:b8:e7:e1:2b:
                    c9:89:fa:a2:5c:9c:2f:8e:67:cd:cc:ec:65:50:91:
                    9e:e2:e1:a7:a3:f4:6c:3b:61:a8:f8:a5:cc:0b:b2:
                    69:1f:71:88:49:05:0c:1b:91:a4:fd:3e:ca:03:1b:
                    9f:e2:85:d3:d6:41:41:f3:b9:06:3d:bd:22:40:dd:
                    a9:22:b9:47:fe:6d:da:d8:4d:5a:f9:d2:c0:ed:52:
                    ed:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DA:A3:99:EB:73:93:87:E9:07:26:FD:F4:68:4D:BE:27:7C:F4:C9
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231332e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:0f:2c:b5:d5:07:14:f7:e5:2d:8b:69:eb:e1:e4:48:a2:
         52:02:97:88:33:43:ce:0a:74:89:e3:fe:61:be:6d:47:19:2a:
         17:6d:d8:1b:1a:2e:df:91:b1:fd:75:83:66:90:47:3c:15:78:
         f0:98:78:71:eb:3b:62:31:ec:06:ab:fc:e9:9b:ca:da:61:02:
         22:fe:7f:f9:69:d1:f1:89:d5:2a:41:56:20:e7:bc:51:1b:b8:
         6c:97:d4:bb:5a:02:a3:82:19:9b:69:d1:f0:f4:49:29:0c:e2:
         da:da:54:c0:33:55:f6:2f:b7:18:b7:ce:c0:e8:fb:5b:6b:64:
         d8:63:ce:4c:e2:4f:63:aa:b0:f6:da:1b:27:bc:32:ef:93:7d:
         aa:e3:2a:dd:7d:38:ae:54:4e:bc:3f:98:0a:c5:44:dd:5e:54:
         b2:fa:45:2c:ac:3a:19:e6:24:32:96:99:6f:f6:0d:d5:34:49:
         c0:e8:04:a8:ee:d9:b7:09:4e:c6:bf:d1:3b:14:d4:0e:a5:70:
         3c:4c:cb:ab:c2:fc:fd:e6:78:ba:20:47:7d:c9:b3:b2:92:42:
         86:ce:45:3c:f0:23:bf:2d:83:71:85:69:43:03:d6:96:4a:f4:
         54:17:f4:30:04:6d:e6:64:17:5d:59:d7:8a:c8:95:53:b5:97:
         30:59:e4:ed
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVuMkVU8wV5KWkwbZ/ZdyPxbjLzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA4MDQxODE5MTlaFw0yNjA4MDMxODI0MTlaMDMxMTAvBgNV
BAMTKEI2REFBMzk5RUI3MzkzODdFOTA3MjZGREY0Njg0REJFMjc3Q0Y0QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdjy+nf/5evIvYU7z3u75D30E
krm/dEmdoaj7Gv4emTPRaa/uvel3NCKD+UxRwpUy2NJICgSWoEspic8Voc8uWuV+
K3/TNl7GMCvcCWUnpRdevPhiC349833oI0fCnFnfNIkgPJqmp6xPpKLYgCkNqQXn
CcvQoKz9XNDjTy6Yr/GHzzyGxXUd/EUqqVWgxBqBb18wN0VoPoVyxkWC9y9AMG2E
aDnITbaYsDgJk/BZuOfhK8mJ+qJcnC+OZ83M7GVQkZ7i4aej9Gw7Yaj4pcwLsmkf
cYhJBQwbkaT9PsoDG5/ihdPWQUHzuQY9vSJA3akiuUf+bdrYTVr50sDtUu0/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUttqjmetzk4fpByb99GhNvid89MkwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/z1TANBgkqhkiG9w0BAQsFAAOCAQEAWO0P
LLXVBxT35S2Laevh5EiiUgKXiDNDzgp0ieP+Yb5tRxkqF23YGxou35Gx/XWDZpBH
PBV48Jh4ces7YjHsBqv86ZvK2mECIv5/+WnR8YnVKkFWIOe8URu4bJfUu1oCo4IZ
m2nR8PRJKQzi2tpUwDNV9i+3GLfOwOj7W2tk2GPOTOJPY6qw9tobJ7wy75N9quMq
3X04rlROvD+YCsVE3V5UsvpFLKw6GeYkMpaZb/YN1TRJwOgEqO7ZtwlOxr/ROxTU
DqVwPEzLq8L8/eZ4uiBHfcmzspJChs5FPPAjvy2DcYVpQwPWlkr0VBf0MARt5mQX
XVnXisiVU7WXMFnk7Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:19 2025 by rpki-client