Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          VBk36q4RtyQf0wCboqM73eEtzCkBwieIDmk3bgha9QI=
Subject key identifier:   0D:E5:45:32:49:3F:4E:55:BE:8C:E4:34:C5:2A:24:67:13:0F:94:6E
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       197D64AE54A273A9F2519718CCB0164C7BD1E6FD
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
Signing time:             Mon 04 Aug 2025 18:24:17 +0000
ROA not before:           Mon 04 Aug 2025 18:19:17 +0000
ROA not after:            Mon 03 Aug 2026 18:24:17 +0000
asID:                     263518
IP address blocks:        191.243.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7d:64:ae:54:a2:73:a9:f2:51:97:18:cc:b0:16:4c:7b:d1:e6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Aug  4 18:19:17 2025 GMT
            Not After : Aug  3 18:24:17 2026 GMT
        Subject: CN=0DE54532493F4E55BE8CE434C52A2467130F946E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:31:e3:7b:2b:be:4a:91:80:44:38:29:3a:
                    3a:df:d8:60:02:62:a2:5d:c6:18:07:50:e7:e3:8e:
                    3d:a8:ff:f7:0c:fa:bc:62:66:d3:7f:19:54:08:0f:
                    df:eb:04:ef:32:34:4f:30:48:85:ba:d6:4e:e7:1e:
                    f0:8b:91:a9:05:15:05:d1:4e:e1:bc:24:ac:36:65:
                    e1:44:dd:6c:8c:17:5e:91:86:04:0a:3e:a7:fc:b1:
                    d0:46:fb:28:ef:69:97:8e:c4:25:22:5c:b7:f4:96:
                    bf:60:c0:27:d0:01:b1:a4:d9:a4:74:7b:dc:ae:af:
                    c4:de:b4:3d:08:f1:f7:f4:9e:0e:2f:77:b2:bf:19:
                    b2:f3:cd:7b:37:c5:e4:e4:b2:f2:b4:13:b4:ce:66:
                    9e:62:0a:fd:b2:13:59:23:41:f4:6e:28:93:3e:e6:
                    dd:38:37:81:14:a7:40:16:91:dd:7e:78:c2:f6:ab:
                    30:77:85:86:60:51:16:6f:82:3c:9b:12:4b:00:31:
                    ff:7b:e5:c8:d1:ef:de:2e:12:b3:04:6c:8c:ae:38:
                    44:6c:78:0f:d3:5e:74:d6:89:59:f7:ff:b6:31:71:
                    ef:54:7d:2e:7f:d6:9c:74:83:74:80:cf:2c:8a:a1:
                    f8:e7:fc:17:89:34:f7:23:43:7e:f9:cb:47:a4:7e:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E5:45:32:49:3F:4E:55:BE:8C:E4:34:C5:2A:24:67:13:0F:94:6E
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:20:55:c3:83:5e:50:90:0b:39:f1:bc:a4:5e:c3:bf:eb:
         3b:bf:18:d6:0e:f6:7a:44:17:e1:ce:f9:0a:82:f0:63:6f:9c:
         cc:da:4e:13:4f:5c:91:41:0e:f5:bb:14:45:8a:33:08:5d:c3:
         4c:6e:05:c0:11:0d:a0:7a:ff:69:07:36:6c:26:22:0b:1b:7a:
         68:24:4c:8d:60:d1:41:d8:6e:b1:84:cb:2a:fc:98:1e:28:1a:
         55:d8:a7:0c:1d:bb:f4:76:57:39:ca:1e:99:7a:fb:38:c9:13:
         77:b9:da:0b:57:49:43:d9:f8:31:60:90:f0:e0:60:36:9b:bf:
         c9:6c:a4:d5:5a:2c:b4:f5:83:19:43:1b:bd:ef:ac:63:97:37:
         0c:27:f5:3a:11:ee:1b:cc:94:64:03:b0:4a:c4:ff:45:2b:fa:
         ba:74:a7:b9:af:c1:8a:dd:9d:82:09:34:15:44:7a:60:2e:50:
         36:ca:48:d3:df:d8:3f:34:41:f1:7b:39:9b:23:01:85:ad:a8:
         56:d3:bb:3d:04:b4:e8:2a:cc:3d:9f:7b:cc:8e:26:d1:29:07:
         83:5a:92:8b:91:d9:0e:44:d7:c5:7e:1a:3a:10:53:7f:f4:39:
         08:89:2b:56:df:1f:86:c6:80:54:a0:28:d5:08:1f:70:88:5c:
         77:3a:5f:ee
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGX1krlSic6nyUZcYzLAWTHvR5v0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA4MDQxODE5MTdaFw0yNjA4MDMxODI0MTdaMDMxMTAvBgNV
BAMTKDBERTU0NTMyNDkzRjRFNTVCRThDRTQzNEM1MkEyNDY3MTMwRjk0NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimTHjeyu+SpGARDgpOjrf2GAC
YqJdxhgHUOfjjj2o//cM+rxiZtN/GVQID9/rBO8yNE8wSIW61k7nHvCLkakFFQXR
TuG8JKw2ZeFE3WyMF16RhgQKPqf8sdBG+yjvaZeOxCUiXLf0lr9gwCfQAbGk2aR0
e9yur8TetD0I8ff0ng4vd7K/GbLzzXs3xeTksvK0E7TOZp5iCv2yE1kjQfRuKJM+
5t04N4EUp0AWkd1+eML2qzB3hYZgURZvgjybEksAMf975cjR794uErMEbIyuOERs
eA/TXnTWiVn3/7Yxce9UfS5/1px0g3SAzyyKofjn/BeJNPcjQ375y0ekfmpfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDeVFMkk/TlW+jOQ0xSokZxMPlG4wHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/z1zANBgkqhkiG9w0BAQsFAAOCAQEAVqkg
VcODXlCQCznxvKRew7/rO78Y1g72ekQX4c75CoLwY2+czNpOE09ckUEO9bsURYoz
CF3DTG4FwBENoHr/aQc2bCYiCxt6aCRMjWDRQdhusYTLKvyYHigaVdinDB279HZX
OcoemXr7OMkTd7naC1dJQ9n4MWCQ8OBgNpu/yWyk1VostPWDGUMbve+sY5c3DCf1
OhHuG8yUZAOwSsT/RSv6unSnua/Bit2dggk0FUR6YC5QNspI09/YPzRB8Xs5myMB
ha2oVtO7PQS06CrMPZ97zI4m0SkHg1qSi5HZDkTXxX4aOhBTf/Q5CIkrVt8fhsaA
VKAo1QgfcIhcdzpf7g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:29 2025 by rpki-client