Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32312d3332203d3e203532353833.roa
File:                     3139312e352e37322e302f32312d3332203d3e203532353833.roa (raw, json)
Hash identifier:          pf17SDXkIWi+sGiJpPePwrGZYTyBqoqy+3rCANByJP0=
Subject key identifier:   E2:A4:79:5D:97:CD:E8:FB:84:2F:84:3D:DA:DE:CB:65:50:52:E8:46
Certificate issuer:       /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
Certificate serial:       18B3E753E2678CAF4CDAF4C72C3D120C2BED67F3
Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32312d3332203d3e203532353833.roa
Signing time:             Mon 16 Jun 2025 14:21:11 +0000
ROA not before:           Mon 16 Jun 2025 14:16:11 +0000
ROA not after:            Mon 15 Jun 2026 14:21:11 +0000
asID:                     52583
IP address blocks:        191.5.72.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl
                          rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 08:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b3:e7:53:e2:67:8c:af:4c:da:f4:c7:2c:3d:12:0c:2b:ed:67:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
        Validity
            Not Before: Jun 16 14:16:11 2025 GMT
            Not After : Jun 15 14:21:11 2026 GMT
        Subject: CN=E2A4795D97CDE8FB842F843DDADECB655052E846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:ec:0b:ec:25:89:13:bc:7e:91:b8:5a:e6:
                    17:23:bb:2f:87:61:b9:4b:56:d4:8a:0a:38:bf:24:
                    ab:60:52:ee:6d:1b:50:d9:75:b5:3d:c6:fd:18:c9:
                    3d:3b:9e:dd:f5:53:63:7e:a3:e6:5f:67:bd:76:a0:
                    78:90:96:e5:44:b7:33:82:0f:d4:8a:77:0f:a3:20:
                    41:b8:1c:c1:3b:66:50:ae:25:5d:78:3a:d1:c4:5c:
                    1d:86:12:39:9e:cb:dc:b3:04:56:db:ba:ff:4a:66:
                    e9:9b:06:63:9d:f6:3f:68:a2:4c:2f:51:8e:e3:7b:
                    fd:b5:90:9a:f0:1e:a4:bd:25:cc:70:e9:78:30:8f:
                    95:a2:78:55:74:24:18:58:32:2e:71:c1:b4:17:60:
                    1f:27:7f:e0:56:4d:cf:69:65:1e:84:d3:df:1b:16:
                    2c:ac:f4:be:98:b6:2f:bc:d2:68:f3:eb:e6:dc:8b:
                    78:fb:09:1b:77:96:a9:9f:62:1c:ba:b3:05:b2:fc:
                    86:73:55:a4:02:d9:4d:f9:cc:4b:fc:d4:9a:c0:2a:
                    50:98:55:e0:9d:d9:58:c9:79:d1:28:a8:ef:bf:cc:
                    3a:af:3f:14:56:6c:f0:f1:dd:61:c7:fa:81:d3:73:
                    0c:3f:e6:ed:78:d7:4f:11:f9:b3:c4:1d:f1:49:38:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A4:79:5D:97:CD:E8:FB:84:2F:84:3D:DA:DE:CB:65:50:52:E8:46
            X509v3 Authority Key Identifier:
                keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32312d3332203d3e203532353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:4c:23:e2:9b:ae:57:79:d1:59:b2:b0:58:ec:c2:92:60:39:
         7c:fb:b9:c8:1a:09:5f:4c:15:7b:d7:70:48:84:8b:91:37:35:
         8a:79:0d:ea:72:5f:63:95:ec:b0:af:b6:eb:d8:f5:d7:02:89:
         03:a5:5c:46:83:04:74:55:0f:b8:af:a2:96:f2:94:d7:01:91:
         b1:78:8f:e8:6c:1b:03:6f:f2:12:fe:be:52:23:66:89:f1:1a:
         b6:6a:9c:9f:f0:70:88:a1:64:08:9b:f1:61:3d:4b:51:38:48:
         e4:9b:73:dc:1a:0f:de:37:81:e6:c2:76:84:c4:a5:0c:57:c9:
         22:26:19:25:af:a0:9e:c6:a4:88:4c:aa:5f:fd:5c:b5:08:54:
         14:4d:46:b7:fe:c6:9a:29:76:09:db:bb:66:ac:03:ce:95:bf:
         54:e0:17:37:80:58:a0:cb:2d:2a:1f:b8:05:0a:cf:a4:80:0c:
         24:d5:68:08:27:76:45:c8:19:fc:2a:fb:44:4b:f8:bb:69:75:
         0e:61:9d:2f:cd:b1:4c:35:e4:c9:a9:af:a6:10:b6:c5:40:31:
         8e:ce:a3:d0:e6:d5:86:ef:fa:84:cd:65:4e:b3:f1:b5:11:3e:
         04:93:e2:30:da:9c:ef:e3:ea:84:97:76:bb:f1:59:b3:ef:30:
         56:d9:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:17:02 2025 by rpki-client