Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131322e302f32332d3233203d3e20323733363339.roa
File:                     3139302e392e3131322e302f32332d3233203d3e20323733363339.roa (raw, json)
Hash identifier:          NlDejssKshiP6MJc/8yd5rGqPTlJLYt67T63Q4B8Z8k=
Subject key identifier:   78:FB:B3:B9:DF:DF:B1:1D:62:FD:82:14:A7:E2:1E:B2:0F:3F:AD:83
Certificate issuer:       /CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
Certificate serial:       37A6955504FC8CD3D4B96011BCE11A6A367A3782
Authority key identifier: 85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131322e302f32332d3233203d3e20323733363339.roa
Signing time:             Thu 24 Jul 2025 17:02:08 +0000
ROA not before:           Thu 24 Jul 2025 16:57:08 +0000
ROA not after:            Thu 23 Jul 2026 17:02:08 +0000
asID:                     273639
IP address blocks:        190.9.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl
                          rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a6:95:55:04:fc:8c:d3:d4:b9:60:11:bc:e1:1a:6a:36:7a:37:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
        Validity
            Not Before: Jul 24 16:57:08 2025 GMT
            Not After : Jul 23 17:02:08 2026 GMT
        Subject: CN=78FBB3B9DFDFB11D62FD8214A7E21EB20F3FAD83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:f4:43:40:45:5c:16:a4:56:af:d0:9f:49:
                    3f:9c:ed:1e:34:69:32:59:8b:d3:c5:2a:10:2d:52:
                    e2:49:27:48:02:78:7a:1a:17:9c:34:bc:a1:6a:b7:
                    ce:62:87:05:74:21:8e:7b:13:b4:4c:ed:81:82:e3:
                    89:29:00:8b:de:8f:c7:77:12:60:92:2f:c1:c9:22:
                    10:55:36:57:99:a0:47:6d:3e:8e:29:42:51:f4:96:
                    10:43:46:b5:3c:bf:08:c2:33:53:d0:4c:c6:a9:e1:
                    df:1a:84:9f:7e:06:1e:71:76:49:6c:cf:9f:7c:fc:
                    24:b6:a3:39:72:9a:b8:55:d2:b7:f6:d3:0b:8d:63:
                    d4:98:c7:10:0d:11:c0:46:cf:b2:12:6e:c2:93:9e:
                    56:9c:fb:2c:6b:ac:1e:b4:86:bd:a4:86:5a:6a:7b:
                    5d:d2:3d:f3:31:ee:67:c0:bd:8f:79:e2:30:02:56:
                    95:9e:a9:df:a0:22:b0:b7:24:17:e7:1f:e0:23:80:
                    10:92:ae:00:6c:36:8d:94:ee:0f:fa:57:ec:4f:4c:
                    d0:7a:5b:91:2d:6f:1a:be:23:0a:85:23:08:68:e1:
                    f7:97:b3:a9:2e:e4:63:53:4f:4b:ee:b3:d2:e5:c2:
                    85:16:ee:f4:b4:fe:80:61:f7:01:b5:ab:22:3e:ca:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FB:B3:B9:DF:DF:B1:1D:62:FD:82:14:A7:E2:1E:B2:0F:3F:AD:83
            X509v3 Authority Key Identifier:
                keyid:85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131322e302f32332d3233203d3e20323733363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:fd:41:f4:bc:82:32:35:6f:e2:02:af:68:7c:8e:6f:cb:3a:
         44:50:9a:3d:16:28:6b:60:53:d5:e9:1f:6c:c8:b3:ca:36:60:
         c6:8f:66:0b:8d:33:12:e5:5a:7e:03:20:59:bc:63:04:66:55:
         4e:aa:e1:3b:6b:ad:55:b8:36:d3:31:81:29:fb:11:56:43:71:
         56:f8:69:aa:7a:0a:e9:26:fc:88:b6:6b:c5:bf:2d:7e:79:cb:
         51:b2:8d:ac:85:3f:11:9e:ef:2a:18:f0:f4:6f:bd:45:6b:b4:
         47:4e:cf:33:88:95:ac:bf:31:6f:5f:ea:dd:eb:77:90:3b:38:
         0b:d2:b3:60:4b:b2:52:11:38:7e:62:d2:30:8e:57:be:4a:eb:
         9d:7b:8f:ba:89:25:ca:8f:13:d9:6e:5d:0f:3b:4b:9b:8d:bb:
         ae:8f:91:e0:48:22:55:14:7b:58:fc:5e:7e:69:9b:77:30:2a:
         6c:64:64:3e:ff:ba:1c:b2:2f:19:66:c6:9e:7a:7f:4f:a6:5a:
         50:4b:de:83:fb:38:a1:d5:aa:0a:f6:1c:5d:3c:40:a0:20:f5:
         c2:ad:3b:2f:e0:45:95:d8:a1:1b:82:8c:aa:3f:50:9f:d8:8b:
         cf:c6:22:d3:7c:16:29:18:7a:a3:56:3e:d9:fc:05:9b:43:97:
         43:aa:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:13:04 2025 by rpki-client