Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131352e302f32342d3234203d3e20323733363339.roa
File:                     3139302e392e3131352e302f32342d3234203d3e20323733363339.roa (raw, json)
Hash identifier:          eqBr6Cm1ax/yL+Uy2XrhorwsBjltmjJiRD19QytKKwY=
Subject key identifier:   38:88:38:2E:C5:7B:81:0E:26:CB:3B:F2:D5:E6:99:88:20:78:8E:6B
Certificate issuer:       /CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
Certificate serial:       51E55CB746A3005C7377E29239F0216657FAD3DD
Authority key identifier: 85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131352e302f32342d3234203d3e20323733363339.roa
Signing time:             Thu 24 Jul 2025 17:02:09 +0000
ROA not before:           Thu 24 Jul 2025 16:57:09 +0000
ROA not after:            Thu 23 Jul 2026 17:02:09 +0000
asID:                     273639
IP address blocks:        190.9.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl
                          rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 04:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e5:5c:b7:46:a3:00:5c:73:77:e2:92:39:f0:21:66:57:fa:d3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
        Validity
            Not Before: Jul 24 16:57:09 2025 GMT
            Not After : Jul 23 17:02:09 2026 GMT
        Subject: CN=3888382EC57B810E26CB3BF2D5E6998820788E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:99:8b:de:18:5a:a3:38:51:ed:8f:7d:fc:f2:
                    fa:9e:eb:5d:3a:37:47:4e:53:7b:88:4e:6d:ca:bf:
                    27:ea:7e:0e:96:f3:ae:c2:3b:df:a2:fa:99:f2:9a:
                    dc:3f:05:d9:eb:55:a8:88:e8:5e:28:c1:3b:71:ae:
                    64:c1:f0:f8:5e:f2:a0:10:bd:46:a9:96:51:cc:2d:
                    b9:be:a4:8e:dd:54:53:d4:9a:37:6d:90:04:77:4e:
                    65:95:7c:01:9d:d5:a6:c8:88:15:81:71:06:89:49:
                    c1:07:e8:70:1f:ed:62:b8:e6:9d:82:92:70:bf:25:
                    bd:6e:ee:e5:c9:47:f1:6c:cc:f1:cd:e2:80:b0:49:
                    a2:36:09:8c:83:03:23:63:f5:40:0d:0b:5c:d5:6c:
                    8b:07:75:fe:ad:1d:3b:85:fc:01:09:fa:a1:00:b0:
                    e0:f9:0a:e8:6d:2c:4a:44:db:c6:c2:58:95:1e:e9:
                    dd:c3:32:a1:5c:12:56:d7:ed:86:0e:17:de:48:3f:
                    aa:04:86:3e:10:5b:56:74:57:2f:b8:89:ac:54:d7:
                    90:40:d4:6f:43:83:43:db:67:62:b4:0a:be:dd:cb:
                    b6:82:17:4a:4c:34:1d:77:4f:81:59:72:4a:47:85:
                    05:1c:4c:86:17:0b:53:51:db:0a:e0:21:56:7a:2c:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:88:38:2E:C5:7B:81:0E:26:CB:3B:F2:D5:E6:99:88:20:78:8E:6B
            X509v3 Authority Key Identifier:
                keyid:85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131352e302f32342d3234203d3e20323733363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:d5:55:99:a5:59:d7:2e:35:cd:99:2c:22:b9:70:ba:ec:
         79:59:07:4b:da:91:2c:fd:c4:63:8c:8c:ea:7c:cc:75:f5:36:
         26:dc:4b:28:d4:82:1c:ce:77:99:45:a3:4a:23:a1:3c:c3:45:
         5a:72:b2:93:7c:24:ce:c6:96:1a:62:96:96:7e:f4:3a:92:33:
         fd:bd:79:2c:e8:77:71:85:47:94:59:37:a8:99:8b:d7:c7:8d:
         5e:2f:fe:d1:a4:46:7a:ae:55:3c:25:51:27:bc:00:27:d6:ca:
         e2:cd:a1:b8:e8:71:cc:8f:76:3c:ad:47:18:91:32:e0:2a:59:
         f3:a6:50:cc:b7:b3:d4:bf:fe:de:76:c5:a5:a3:44:e7:45:f6:
         bc:17:7f:ed:c3:a3:38:27:d3:9c:e2:8d:3c:63:c2:e0:4b:25:
         88:66:e3:15:c5:e2:e5:b6:e5:3e:28:a5:3f:27:e7:a5:84:e7:
         39:f4:2c:c3:4d:bf:d0:70:18:7c:cf:22:5b:9f:17:ff:3a:1e:
         da:87:dc:0a:55:ef:3e:af:fa:59:bc:6f:3e:79:e2:22:c3:26:
         92:33:87:49:2a:32:36:5d:5e:4c:6d:2c:4d:2a:4f:87:02:8c:
         57:30:58:6b:79:7b:06:04:09:11:e7:fc:ce:71:20:4f:91:8e:
         64:9f:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:44 2025 by rpki-client