Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3138372e3130392e34382e302f32302d3332203d3e203532393931.roa
File:                     3138372e3130392e34382e302f32302d3332203d3e203532393931.roa (raw, json)
Hash identifier:          x2NTl2iY+sBJ7rnlcmluAMcr+gqi6wf/pRn1yxGrTng=
Subject key identifier:   89:E0:B2:98:50:B0:EF:E4:13:C2:90:88:9E:45:C8:20:19:5C:C8:82
Certificate issuer:       /CN=1A38A38646592073E79DD636D868C5FD813E2EAB
Certificate serial:       602499DF9594991016E7E9772950317897539AF9
Authority key identifier: 1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3138372e3130392e34382e302f32302d3332203d3e203532393931.roa
Signing time:             Tue 21 Jul 2026 14:08:05 +0000
ROA not before:           Tue 21 Jul 2026 14:03:05 +0000
ROA not after:            Tue 20 Jul 2027 14:08:05 +0000
asID:                     52991
IP address blocks:        187.109.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl
                          rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:24:99:df:95:94:99:10:16:e7:e9:77:29:50:31:78:97:53:9a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A38A38646592073E79DD636D868C5FD813E2EAB
        Validity
            Not Before: Jul 21 14:03:05 2026 GMT
            Not After : Jul 20 14:08:05 2027 GMT
        Subject: CN=89E0B29850B0EFE413C290889E45C820195CC882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:d3:3b:0c:03:20:d2:aa:8e:a2:a7:68:6c:
                    d6:ad:2d:31:5d:6f:ad:19:dc:63:4a:cb:2f:16:45:
                    94:7d:bd:d9:37:d4:70:f8:64:4b:85:3c:67:47:81:
                    05:90:29:3c:b5:6d:e6:72:e1:28:0f:9a:36:1e:44:
                    cc:05:bf:57:b6:af:0c:bd:78:f0:a6:0c:aa:ac:cb:
                    b7:5e:e1:fc:67:f5:03:72:57:d5:46:6f:1a:fd:c6:
                    91:de:a7:60:bb:27:3f:ea:2c:e4:5e:01:78:6d:d7:
                    28:81:18:f2:ee:bc:51:1e:70:7f:0a:8f:84:c3:13:
                    bd:dc:98:64:45:aa:a5:6c:cf:cf:b1:8b:07:ed:d6:
                    f9:c5:55:6c:df:86:f8:87:27:6b:6e:42:d9:c3:0c:
                    c9:c8:03:d5:76:87:a5:76:92:aa:a5:22:52:db:7e:
                    7e:8f:46:0a:51:2d:58:38:db:6e:26:1c:2e:81:14:
                    10:9e:75:88:a2:19:b3:dc:ad:67:58:86:d7:fb:12:
                    3d:2e:ef:fd:3f:56:91:4a:51:cd:96:6e:1f:52:ba:
                    85:f2:b2:b6:bc:22:86:94:c9:84:12:9e:d9:e1:99:
                    79:c8:a8:4e:9b:56:97:19:ac:b9:c1:6c:bc:15:4d:
                    f9:47:07:4a:5c:c7:11:7f:25:e3:fc:c6:c7:e7:40:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:B2:98:50:B0:EF:E4:13:C2:90:88:9E:45:C8:20:19:5C:C8:82
            X509v3 Authority Key Identifier:
                keyid:1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3138372e3130392e34382e302f32302d3332203d3e203532393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:5c:02:38:ac:7b:d1:5d:6f:4b:7b:b8:58:f8:88:90:17:
         9f:19:f1:1b:a3:e9:2e:18:ea:d8:c5:3b:a3:0e:95:59:13:08:
         bb:f0:83:c1:23:13:69:01:dd:c6:48:d6:c0:60:81:95:10:fc:
         8a:ad:7b:41:2f:ce:4e:de:07:1e:e6:61:7f:3e:cd:e1:a0:d4:
         d9:51:9e:ac:ae:9c:41:81:a0:8e:b2:f2:27:b8:2b:f8:ab:b9:
         18:17:41:02:20:e0:27:8a:ea:e3:f6:3e:11:93:e5:a4:be:ba:
         3d:18:d5:70:73:6e:07:03:59:11:00:79:06:85:73:05:7d:a2:
         71:df:fa:a4:f4:dc:d3:93:dd:34:97:d7:49:19:d1:fe:a4:09:
         2e:2d:7d:e8:4b:0a:87:e8:70:62:0b:2e:9e:10:58:56:43:4d:
         b3:d7:39:a7:fe:48:5a:01:b8:0d:52:78:bf:fe:4b:d2:66:2d:
         bf:c4:44:ef:31:4b:a1:ed:3d:49:67:78:5a:94:cc:aa:8c:c1:
         13:a5:ba:92:49:32:57:bf:e3:11:e6:b3:15:1e:74:cd:7c:09:
         34:c9:86:30:6a:83:ce:d8:fa:bc:59:c6:e4:fb:99:7f:12:98:
         e8:4e:cf:2a:b5:8c:69:ed:7e:8a:4a:07:a9:67:d1:cf:79:06:
         80:5e:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:56 2026 by rpki-client