Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3132392e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3132392e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          360p7e4W4Q79LQP1tdOyABeJsRU0cTagUfNyq3BaTgg=
Subject key identifier:   1B:B7:E8:FE:E9:3A:75:39:38:03:4C:88:5C:F4:D2:35:91:6E:28:FA
Certificate issuer:       /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial:       32005FC5DC64EE13B049652AE594C5F1ED6F48EC
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3132392e302f32342d3234203d3e203238323338.roa
Signing time:             Fri 15 Aug 2025 22:00:59 +0000
ROA not before:           Fri 15 Aug 2025 21:55:59 +0000
ROA not after:            Fri 14 Aug 2026 22:00:59 +0000
asID:                     28238
IP address blocks:        187.0.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:5f:c5:dc:64:ee:13:b0:49:65:2a:e5:94:c5:f1:ed:6f:48:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
        Validity
            Not Before: Aug 15 21:55:59 2025 GMT
            Not After : Aug 14 22:00:59 2026 GMT
        Subject: CN=1BB7E8FEE93A753938034C885CF4D235916E28FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:2d:91:d4:c2:a5:0f:bb:0d:07:c1:52:ec:
                    f7:d6:c0:82:95:17:41:1e:a5:fd:92:b7:10:09:95:
                    70:9f:49:dc:92:4d:81:f3:88:5d:ac:07:ed:f0:df:
                    41:3b:4e:12:a5:83:39:ca:82:27:53:f2:20:4d:b0:
                    3c:a6:61:81:6b:3a:45:81:67:23:36:77:8a:e2:c0:
                    b1:c4:8b:ec:bf:09:03:12:de:f3:88:a3:64:1b:11:
                    41:6d:6e:98:f5:1e:e2:d1:d5:8b:d4:6d:11:06:e8:
                    ec:fc:94:a8:ff:f0:b0:46:08:ff:21:57:9c:c5:1c:
                    fb:fe:90:16:05:af:3b:cb:9c:ab:64:64:0e:6c:61:
                    9f:59:fd:02:e1:e5:32:c1:2c:b4:6a:80:41:3a:cc:
                    f6:7b:c0:e0:a9:7c:98:e0:46:d7:cb:01:9d:e3:a5:
                    ba:f9:67:b1:d0:96:f9:7c:10:4c:80:ac:eb:c5:6d:
                    ad:4c:72:81:57:f3:6b:be:89:6b:9d:2d:93:ee:d9:
                    ec:22:3f:5f:34:61:02:02:c6:ee:7f:5a:f4:8e:2e:
                    55:90:be:b6:8c:5d:4f:3e:c3:e0:25:e9:cb:66:b9:
                    54:b6:01:ee:26:d5:73:e6:74:c1:ad:64:b4:a1:6c:
                    ae:b0:99:e8:af:6c:39:58:50:2f:98:12:6f:1f:ee:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B7:E8:FE:E9:3A:75:39:38:03:4C:88:5C:F4:D2:35:91:6E:28:FA
            X509v3 Authority Key Identifier:
                keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3132392e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:3d:9c:24:45:f6:09:a0:b5:35:48:0e:a9:cd:4c:41:03:
         88:72:01:b5:c8:56:1b:39:46:5f:0a:78:e9:8b:df:4c:14:72:
         c1:0d:dd:56:9d:9c:10:f8:b4:30:15:5d:02:d0:24:a0:c5:1b:
         19:b1:3d:77:79:0c:1e:0a:9b:6e:5a:2c:6e:a6:01:0c:69:04:
         e6:cf:df:e8:f0:d0:cf:2b:7d:b6:cb:0f:cb:6a:c7:11:b3:90:
         4d:aa:59:a1:cc:95:8f:e8:35:d0:08:71:39:e0:af:a0:67:99:
         bb:dc:82:a5:0f:84:f7:b0:31:94:0f:a7:07:73:64:a3:00:84:
         64:c1:86:69:25:56:4e:e1:32:91:06:2e:5e:f1:85:64:4d:2e:
         30:09:c5:26:ee:55:e5:97:60:f2:21:f1:2c:ce:97:45:6f:d5:
         e4:0c:51:ed:70:c5:f7:48:a3:a1:34:44:a2:8d:4c:25:74:3f:
         61:75:20:e3:33:33:56:6f:09:9a:81:26:bc:95:6c:cf:2d:25:
         24:ef:86:6c:37:cf:66:c4:81:ab:d8:b7:6f:b1:cf:d4:60:f6:
         47:aa:31:e5:f7:ec:fb:1c:82:cc:ff:e6:07:36:cd:54:81:ee:
         16:07:b9:bf:50:3b:e9:61:9d:72:fb:15:b3:8c:fe:5a:fd:d1:
         a9:10:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:38:44 2025 by rpki-client