Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133302e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          Z3zwSaa5IIs9r97cdkBIVnv3e03PzVGFvphNvLUjjVQ=
Subject key identifier:   1E:42:84:03:E7:B2:A0:68:DE:66:A7:43:41:48:18:3E:5C:E1:F9:0F
Certificate issuer:       /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial:       7B6F98B8CEF8F8E523FFDE3BE3EC9612ADB6B60C
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
Signing time:             Fri 15 Aug 2025 22:00:54 +0000
ROA not before:           Fri 15 Aug 2025 21:55:54 +0000
ROA not after:            Fri 14 Aug 2026 22:00:54 +0000
asID:                     28238
IP address blocks:        187.0.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6f:98:b8:ce:f8:f8:e5:23:ff:de:3b:e3:ec:96:12:ad:b6:b6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
        Validity
            Not Before: Aug 15 21:55:54 2025 GMT
            Not After : Aug 14 22:00:54 2026 GMT
        Subject: CN=1E428403E7B2A068DE66A7434148183E5CE1F90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:94:96:fa:cd:bb:e5:1f:f8:f7:ed:cd:03:f4:
                    1c:88:50:37:90:ea:be:98:5a:21:b7:fc:18:9b:41:
                    54:b1:40:5b:1c:79:82:64:c3:c4:d3:87:76:fe:aa:
                    84:27:99:0c:fd:4b:c0:0c:91:50:77:59:ed:62:de:
                    3a:3e:8a:e6:e8:13:e6:cf:77:4c:b7:37:f4:64:13:
                    18:af:87:f9:76:33:9a:e1:b1:89:69:34:09:17:73:
                    6c:69:6f:1c:be:cc:b5:25:af:16:70:49:ac:ad:ec:
                    9c:23:42:b5:44:f2:df:f3:18:e8:64:c5:ba:29:f5:
                    e4:f5:43:6d:70:50:a6:9c:6c:08:c3:dc:4d:46:ce:
                    a5:f1:60:0a:7c:94:d6:ba:08:09:ac:ed:e6:0a:8b:
                    87:40:3a:e7:45:76:78:d9:7d:17:33:84:00:21:c4:
                    4a:5b:2d:cf:84:d7:bc:c1:38:17:0e:e8:bc:ee:36:
                    ee:e8:bd:a0:9e:02:3a:a8:22:1e:d7:69:b1:e1:30:
                    6e:1e:a8:98:8f:70:94:2f:3c:d1:df:d0:bc:c3:16:
                    de:35:22:49:19:6b:5b:b3:c1:04:05:77:a2:8b:ad:
                    d4:5d:cf:e8:1d:9f:47:8c:96:c8:68:50:7c:3b:cc:
                    d7:77:5a:04:ee:43:5a:7e:d5:68:74:5b:9f:9d:c5:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:42:84:03:E7:B2:A0:68:DE:66:A7:43:41:48:18:3E:5C:E1:F9:0F
            X509v3 Authority Key Identifier:
                keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133302e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:04:23:e7:f6:f6:86:68:ed:68:d1:51:c7:6d:fc:28:66:
         74:0f:53:cc:52:f7:87:1e:86:42:06:f5:c4:e0:eb:71:02:87:
         46:8f:30:33:58:6b:ff:2e:ee:dd:a6:15:a8:3e:d2:aa:09:2d:
         38:6f:bc:b2:f3:98:09:db:39:d7:75:8f:a9:0f:e5:e0:2c:8d:
         7b:d9:13:b4:4f:0c:02:a4:68:57:a0:a0:17:4b:3a:6a:71:77:
         56:30:71:b9:b6:35:c9:23:0a:66:fa:ec:65:b4:c8:01:eb:79:
         13:2d:81:ae:65:f2:6a:83:8a:ad:20:8f:1d:c2:71:e7:46:5c:
         cb:2b:81:e7:fb:6e:59:34:04:16:dc:97:a3:74:ca:08:d2:64:
         be:f0:26:a9:9c:85:ba:78:93:de:19:13:12:37:61:8c:bf:29:
         22:32:8d:a1:64:f2:9d:f7:43:11:bb:e7:11:58:57:bf:fa:28:
         e2:46:42:ee:84:84:a8:7f:30:6b:ab:b1:b7:e7:d0:8b:7c:e9:
         90:0d:79:b8:39:c2:0b:46:7f:e5:76:b8:1c:cd:c5:f2:2b:fb:
         88:39:1a:57:75:d4:88:82:ff:dd:6f:ce:21:78:f0:ec:46:cf:
         75:a0:1c:5a:74:a2:00:2a:85:fe:2b:f8:27:81:f3:58:80:0d:
         6f:fc:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:23 2025 by rpki-client