Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133392e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          rba7zrAnDNmWApUUfFNLY+YKgUPNDXk/+AJGilNKyO0=
Subject key identifier:   6B:96:E4:44:61:EE:75:DB:DE:D8:9D:85:6B:7A:92:03:45:B4:CD:97
Certificate issuer:       /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial:       37DFA7553F627984AFC30A0ADB7B72974867F129
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
Signing time:             Fri 15 Aug 2025 22:00:54 +0000
ROA not before:           Fri 15 Aug 2025 21:55:54 +0000
ROA not after:            Fri 14 Aug 2026 22:00:54 +0000
asID:                     28238
IP address blocks:        187.0.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:df:a7:55:3f:62:79:84:af:c3:0a:0a:db:7b:72:97:48:67:f1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
        Validity
            Not Before: Aug 15 21:55:54 2025 GMT
            Not After : Aug 14 22:00:54 2026 GMT
        Subject: CN=6B96E44461EE75DBDED89D856B7A920345B4CD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:b0:eb:3b:6d:cf:37:cf:00:9c:41:9a:a1:
                    25:10:b3:b0:27:9e:f9:bb:c7:c1:12:db:05:33:fc:
                    4d:1a:be:c4:a4:f6:a7:5c:88:2b:c5:f4:e3:fb:07:
                    a2:b8:89:38:00:f0:29:5d:14:83:75:3c:6e:ac:2d:
                    36:ce:6e:03:a5:e6:12:8e:07:bb:87:5d:01:6d:be:
                    1c:c1:b0:a8:80:a8:a8:fd:11:7f:da:07:87:5c:24:
                    53:8a:67:c2:b4:17:89:51:40:c6:0a:2b:9d:d8:57:
                    aa:7f:dc:ea:92:0e:91:af:cb:9e:bc:7d:8d:82:41:
                    ac:e0:41:18:1a:72:b7:59:64:85:39:04:95:ee:cb:
                    25:d2:cc:3b:83:e2:af:d4:f9:17:b0:00:63:b9:fb:
                    2d:ba:0d:7a:c8:4c:da:07:4a:d5:09:4e:6e:1b:7c:
                    ba:5f:47:83:6a:58:85:72:5f:0f:10:5c:d3:19:8e:
                    ac:bc:cd:34:5a:a1:77:b5:e0:93:27:51:68:07:d9:
                    8a:ea:73:4d:5e:04:57:a2:da:36:a0:98:3d:7d:f4:
                    e6:b2:96:be:46:09:a0:7a:4e:58:2d:9d:c3:1b:c9:
                    cc:45:b4:94:75:d5:bf:f4:d3:03:5e:20:91:8f:f4:
                    5d:9e:58:f9:21:0b:ff:9b:cd:33:22:7e:3e:b4:c6:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:96:E4:44:61:EE:75:DB:DE:D8:9D:85:6B:7A:92:03:45:B4:CD:97
            X509v3 Authority Key Identifier:
                keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3133392e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:96:3d:88:7e:bc:36:40:40:2f:c6:c4:f7:4a:3f:39:c5:
         db:e4:aa:a6:80:44:eb:7b:22:49:41:eb:2e:0c:47:1e:11:a3:
         6a:03:91:4e:dc:dc:25:c4:99:14:0c:29:1b:3f:04:ae:fa:fe:
         f2:db:fb:af:24:4a:48:84:cb:82:33:14:da:ae:74:04:7e:7a:
         6c:f2:2b:dd:6b:49:4f:c1:84:55:fc:fc:51:b4:f9:1f:60:49:
         db:96:c9:96:30:a9:05:b5:74:b6:21:01:6a:37:b9:90:73:24:
         f8:2c:af:2d:67:3a:3d:c0:24:07:48:9e:35:23:c3:96:36:4b:
         5d:87:bd:a0:75:64:5a:78:8b:a3:17:65:9d:31:ef:25:02:f0:
         0b:d5:55:7f:a6:6a:76:47:f6:fc:b9:25:84:bb:14:45:96:b2:
         e9:07:50:49:aa:47:f3:1f:a7:c1:c8:2e:e6:9c:58:fe:e7:bb:
         fe:a8:b5:02:23:68:14:97:dd:ee:4b:a7:34:cd:d4:25:ea:2a:
         3c:5d:f3:ff:0e:18:d8:3b:66:1d:2e:0d:d9:57:27:45:60:8f:
         28:01:b4:f7:25:7c:5a:bc:57:96:96:71:87:7c:e9:cb:3d:ab:
         db:35:01:12:9f:30:00:39:21:57:45:f6:6b:a4:6e:1f:4e:3d:
         27:26:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:33 2025 by rpki-client