Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3134332e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3134332e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          PUWdZqdMfZsOedglFnc1clUqrSLcZJhzBVpouosfG9M=
Subject key identifier:   BF:39:D0:FC:2E:2F:2D:A7:62:E5:6A:29:B0:1E:81:ED:47:25:56:04
Certificate issuer:       /CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
Certificate serial:       2E5A384A72AEC2D1D7ECC61B69B5936C85CB9BA5
Authority key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3134332e302f32342d3234203d3e203238323338.roa
Signing time:             Fri 15 Aug 2025 22:00:56 +0000
ROA not before:           Fri 15 Aug 2025 21:55:56 +0000
ROA not after:            Fri 14 Aug 2026 22:00:56 +0000
asID:                     28238
IP address blocks:        187.0.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5a:38:4a:72:ae:c2:d1:d7:ec:c6:1b:69:b5:93:6c:85:cb:9b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C
        Validity
            Not Before: Aug 15 21:55:56 2025 GMT
            Not After : Aug 14 22:00:56 2026 GMT
        Subject: CN=BF39D0FC2E2F2DA762E56A29B01E81ED47255604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:55:fd:4e:4b:2b:a5:c9:55:1b:f1:4b:57:
                    c1:0f:e9:e6:3a:76:67:2d:35:cd:e6:19:c0:0d:d4:
                    3c:7c:c8:fa:5a:cc:87:e6:85:3c:ec:d5:a1:8c:63:
                    01:0d:3a:c0:10:44:f3:0e:ee:47:d2:98:c3:da:52:
                    5b:38:08:7c:1b:64:88:ee:af:a6:9e:70:ad:a9:b4:
                    98:cf:7a:03:64:db:84:db:69:07:90:01:dd:b1:e6:
                    db:85:b6:e8:7c:ba:20:b7:1f:5d:b7:32:37:73:2d:
                    6d:07:53:d1:ff:00:0a:7a:f4:c3:49:cf:a4:c4:4e:
                    df:db:64:75:e2:4e:3f:37:c0:0f:d9:51:f8:d5:0b:
                    82:68:08:e4:6c:f1:6c:c2:6e:13:09:27:c0:9f:91:
                    62:e8:97:d1:3e:0f:fe:38:5b:64:ce:75:86:10:9d:
                    5d:0e:e8:67:52:8d:1d:2c:7a:a4:3d:c2:38:cf:d4:
                    c7:34:c1:2d:8f:31:ca:71:d0:1c:f7:c5:7a:d2:f5:
                    38:82:6f:36:55:85:36:a0:86:73:18:5a:9c:87:1d:
                    fa:c3:2b:71:f0:88:7e:c8:c0:6c:3c:54:7b:70:52:
                    0d:bd:a6:fc:73:d8:41:af:b3:3f:d6:94:cf:ed:73:
                    35:c9:96:83:9b:cc:73:bf:2b:14:c7:0a:51:a1:2c:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:39:D0:FC:2E:2F:2D:A7:62:E5:6A:29:B0:1E:81:ED:47:25:56:04
            X509v3 Authority Key Identifier:
                keyid:AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/3138372e302e3134332e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:2d:44:98:c6:c8:04:85:47:f2:49:16:65:72:0d:a6:a2:a6:
         94:9a:52:1b:fc:d2:81:b4:3d:36:18:f5:b8:1b:34:38:89:4f:
         46:f8:1e:b6:46:f1:26:f0:4b:9a:e5:dc:5f:ab:74:87:0e:f7:
         55:26:d9:11:10:eb:c0:28:30:d3:3f:6f:6d:14:b7:c4:ec:a0:
         9e:e8:5e:2c:d2:85:de:d6:f8:25:27:e4:77:d2:48:e1:b3:2c:
         08:61:71:4c:3b:c9:37:70:41:fd:55:84:40:54:d8:80:df:bf:
         3d:4c:74:87:1e:53:e2:66:63:d6:36:fd:0f:2f:a3:52:af:96:
         b2:03:a3:76:eb:5e:ac:b3:31:40:6f:03:f5:ff:91:f7:e0:8d:
         94:13:6c:c5:cc:bb:69:87:62:99:30:9b:57:69:c9:b2:b8:be:
         6d:a9:dc:ab:9f:0d:4d:82:e3:29:b5:45:9f:f1:52:d9:27:f0:
         61:23:75:f2:56:64:92:5b:6c:8a:c0:6d:96:39:e6:90:59:f1:
         53:77:72:ec:25:b8:87:5f:93:fe:8d:d9:13:b7:75:d1:de:b3:
         03:bc:d7:2f:fb:77:bb:c8:c2:47:c8:27:9b:49:fb:3f:b9:29:
         80:e0:4b:ad:d9:11:03:51:77:27:10:01:73:89:f8:a4:a7:fd:
         ef:42:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:21 2025 by rpki-client