Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa
File:                     3138372e3130382e34382e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          IyfltZuhmUPjxCTVnrEPfEewfYQARCnplrAqATga+8M=
Subject key identifier:   E1:93:36:BF:FA:C1:EE:41:82:E6:10:4B:31:98:5B:5A:4E:8B:E2:2C
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       3DE749FB2F54BF0BD29A3B28833ACF042BE56DCE
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:10 +0000
ROA not before:           Sat 02 Aug 2025 12:53:10 +0000
ROA not after:            Sat 01 Aug 2026 12:58:10 +0000
asID:                     28201
IP address blocks:        187.108.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e7:49:fb:2f:54:bf:0b:d2:9a:3b:28:83:3a:cf:04:2b:e5:6d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:10 2025 GMT
            Not After : Aug  1 12:58:10 2026 GMT
        Subject: CN=E19336BFFAC1EE4182E6104B31985B5A4E8BE22C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:57:02:21:4a:ac:04:79:bb:04:a7:5c:82:
                    85:21:83:84:66:ae:5c:a1:45:7b:b4:c7:9e:dd:37:
                    d9:d2:22:60:22:cd:2c:e4:b9:9d:22:1d:c2:70:9a:
                    ac:17:74:52:d8:df:ab:2c:82:21:51:45:23:73:9f:
                    4f:8b:c6:db:bd:62:6d:91:44:af:92:95:9b:d9:88:
                    33:69:5c:0f:9d:4f:a6:f6:8a:2d:04:bf:21:29:06:
                    36:2a:54:c5:97:9c:30:04:23:65:01:58:dd:ac:fb:
                    6b:c4:92:d6:a6:77:76:70:b6:e9:37:2b:ce:1f:49:
                    e0:73:28:ca:a1:62:34:76:7c:42:f9:69:c6:8c:6e:
                    fc:39:28:79:61:5c:18:91:b5:4a:8a:cb:cd:ec:79:
                    36:fd:d5:4f:16:98:88:c1:0d:e5:bb:f7:53:66:40:
                    f1:8c:59:e2:5e:f5:1a:f5:c8:a6:06:65:e2:8f:5f:
                    88:8c:00:47:b2:72:f9:0d:6a:46:0d:ba:64:d7:a1:
                    24:e5:5a:b1:6b:1d:34:7b:eb:8e:b2:74:ea:89:84:
                    8b:61:d3:2d:02:04:f7:21:85:17:f6:c5:a5:58:fe:
                    cb:6d:ad:90:5e:f1:d6:86:14:81:48:80:83:d0:69:
                    64:ac:6d:99:11:26:a6:2d:7b:e0:81:69:bc:37:ea:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:93:36:BF:FA:C1:EE:41:82:E6:10:4B:31:98:5B:5A:4E:8B:E2:2C
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:98:d7:ef:d9:5c:2c:b7:52:e6:c1:31:8c:8c:94:21:10:a3:
         f3:05:fb:2b:b0:db:77:dc:26:c7:f6:28:e8:4a:90:90:05:79:
         ab:23:c9:f4:cf:9c:2e:73:0f:34:c1:74:72:ea:4d:13:a7:35:
         0b:d9:3c:7b:9c:6c:c5:03:27:f5:d5:e3:ba:50:c4:c1:e6:02:
         47:70:db:80:53:c4:26:dc:18:8d:49:ae:83:7f:5a:72:f7:f0:
         85:f3:fb:0f:e2:4a:e8:7a:05:7f:d4:50:5e:45:30:ac:a4:57:
         dc:8c:59:61:e6:4a:1f:dc:78:93:0c:93:99:12:49:78:c4:db:
         07:42:90:cc:ab:a3:76:b2:d1:cd:06:ae:3b:4c:82:ec:ea:e4:
         1e:ea:59:cc:f8:d0:a7:a2:5e:f2:3e:6e:0e:37:f0:97:9d:c7:
         21:54:2b:fd:5d:38:f4:51:b8:2d:38:bf:0d:7e:57:d6:b9:28:
         23:c9:49:6d:d4:5d:d3:70:22:91:26:a3:3b:34:f5:fc:ef:6e:
         d2:79:a2:26:9e:d8:78:ae:25:3b:9b:1a:b8:e7:ba:0d:bf:9d:
         d4:6d:fa:fe:48:9b:39:a0:c0:40:8d:5a:56:7b:81:bc:64:8b:
         82:d1:c1:21:9f:bc:f0:01:88:d9:3b:f6:e2:d9:f4:c4:89:b7:
         6d:4c:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:15:54 2025 by rpki-client