Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa
File:                     3138372e37332e302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          VQnF+Kh3sWmg0ztSLSsgFjC3DQCyHtlvllN0B/AX3uc=
Subject key identifier:   B9:16:90:E2:BF:D1:3E:49:D9:31:47:93:E1:72:A7:37:80:33:13:D7
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       5FA1F40D96AAF7080DF56DD8FE16F33C5552961E
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:25 +0000
ROA not before:           Sat 02 Aug 2025 12:53:25 +0000
ROA not after:            Sat 01 Aug 2026 12:58:25 +0000
asID:                     28201
IP address blocks:        187.73.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a1:f4:0d:96:aa:f7:08:0d:f5:6d:d8:fe:16:f3:3c:55:52:96:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:25 2025 GMT
            Not After : Aug  1 12:58:25 2026 GMT
        Subject: CN=B91690E2BFD13E49D9314793E172A737803313D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:ee:e2:e5:e1:d9:ef:a9:06:f2:ee:87:73:
                    5c:30:97:77:81:97:19:22:62:8a:53:59:f5:0e:03:
                    14:20:b0:24:27:c9:12:37:c6:69:90:2d:68:87:89:
                    fe:bb:23:10:b1:e8:d7:95:5b:33:88:90:f6:5c:c4:
                    9c:4d:29:8c:29:ff:ea:ef:54:a8:58:b0:e1:ed:88:
                    16:61:96:eb:12:11:4a:4c:d7:17:58:6a:67:11:c2:
                    e8:e3:91:a3:d3:58:a6:7f:30:cd:95:ab:ee:e2:8d:
                    ea:b2:26:ef:fc:35:7a:65:f1:a4:8c:f2:de:55:ea:
                    b1:18:67:df:8a:d3:60:0b:f7:a7:4f:b9:22:1a:d8:
                    d7:23:bb:21:71:f3:7d:f0:a0:57:2a:7b:56:c0:04:
                    a2:43:d5:80:44:98:78:17:03:c1:46:3b:16:60:90:
                    22:cc:a8:ee:58:e5:fe:a1:04:b9:ba:36:00:15:7e:
                    cd:6c:8d:9e:49:9d:1a:2c:3b:f4:04:df:eb:9b:1e:
                    42:eb:b3:1d:5f:4a:35:9e:b2:94:00:97:7a:d7:e7:
                    46:92:50:fa:57:4e:22:83:4d:4b:94:de:ae:25:b2:
                    eb:0e:be:37:54:8b:5b:c3:23:b5:b9:52:a6:e0:89:
                    c5:3a:e8:ec:24:d8:91:57:6e:b9:cb:69:aa:98:5e:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:16:90:E2:BF:D1:3E:49:D9:31:47:93:E1:72:A7:37:80:33:13:D7
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:49:b4:fd:16:04:9b:f5:15:86:a0:b7:18:21:e8:a1:92:fe:
         c2:0e:6f:eb:94:34:d3:e8:82:7d:5b:34:05:66:a4:d5:93:b7:
         68:29:61:c0:fd:64:b6:75:38:7c:f3:c1:35:c8:7a:f1:e1:01:
         52:ba:01:2f:44:8a:de:65:0b:5b:f8:3c:fc:b7:4e:32:bc:fc:
         f4:79:65:3d:95:1b:36:3a:78:ff:14:bd:c7:57:23:89:a7:b5:
         19:eb:01:a9:08:e2:e1:d7:77:c0:71:3b:cf:bb:bc:cd:d1:1d:
         d2:97:53:2e:4e:97:07:38:d4:0b:28:90:a2:be:02:42:6b:f1:
         b8:b6:8d:2c:e2:4b:c6:b5:c5:95:15:25:f0:0d:cf:c7:18:8a:
         b6:55:83:5c:45:c5:3e:31:f7:ee:ea:56:99:f7:ad:b6:c8:45:
         90:3c:f1:5b:c0:8c:7e:9d:a9:69:4d:21:51:41:da:ea:dc:b4:
         1e:58:29:5e:ad:1c:7e:f7:e0:53:d1:79:02:5f:60:1c:aa:05:
         5c:c1:2e:e2:14:30:24:ac:af:89:ad:ae:e3:08:f1:99:ca:14:
         b4:f3:d1:e8:ad:8e:1b:64:d4:8d:0d:00:85:1a:b1:ec:fc:c9:
         91:1e:82:95:6b:3c:57:14:39:6c:60:07:95:cb:2a:4a:7d:4f:
         11:61:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:56:58 2025 by rpki-client