Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3132382e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3132382e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          yeqWx4X+iceHda9XoLGRebKVekFSriYJM1u8Y15gt3Q=
Subject key identifier:   E5:50:3B:FE:6B:B9:AE:A8:D2:F2:B3:36:6A:4A:4A:F4:71:B9:0E:1C
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       23776E6C597C8FB9B06CD8117968F18AC8A93D89
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3132382e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:59:50 +0000
ROA not before:           Mon 20 Oct 2025 11:54:50 +0000
ROA not after:            Mon 19 Oct 2026 11:59:50 +0000
asID:                     27715
IP address blocks:        187.1.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:77:6e:6c:59:7c:8f:b9:b0:6c:d8:11:79:68:f1:8a:c8:a9:3d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:54:50 2025 GMT
            Not After : Oct 19 11:59:50 2026 GMT
        Subject: CN=E5503BFE6BB9AEA8D2F2B3366A4A4AF471B90E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:e8:6f:7c:eb:03:cf:52:77:fc:8d:db:23:
                    28:e7:49:12:3d:6e:49:15:fa:3e:05:53:80:e9:31:
                    5c:01:83:91:74:19:23:5c:c8:f6:40:f7:fb:e0:42:
                    47:23:45:8c:57:05:ff:5d:b5:72:8e:70:bb:24:59:
                    d5:40:fe:25:ea:3e:81:be:66:17:3f:61:9e:2e:19:
                    7e:fb:83:6e:b7:0d:7a:0e:14:45:09:fa:b4:f2:7d:
                    25:99:24:31:02:17:54:81:e0:d5:29:9a:c6:cd:99:
                    ce:f8:e4:eb:e8:5f:cf:c7:5d:04:67:15:3c:05:42:
                    e6:48:43:a7:98:ba:a1:94:45:ce:7c:13:20:69:10:
                    1e:46:a7:ab:98:fd:d1:13:2b:5c:cf:aa:85:67:db:
                    24:08:e1:29:68:c9:70:fa:c0:7c:aa:fc:c9:a8:9f:
                    7d:c2:4f:82:71:24:a8:d5:5b:58:ab:28:9d:a5:78:
                    8a:50:ad:a4:f7:da:3d:9a:c5:58:5c:50:ea:88:50:
                    14:aa:b7:14:48:75:0e:85:6e:59:ab:ac:ad:d8:b5:
                    cb:63:cd:11:6d:d8:8f:b0:23:81:03:f7:6e:65:67:
                    c0:3a:5b:68:05:db:b2:b4:b0:73:36:35:1e:74:4e:
                    54:17:2d:0a:9d:0a:1f:fa:6f:0b:e8:66:36:80:87:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:50:3B:FE:6B:B9:AE:A8:D2:F2:B3:36:6A:4A:4A:F4:71:B9:0E:1C
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3132382e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:4c:cd:a4:f0:d8:cc:a3:0c:11:b5:c7:f2:28:1b:20:6a:
         c0:52:35:8b:44:ac:8d:b5:80:63:5c:70:ea:4e:30:33:9a:fe:
         22:fa:5e:ea:5a:50:c1:e9:1c:f6:09:67:f2:a5:65:4f:ef:2b:
         ce:89:69:8e:2e:4b:64:3a:55:ec:a5:3c:c7:de:20:34:12:5f:
         47:28:4d:17:37:df:47:4b:0f:43:5b:4d:d8:c4:94:74:c4:3e:
         d1:61:a3:91:a7:84:4e:e8:5c:0f:08:53:66:7f:2c:43:ec:a1:
         d6:7f:73:20:8b:42:7b:bb:70:c1:83:c0:2b:51:c7:d2:b3:a8:
         6d:28:3e:a2:fc:0f:4a:1c:fc:5b:97:a1:ac:d0:85:fd:1b:a0:
         80:33:fc:10:6f:c8:83:34:f6:ba:25:6d:35:db:9e:44:cf:5b:
         79:81:d5:32:b1:27:5b:28:d2:48:9a:d3:a5:1a:da:af:4d:ab:
         82:c9:dd:a9:53:85:74:68:b1:74:40:7c:b9:a4:19:1e:00:45:
         d8:5a:57:92:ee:e9:0f:ae:6f:3f:05:d3:51:24:51:54:cc:d4:
         cf:bc:8e:79:37:e7:b7:93:b1:ee:c0:e6:55:04:75:0f:17:d4:
         7b:24:7b:08:7c:c3:76:04:d0:0b:f4:ae:f4:7d:9b:dc:f1:49:
         0a:a0:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:10 2025 by rpki-client