Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133302e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3133302e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          K4VulAE9QJZYojTEsC5VHcxIjyQ+t1MmYBcQJRq4qk8=
Subject key identifier:   F8:85:85:38:F2:42:26:6D:C3:33:BC:E5:33:47:F0:4F:7C:43:FF:00
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       6C136EE74337EF67DB852A6DBF9A5F45F0FB505F
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133302e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:00:46 +0000
ROA not before:           Mon 20 Oct 2025 11:55:46 +0000
ROA not after:            Mon 19 Oct 2026 12:00:46 +0000
asID:                     27715
IP address blocks:        187.1.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:13:6e:e7:43:37:ef:67:db:85:2a:6d:bf:9a:5f:45:f0:fb:50:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:55:46 2025 GMT
            Not After : Oct 19 12:00:46 2026 GMT
        Subject: CN=F8858538F242266DC333BCE53347F04F7C43FF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:94:f5:1b:d7:7e:54:6a:59:7c:fe:49:37:c3:
                    ae:f2:e2:b1:35:66:e4:92:d5:8d:26:48:45:c2:a8:
                    7c:7a:e2:09:6e:64:2d:51:82:3f:56:9c:56:12:67:
                    64:8b:c1:45:ac:fb:58:aa:3e:3c:1e:66:aa:c0:7d:
                    43:a4:a5:0f:1c:22:6d:a5:e5:68:25:82:ce:80:b8:
                    0e:77:b1:65:75:ee:6b:9e:28:72:a0:e5:a1:eb:ea:
                    ac:c3:a2:e6:a5:cc:e8:8d:cd:5d:ec:01:1a:90:39:
                    d1:b3:cd:2a:81:4b:67:f4:71:82:16:12:8c:89:59:
                    76:49:8a:30:bf:02:8f:f8:4f:7f:b9:1d:98:53:22:
                    68:55:94:7d:f4:9a:00:1b:0d:28:70:7d:d7:32:33:
                    e9:57:9b:95:1f:e8:d1:5b:0f:f6:9f:ab:89:c7:bc:
                    eb:4e:68:26:a5:ad:26:44:5c:02:1e:8d:55:87:05:
                    95:49:5e:59:54:67:1e:0c:f3:7d:26:44:a9:3b:48:
                    2f:2d:1c:03:6e:f3:85:b3:27:66:7f:51:91:06:af:
                    88:e0:f0:ab:61:49:5a:ec:5d:d0:27:ec:41:74:32:
                    61:1f:68:77:af:7e:0d:50:88:48:eb:70:e7:46:c5:
                    cc:90:98:65:bb:0b:1b:d2:95:f3:7a:e6:1e:af:da:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:85:85:38:F2:42:26:6D:C3:33:BC:E5:33:47:F0:4F:7C:43:FF:00
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133302e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:69:7b:0a:f6:87:6a:f9:64:75:de:b4:bc:ab:a7:6e:e2:15:
         12:5e:2d:ce:04:3f:83:a5:b8:ad:0d:79:81:b2:6a:05:e0:c9:
         5e:44:9e:9b:28:31:88:e6:b1:d3:5f:2e:a1:8c:9a:6f:e0:28:
         ce:e9:25:94:f8:c5:f3:e0:37:92:28:44:eb:d7:f1:e6:85:38:
         c2:76:67:25:51:76:84:0b:24:87:ea:0b:30:83:46:9c:40:5f:
         c8:a7:e5:5d:5f:58:90:d3:49:98:70:ca:88:61:37:41:88:18:
         53:57:a9:4b:17:74:b2:e6:78:2f:d5:02:af:50:42:06:37:91:
         bd:d6:70:00:9c:8a:2c:ec:b3:0d:6b:95:4e:f4:1d:c0:11:d2:
         6f:e9:9f:41:fc:4d:11:60:82:01:04:87:e0:6a:31:2a:73:37:
         3b:b0:1c:66:cc:83:47:dd:e2:4a:cb:98:fa:b5:1e:7f:a8:ab:
         a9:91:57:e8:e4:33:df:08:af:5c:e9:ff:9f:d4:c9:a1:49:65:
         3a:bd:0b:bd:bc:81:07:a3:5f:2d:47:05:bb:b8:7f:a9:df:23:
         ae:f7:f6:f6:6d:a2:1f:6a:47:7e:95:d2:91:5d:25:11:59:ef:
         91:20:12:f8:05:3c:98:a5:4d:32:54:a4:4d:f1:d5:7e:15:37:
         97:54:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:28 2025 by rpki-client