Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133332e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3133332e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          LeBWzeLvrLCUD7qSy9eoJ1cvDUw0fyvfQCeNtRW92Ng=
Subject key identifier:   F5:72:36:5E:DC:86:45:44:F7:E6:8D:7D:19:C7:90:62:4B:CE:2A:9A
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       45E75240AC5132061957F759CD4342E6B56E536D
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133332e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:02:20 +0000
ROA not before:           Mon 20 Oct 2025 11:57:20 +0000
ROA not after:            Mon 19 Oct 2026 12:02:20 +0000
asID:                     27715
IP address blocks:        187.1.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e7:52:40:ac:51:32:06:19:57:f7:59:cd:43:42:e6:b5:6e:53:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:57:20 2025 GMT
            Not After : Oct 19 12:02:20 2026 GMT
        Subject: CN=F572365EDC864544F7E68D7D19C790624BCE2A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:fa:5b:af:81:2a:37:72:0c:79:50:fd:42:
                    60:e3:32:d5:b6:f7:39:69:a9:a6:ef:bd:a7:11:a2:
                    0f:14:3a:8d:97:b4:5c:f5:17:87:c0:04:c2:a0:48:
                    65:a9:c6:9a:5b:7a:0a:fb:f2:be:53:ef:48:aa:a6:
                    1a:51:12:47:a5:74:a5:66:d0:71:c2:5b:73:7a:0e:
                    05:f6:76:f2:b4:91:1f:70:52:c1:f8:1b:fb:18:8f:
                    d9:b6:2a:de:36:d0:5c:e6:53:d9:fe:7b:2e:ac:78:
                    fa:87:32:f2:03:c5:68:69:40:f8:e8:8b:e4:46:d5:
                    03:59:52:e0:44:20:2e:9d:a4:0b:d3:44:38:fb:45:
                    f8:de:e1:94:c0:23:67:40:b6:e0:bd:42:b4:ed:3d:
                    fc:e7:f0:35:97:4c:3b:36:c5:29:75:65:cd:ee:e5:
                    7e:cd:db:aa:07:24:25:24:b3:25:45:0e:f8:78:96:
                    a8:77:f6:fd:d8:c9:9d:71:cd:74:85:88:97:d0:5e:
                    9f:bb:51:3a:84:e8:35:e1:44:f4:83:da:a5:e6:35:
                    25:06:f8:6c:b0:eb:75:45:2d:6b:57:e0:79:ff:aa:
                    f3:5c:c1:73:44:4b:21:61:55:72:ed:e4:10:3d:a3:
                    d1:ec:04:fa:2e:22:80:a9:4c:01:95:be:ed:54:a8:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:72:36:5E:DC:86:45:44:F7:E6:8D:7D:19:C7:90:62:4B:CE:2A:9A
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133332e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:a4:cf:a5:7b:f0:58:cd:9f:f2:c9:4f:c6:4a:45:69:4e:
         49:da:b1:2d:93:cd:36:a7:b6:06:23:ca:d3:7a:55:1e:36:8f:
         2d:d4:66:eb:07:69:9e:c6:d3:7c:57:8b:d8:0b:27:3f:99:ee:
         ad:c1:97:86:d5:a9:8e:fc:51:7a:b6:03:de:1b:0f:d1:70:02:
         21:f9:bf:07:89:31:2d:08:7b:c0:bc:51:07:f8:c0:25:40:4a:
         46:00:7c:e6:7e:16:bb:56:ab:cb:c8:71:ab:f4:96:44:06:35:
         70:59:90:92:a4:7a:95:a3:a3:f5:9f:6e:fe:96:8d:ef:15:68:
         c1:1b:6f:90:14:18:f5:d3:8d:23:ff:ee:0c:b7:dd:8c:61:b6:
         8c:be:24:1f:3c:75:1e:67:71:a5:01:25:09:dc:4f:18:49:fc:
         eb:af:6b:49:cd:22:be:b1:cc:ce:1f:e8:b9:3c:a1:56:27:36:
         d1:8d:0c:72:08:30:58:3e:f4:05:7b:96:3a:06:6c:ce:2d:75:
         08:0d:55:10:fe:68:43:ea:cf:9b:36:23:43:f7:91:dc:a5:a1:
         ad:d3:57:b6:07:c8:8d:76:6b:ce:2b:80:c7:b4:22:fe:2a:2a:
         85:04:7d:83:f7:49:a2:7c:41:2a:e6:f4:51:38:3b:b0:15:20:
         2b:01:e5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:14:03 2025 by rpki-client