Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133352e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3133352e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          qjIpfOG+5hv/UQumEWPAJSg3166V2dq+19O5NyqfUlM=
Subject key identifier:   33:E3:5C:DE:6C:A9:93:82:0A:8D:3E:ED:EC:78:33:C9:71:66:B8:DF
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       7987BD684F2B4748FD56A2356DB0F5F1C9B4F4F1
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133352e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:02:45 +0000
ROA not before:           Mon 20 Oct 2025 11:57:45 +0000
ROA not after:            Mon 19 Oct 2026 12:02:45 +0000
asID:                     27715
IP address blocks:        187.1.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:87:bd:68:4f:2b:47:48:fd:56:a2:35:6d:b0:f5:f1:c9:b4:f4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:57:45 2025 GMT
            Not After : Oct 19 12:02:45 2026 GMT
        Subject: CN=33E35CDE6CA993820A8D3EEDEC7833C97166B8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:5f:7c:4b:8f:66:39:06:b9:27:2e:e0:f5:
                    7d:60:d6:8b:ba:de:be:d5:b2:97:1d:f5:4c:9d:f6:
                    46:9f:2e:0a:66:79:7d:55:ab:48:c4:de:d5:ac:fd:
                    35:27:3c:51:f7:77:de:3f:08:14:1a:19:9c:30:4a:
                    92:09:b5:bf:87:87:de:b4:c2:0d:07:94:f2:b1:21:
                    dd:96:e6:f9:7f:14:54:05:64:81:5f:a3:1c:49:58:
                    7c:5f:6d:90:86:0c:1a:97:23:de:88:08:8d:88:a7:
                    b9:be:86:01:97:97:01:99:73:86:5a:7e:de:95:bf:
                    64:41:31:74:0b:24:ee:0a:30:76:c1:e4:93:05:18:
                    95:a7:88:b2:ae:27:f9:e9:21:56:56:4f:e2:86:90:
                    b4:52:70:a9:f5:94:47:fe:e1:e0:59:bd:24:a2:47:
                    f1:ce:62:6e:c4:84:0b:0e:62:1a:33:b7:7d:d5:55:
                    d7:f8:9f:8c:69:d5:a8:7e:40:64:1d:03:9d:6e:02:
                    19:d1:8c:af:75:e8:6f:29:c8:56:6d:f7:d8:c6:d4:
                    ed:dc:da:00:cf:e4:5a:26:84:a6:50:a0:7a:bc:43:
                    92:d2:8f:ff:a3:02:39:c7:07:be:55:5c:83:21:23:
                    06:c4:2b:07:df:be:14:2b:a4:ab:ff:fb:9e:08:08:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E3:5C:DE:6C:A9:93:82:0A:8D:3E:ED:EC:78:33:C9:71:66:B8:DF
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133352e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:52:ad:16:87:cd:4f:3c:3d:85:c7:0b:d6:18:f1:26:55:bf:
         5c:5a:31:43:bc:08:9b:dc:e9:cc:35:66:2f:67:56:d8:df:8f:
         ec:71:6a:b8:74:24:c2:a6:4a:15:7c:98:fd:71:58:50:58:ea:
         21:be:da:34:75:95:ce:8d:cf:73:a5:b1:2c:e0:dd:1a:2f:df:
         64:2b:ad:42:1e:98:a2:67:21:0b:0f:ae:bb:a6:9b:f6:da:7c:
         86:a8:9a:7a:35:0e:9b:5e:26:4e:b2:59:be:00:eb:45:fe:8e:
         2f:f2:6e:cf:cf:df:56:d1:7a:b4:7c:1d:36:cc:68:a6:f9:4c:
         be:17:b0:d8:7c:f2:78:c1:c3:95:a5:1f:d7:6f:bb:26:5b:29:
         e1:ed:6a:8f:36:07:55:2b:0a:98:01:7c:4f:45:89:36:0e:e5:
         9c:70:b7:a0:1b:9b:61:d7:cf:29:71:43:da:21:4a:c2:fa:13:
         12:c6:fe:b6:21:f7:21:b3:29:8e:3a:6c:39:e8:7c:05:c9:7b:
         53:ee:db:0f:4e:1b:d5:0a:47:45:b8:46:b2:09:32:85:4b:c8:
         36:6e:f5:30:91:1a:67:3d:6a:38:fd:18:a9:02:11:f3:0e:0a:
         be:e2:72:c6:7e:84:89:e7:92:14:8b:e6:44:1f:17:db:30:97:
         72:62:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:14:06 2025 by rpki-client