Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133382e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3133382e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          l87BBbc45sWwntiDcV0lrPdH6K1pJWme3GhP2mdRPkI=
Subject key identifier:   26:65:1A:4E:15:55:A8:60:C5:FD:1D:95:AE:FA:6F:83:FB:A6:24:C4
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       739AD4344DD09C8C076351D3C76D3FAB9775C4B2
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133382e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:03:29 +0000
ROA not before:           Mon 20 Oct 2025 11:58:29 +0000
ROA not after:            Mon 19 Oct 2026 12:03:29 +0000
asID:                     27715
IP address blocks:        187.1.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9a:d4:34:4d:d0:9c:8c:07:63:51:d3:c7:6d:3f:ab:97:75:c4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:58:29 2025 GMT
            Not After : Oct 19 12:03:29 2026 GMT
        Subject: CN=26651A4E1555A860C5FD1D95AEFA6F83FBA624C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:53:db:0d:87:54:61:6e:5b:ff:da:2d:7d:83:
                    b8:d9:b6:3d:c3:ef:7d:37:34:3d:27:27:d9:a2:88:
                    0b:92:2b:a2:5d:e5:a0:3d:73:36:6e:f7:49:a2:bb:
                    4e:34:1b:74:49:7e:4a:b7:e5:8e:a0:10:db:51:9c:
                    c5:2c:0f:ed:1c:21:bf:b7:04:4c:62:ef:27:c4:ce:
                    0b:6a:22:f4:2d:03:e0:bc:c4:77:9b:42:c2:b6:cb:
                    df:41:a5:64:2d:d0:b3:aa:76:05:65:3b:cb:8b:6e:
                    3d:af:f7:5f:c6:c3:c9:e7:59:9e:71:0a:26:a7:01:
                    c7:17:e7:e8:31:8f:31:c9:c2:4e:8a:ee:9f:21:c7:
                    2c:4e:cf:90:b0:f4:fc:98:07:b4:04:19:94:a6:45:
                    ad:e8:14:a5:d9:b9:1a:18:e6:08:16:64:b9:14:61:
                    84:2d:c1:b1:45:61:e7:0f:64:fc:bc:70:25:f4:f6:
                    84:25:5a:c9:be:b4:0b:27:b5:29:fa:4e:3c:97:7e:
                    94:de:04:ec:25:21:12:0e:fe:f4:55:d7:1a:50:c1:
                    20:ae:d6:b9:35:06:94:d1:9e:aa:b0:3d:8f:f7:40:
                    3e:79:fe:3c:18:57:12:9c:9a:28:2e:ce:c3:5e:74:
                    e3:1f:49:dc:97:51:75:80:97:f9:2f:76:ef:36:b1:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:65:1A:4E:15:55:A8:60:C5:FD:1D:95:AE:FA:6F:83:FB:A6:24:C4
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133382e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:6f:d5:0a:ff:dd:af:2f:d8:73:6c:18:b3:f4:aa:eb:2e:
         64:2c:dd:8a:dc:22:d6:bd:69:31:51:e2:86:95:5a:4c:fb:b4:
         08:09:64:19:eb:d9:1d:c8:55:b8:14:e5:d2:3c:13:17:8c:26:
         05:90:01:84:c3:1e:de:2b:ef:02:88:82:0f:4f:81:c9:fc:3a:
         bf:6b:55:c4:08:4c:73:16:bf:73:60:24:1c:48:07:ef:45:54:
         77:8b:56:af:85:23:ee:83:1a:cb:ba:bb:50:83:19:3d:77:9e:
         df:6b:01:1d:7c:3b:37:b0:2b:4d:2b:ea:d0:ac:2d:b8:0d:f6:
         04:9c:c9:19:a9:47:2b:be:2e:a7:5e:21:53:0c:17:e0:69:f3:
         5a:0d:6b:6d:1d:7c:45:50:4a:2f:ca:ca:01:aa:3c:cd:2d:c8:
         96:5b:a7:c9:43:0e:95:cc:6a:a0:9c:26:ec:2f:43:96:54:d2:
         0b:f6:01:87:2e:50:c6:1d:cf:fa:22:18:bb:bf:28:c2:5f:af:
         5e:83:29:0a:a5:27:31:d6:9f:9e:37:66:f4:8e:d5:19:17:99:
         71:63:85:8d:e3:e6:42:a5:48:9c:b7:6c:e7:72:78:82:fe:83:
         a4:9f:5b:a6:1c:2e:11:53:65:87:15:53:3d:90:ae:70:c1:0d:
         6d:08:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:29 2025 by rpki-client