Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133392e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3133392e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          Fdvx5/GK3y6RRMmeu1OhQKGIiUfZMsD2ECeniEfoGWg=
Subject key identifier:   5E:B2:31:FF:64:62:1B:25:4A:BC:95:15:E9:28:70:F2:3E:97:1F:A7
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       1FBC93ADF4CDBF5133585ADF29923C3FF8A50C4D
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133392e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:03:44 +0000
ROA not before:           Mon 20 Oct 2025 11:58:44 +0000
ROA not after:            Mon 19 Oct 2026 12:03:44 +0000
asID:                     27715
IP address blocks:        187.1.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:93:ad:f4:cd:bf:51:33:58:5a:df:29:92:3c:3f:f8:a5:0c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:58:44 2025 GMT
            Not After : Oct 19 12:03:44 2026 GMT
        Subject: CN=5EB231FF64621B254ABC9515E92870F23E971FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:92:97:f5:3c:fc:ff:8b:12:81:ad:f7:76:
                    2b:e1:a3:05:44:1e:fe:2c:95:94:9c:7f:0c:69:88:
                    d8:53:cb:50:5a:0d:04:7e:55:8f:77:f4:64:0a:20:
                    78:a4:23:a7:c0:e2:5b:a4:22:2f:5d:60:b3:e2:15:
                    7b:df:25:10:90:a0:98:72:eb:89:e5:d1:30:43:87:
                    ea:8f:71:f9:b1:76:62:d7:65:82:0a:3d:c9:34:97:
                    e7:4a:82:90:02:af:c5:21:47:96:84:a5:29:49:20:
                    e5:2a:23:da:5c:e2:01:73:f3:86:6a:33:8b:a1:41:
                    da:98:83:64:91:f6:40:cf:98:92:80:3d:74:19:2a:
                    fc:a4:48:36:07:bb:a2:9e:fa:77:e2:03:dd:fe:37:
                    ca:21:40:a2:3b:4b:f7:9f:33:c5:0e:39:b3:97:37:
                    5f:64:30:6a:bc:42:22:69:95:e2:f0:68:49:38:76:
                    ef:34:92:dc:a4:fe:47:8b:00:54:d5:e0:2d:92:7d:
                    cb:da:6e:7e:83:e4:2b:16:81:58:bb:85:98:06:78:
                    71:4b:5b:95:3f:0d:a6:80:7a:5f:ab:a4:db:31:5e:
                    4a:7f:4b:6f:5b:20:0b:77:60:9c:8b:c8:08:21:58:
                    ce:67:c8:e0:af:15:91:6f:38:6b:d1:95:6b:62:ad:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B2:31:FF:64:62:1B:25:4A:BC:95:15:E9:28:70:F2:3E:97:1F:A7
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133392e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:83:43:d7:bc:3d:18:01:9f:2f:81:ed:a9:49:04:84:11:04:
         5c:6a:5d:ab:3d:b0:6b:20:14:d4:00:0a:24:4f:48:ef:49:99:
         64:0d:70:3a:04:ae:e6:0f:2b:ed:f9:ec:61:5b:43:e5:8d:b8:
         09:6f:5b:01:f7:25:56:06:f8:26:89:04:ea:f2:f4:14:93:4e:
         f3:0f:aa:a7:83:ba:e7:18:07:55:47:02:03:29:03:5a:78:b0:
         63:3d:5d:54:19:ac:58:1d:71:82:e8:ea:bd:7f:83:97:5e:13:
         38:c6:57:31:fd:fa:9a:3a:6b:7f:42:2e:bd:6e:00:04:31:9b:
         ad:ea:22:e0:90:95:4e:91:ee:8d:00:bb:63:9e:3f:e1:a8:aa:
         47:92:f4:c4:55:f9:cb:37:a7:46:bf:98:96:60:43:be:63:31:
         d9:06:d0:66:37:62:b4:fd:ef:ab:34:d5:1a:08:b7:84:13:17:
         e5:30:8f:bc:7e:35:46:7b:f4:07:d2:10:9e:85:59:60:a2:df:
         ba:38:c2:85:39:6c:ce:6d:9a:cc:7c:3f:89:e6:ce:02:96:b3:
         7f:fd:3e:56:61:7d:71:38:b1:3a:d3:b4:68:61:b4:58:fe:34:
         51:83:5a:87:9b:f8:17:d5:23:42:e8:ca:bd:f9:4e:ca:fd:48:
         b9:f2:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:31 2025 by rpki-client