Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3134302e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3134302e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          CrzGMNFtJwyOLyYlPmEpZJf2j/QLcqTc91xURo8cf6g=
Subject key identifier:   06:D3:4F:FE:93:AB:4F:0E:31:33:AA:62:D9:E7:2A:BF:4C:42:C3:49
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       5F530F6D83080A6F00088C54A7BD750F89D3EF9E
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3134302e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:04:22 +0000
ROA not before:           Mon 20 Oct 2025 11:59:22 +0000
ROA not after:            Mon 19 Oct 2026 12:04:22 +0000
asID:                     27715
IP address blocks:        187.1.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:53:0f:6d:83:08:0a:6f:00:08:8c:54:a7:bd:75:0f:89:d3:ef:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:59:22 2025 GMT
            Not After : Oct 19 12:04:22 2026 GMT
        Subject: CN=06D34FFE93AB4F0E3133AA62D9E72ABF4C42C349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:ae:79:f9:ee:1a:b2:84:3f:62:39:ce:25:
                    5d:09:97:3e:9d:30:68:f1:07:54:52:71:82:76:34:
                    3e:a7:12:b6:82:9f:a4:1b:bb:26:c8:64:78:5c:ef:
                    30:1a:65:72:66:cd:d7:88:4e:dd:92:cd:81:3c:bc:
                    4c:0a:a4:24:11:98:43:74:6a:fc:57:59:fc:fa:1a:
                    c2:3d:9a:ff:4c:47:5a:f8:12:53:a9:5d:57:40:97:
                    46:8d:3f:d7:7c:33:6f:f3:4e:31:15:cb:cd:29:19:
                    05:ef:2b:4d:97:09:ff:7a:58:ad:9a:0f:b5:65:0c:
                    21:60:18:83:47:ac:42:aa:f2:2a:7a:43:b1:3a:77:
                    99:88:74:ba:2a:4b:98:f2:43:03:10:c8:6a:20:f4:
                    b2:c6:0e:5c:db:55:57:6a:06:d2:97:27:e2:25:d6:
                    6c:40:8c:4c:f1:52:f9:a5:1f:63:2d:1c:a7:35:31:
                    7f:80:bb:c5:77:26:3b:e7:6f:11:8c:74:25:49:8a:
                    bf:5e:0d:9c:ef:09:4c:3a:88:e2:0e:9d:bf:8d:e9:
                    2b:61:39:c6:30:23:64:b9:7d:a1:1e:25:3a:a2:8e:
                    b8:3e:61:a9:e9:ab:cd:2f:76:c4:51:cd:37:43:03:
                    af:fd:6e:29:79:4e:19:10:12:1f:dc:87:1d:7d:3e:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D3:4F:FE:93:AB:4F:0E:31:33:AA:62:D9:E7:2A:BF:4C:42:C3:49
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3134302e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ea:02:5a:fb:6e:b1:e7:61:85:5b:97:1a:8d:b4:9b:1f:e6:
         a1:27:ed:de:2f:19:3c:9c:41:dd:0f:fa:eb:a5:d9:ef:60:d6:
         b5:58:46:da:2a:91:dc:de:cd:0c:62:3d:58:dc:2c:e6:d7:f0:
         96:31:ee:37:f7:a3:e0:e6:ac:ce:b8:df:31:78:0f:39:7c:7e:
         8b:6d:27:ff:5d:85:08:ca:b8:c8:38:26:85:e0:19:4c:7c:f7:
         f2:4d:06:05:29:e6:12:2f:1a:5c:5f:b2:d9:32:b8:f0:a0:7f:
         ca:6c:ee:9a:6e:1c:27:9d:3d:b6:7f:3e:13:b7:c8:bf:a3:9d:
         68:76:d6:19:5b:c8:d0:b6:17:72:d1:92:38:be:07:db:6c:96:
         39:23:78:ec:cf:7b:3f:f2:d2:ab:40:49:af:34:24:52:9f:1f:
         e2:97:7b:ef:cb:ee:d1:88:a0:e3:70:ee:7c:3d:27:d2:59:e2:
         dd:cf:96:79:9e:bb:d2:f2:93:bf:1f:72:96:d9:44:35:e8:ec:
         88:4a:33:35:fe:5c:55:e9:22:fb:80:57:4f:c1:34:15:eb:0e:
         db:a4:25:e1:32:22:30:28:f1:b6:35:32:df:04:31:b0:b1:d1:
         d9:81:1b:1b:39:be:76:3d:d0:46:16:76:de:45:ec:63:4d:f6:
         9f:13:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:27 2025 by rpki-client