Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3134312e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3134312e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          +2IiVdYtan4Wtw3MK85IGOUxjM2PX1a2YVzCZCHA+A0=
Subject key identifier:   8A:A9:07:B9:38:48:13:3E:B9:FB:A4:D1:3A:1A:15:F5:BC:73:65:B4
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       2DF364F6B1BFCC8EFDD8513ED64A7A064DDC6122
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3134312e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:04:36 +0000
ROA not before:           Mon 20 Oct 2025 11:59:36 +0000
ROA not after:            Mon 19 Oct 2026 12:04:36 +0000
asID:                     27715
IP address blocks:        187.1.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f3:64:f6:b1:bf:cc:8e:fd:d8:51:3e:d6:4a:7a:06:4d:dc:61:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:59:36 2025 GMT
            Not After : Oct 19 12:04:36 2026 GMT
        Subject: CN=8AA907B93848133EB9FBA4D13A1A15F5BC7365B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:d8:51:fb:9b:3e:af:33:93:2c:27:3c:1a:
                    4a:74:3a:c5:7d:bc:cd:45:0c:a5:2e:75:2f:fa:60:
                    c9:db:35:c3:2e:95:88:53:62:91:85:ae:0a:48:27:
                    44:41:34:38:36:15:98:f9:fc:d6:22:71:8c:7b:6a:
                    81:4b:7b:f7:d0:8b:96:3d:af:f1:75:75:84:21:10:
                    d0:3e:b4:78:61:bb:fb:1b:a1:3e:6f:1d:bd:84:d0:
                    88:26:9e:fe:b3:91:0c:a2:19:97:eb:a1:b3:f9:f0:
                    4c:32:ce:04:77:05:97:24:16:34:b4:4c:d2:c6:37:
                    d0:ef:5c:1c:54:2b:a3:c4:0a:7e:ba:9c:d5:c3:58:
                    b4:d4:0b:7a:dd:0c:47:f0:8e:7f:8d:e4:9c:e2:75:
                    a5:2e:51:a5:e9:c5:30:29:2b:36:42:7f:ed:b8:14:
                    bc:aa:9b:6c:09:5a:d2:86:f2:97:57:e3:c1:a2:12:
                    67:43:ca:34:05:63:6b:a2:bd:84:51:44:b1:cd:5f:
                    72:06:a8:77:70:fb:e4:c9:78:2c:5a:ff:0d:54:3d:
                    3d:ca:30:2a:82:96:94:02:c8:b9:7c:62:56:24:5b:
                    ca:b8:46:69:f3:98:eb:30:fa:61:5a:9f:25:66:11:
                    5f:20:9d:a8:01:89:0d:3e:9b:e3:38:d4:32:ff:08:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A9:07:B9:38:48:13:3E:B9:FB:A4:D1:3A:1A:15:F5:BC:73:65:B4
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3134312e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:aa:64:8b:6c:aa:e6:7a:5c:9f:b8:bc:1d:35:12:c5:14:
         7e:9e:8a:0c:e4:8e:f8:dd:09:1a:6e:a6:c2:21:2c:4a:88:7a:
         74:88:50:01:52:6f:1b:53:ce:ca:57:69:b3:8f:c5:f4:c3:a9:
         1b:2c:92:22:9f:7b:16:fc:81:67:bb:15:d8:21:aa:d3:5d:24:
         fc:6e:57:7b:3a:d4:fd:e1:ee:bd:b9:db:5c:60:0a:8a:f2:af:
         a7:69:2b:01:4b:87:74:75:02:58:7c:f0:67:b1:e5:25:f2:87:
         3b:11:a1:f2:a7:24:66:42:d9:19:b2:b4:96:7e:e7:13:25:f5:
         18:f6:47:a0:4a:52:4d:ea:e5:5c:f9:05:e3:6b:a9:5a:30:aa:
         dc:0a:fa:ab:d0:d9:6c:8e:a1:6d:89:c8:ad:d8:b0:dd:72:e7:
         07:d6:bd:cd:3a:35:a3:e6:34:1d:64:69:66:d7:bc:5e:2b:2f:
         8e:ca:80:7c:2e:39:da:a2:b0:a0:31:e4:d3:c6:85:c8:53:31:
         f6:e8:5b:cd:47:78:c7:99:f6:19:87:c8:18:ee:fe:00:3f:b8:
         8e:2e:1b:b4:2e:a0:69:79:bc:0c:42:e8:20:92:c9:dd:d5:3a:
         ec:c4:2f:01:0a:62:04:60:e4:b1:17:02:8f:92:d9:87:10:b2:
         61:72:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:14:09 2025 by rpki-client