Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa
File:                     3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa (raw, json)
Hash identifier:          uOJcEelnI5JNQMf2kJriPueHxZBmTkqf0msDuc4tCxU=
Subject key identifier:   4F:35:3D:95:3E:DE:06:64:01:1F:A5:BE:03:32:EF:4C:CD:D1:19:6D
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       4916D87D7A1603849B8C59FA3508FD33C8BCB698
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa
Signing time:             Wed 09 Jul 2025 01:43:34 +0000
ROA not before:           Wed 09 Jul 2025 01:38:34 +0000
ROA not after:            Wed 08 Jul 2026 01:43:34 +0000
asID:                     270544
IP address blocks:        187.95.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:16:d8:7d:7a:16:03:84:9b:8c:59:fa:35:08:fd:33:c8:bc:b6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jul  9 01:38:34 2025 GMT
            Not After : Jul  8 01:43:34 2026 GMT
        Subject: CN=4F353D953EDE0664011FA5BE0332EF4CCDD1196D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:ac:69:e4:a5:a8:81:66:31:cb:05:5b:10:
                    b1:66:1e:94:19:aa:4e:21:81:14:ab:5a:0c:ef:c4:
                    30:71:7d:5f:6c:54:20:7d:0c:87:12:41:2e:9d:84:
                    86:67:f3:6e:57:8b:81:c6:a6:d3:7b:65:7f:36:a0:
                    fc:f1:17:fd:15:d9:3e:46:ce:f7:d7:8d:a9:50:f4:
                    a7:71:74:14:c1:ba:81:c5:b5:af:86:18:51:3d:c0:
                    27:69:17:cc:52:dc:9b:87:b9:86:0c:da:76:c3:31:
                    f9:20:29:8c:eb:a8:2a:3c:54:3b:32:94:8c:cd:16:
                    5e:09:3c:b4:69:fb:dd:5b:fc:bf:07:00:08:d3:5c:
                    84:ab:b5:23:c4:3d:50:82:9c:9e:5f:77:19:3a:db:
                    4b:41:15:37:a4:6a:11:5b:ba:f8:ad:03:57:c0:80:
                    06:5c:4a:a7:cf:16:7a:19:ce:2e:3f:4f:45:51:90:
                    3a:d5:e0:a6:40:09:f8:fd:9d:44:e5:74:99:1d:62:
                    ad:83:86:ab:2e:62:52:98:97:ff:40:94:06:b8:d1:
                    00:c8:63:f2:de:48:5b:9c:e7:02:88:e0:1b:f1:81:
                    aa:f9:fd:97:62:f3:e5:de:bf:9d:a4:fd:06:48:bd:
                    60:a2:a2:24:0f:4a:1d:e0:2b:8a:22:55:c7:e2:b5:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:35:3D:95:3E:DE:06:64:01:1F:A5:BE:03:32:EF:4C:CD:D1:19:6D
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:ee:ea:b3:12:ea:0d:dd:5c:a0:c2:9d:4b:f2:1f:b2:34:e2:
         0b:ed:d1:e0:f8:2a:28:94:26:52:cc:ff:6e:0c:78:25:0d:71:
         f9:72:fc:d9:01:ec:91:5b:00:4b:e2:84:fc:f3:25:7f:aa:c8:
         e8:cf:25:4a:1f:1d:f8:69:82:af:3e:fd:09:95:0d:fb:bc:ba:
         32:06:12:f1:50:76:c3:49:19:07:3e:9c:95:f8:70:2c:fb:21:
         f9:74:37:1c:ce:60:0c:0b:6d:36:37:32:2b:77:60:82:e5:2b:
         ad:77:7a:8a:17:56:1d:6b:80:b2:a0:97:f8:d4:73:21:14:6b:
         8e:cc:9e:5c:99:93:19:ea:6f:b8:85:73:95:d1:8d:61:84:4d:
         79:41:35:8f:7e:5a:2e:f0:2b:ba:96:b4:f7:92:93:c4:f5:64:
         a9:ed:ae:90:16:74:88:86:51:79:4e:9f:06:df:c0:03:5c:f8:
         9a:11:a3:ea:ad:e2:92:28:a8:1d:d1:4f:1a:09:3e:bb:1d:e8:
         3a:cc:95:ea:8b:4b:45:ed:3c:63:5a:36:c1:d6:5f:95:ad:22:
         16:f4:25:63:7f:96:ae:aa:56:f4:b2:aa:c3:db:7c:ec:3a:06:
         22:4b:5b:cb:04:20:98:47:27:e6:58:28:4c:8a:b6:61:14:ff:
         84:d5:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 14:18:30 2025 by rpki-client