Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa
File:                     3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa (raw, json)
Hash identifier:          kA6u++4OqAARgjfWpMwKBXgMPoQCtK/jTO7H+0nitBQ=
Subject key identifier:   50:00:19:E2:BA:8D:31:62:65:13:1E:68:61:47:80:04:C7:77:CF:5B
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       43D88EB3649CDC4FFB9D2C680F3F6158773E6332
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa
Signing time:             Wed 09 Jul 2025 01:43:38 +0000
ROA not before:           Wed 09 Jul 2025 01:38:38 +0000
ROA not after:            Wed 08 Jul 2026 01:43:38 +0000
asID:                     270544
IP address blocks:        187.95.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d8:8e:b3:64:9c:dc:4f:fb:9d:2c:68:0f:3f:61:58:77:3e:63:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jul  9 01:38:38 2025 GMT
            Not After : Jul  8 01:43:38 2026 GMT
        Subject: CN=500019E2BA8D316265131E6861478004C777CF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:df:a0:28:ae:b8:99:f7:58:ce:84:40:8b:
                    4d:c6:23:9f:e3:1c:86:04:05:08:97:27:89:1d:f6:
                    5d:1e:37:a0:98:a9:68:19:2c:5b:b0:c4:81:40:1e:
                    c7:27:df:f5:07:59:0c:70:3b:23:48:64:bf:54:5b:
                    84:49:b3:8b:21:1a:e0:ef:70:e1:8a:50:f2:a7:12:
                    d4:48:53:04:6e:54:d1:e8:b7:a9:1c:f6:57:09:98:
                    7c:39:c7:c9:63:22:dc:4e:c2:0d:cd:e6:54:2d:13:
                    cf:b2:0b:3a:0a:df:e5:44:36:a5:b6:af:4e:fc:1a:
                    87:3f:be:9f:f9:9f:5d:29:2e:8e:0a:dd:f4:4f:5f:
                    25:c0:03:3a:ef:d3:98:40:7d:ad:1a:02:12:c4:8c:
                    dc:66:c3:86:43:b7:20:67:c7:cd:40:b7:11:e2:9d:
                    08:b9:ad:d1:6d:41:1b:7d:c8:fa:b8:b4:af:1c:60:
                    67:e6:7d:2d:88:c4:45:5a:70:73:24:67:1c:f8:01:
                    de:62:ab:18:1b:cf:b1:3a:07:29:38:67:7f:cb:40:
                    ef:b3:6e:69:8b:fd:96:73:db:f4:fe:2f:7a:fa:2f:
                    24:28:ab:c0:c0:ae:90:0c:dc:65:10:02:9b:5d:7f:
                    2e:44:df:b1:3e:05:75:e0:4a:91:6f:c7:e9:00:d4:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:00:19:E2:BA:8D:31:62:65:13:1E:68:61:47:80:04:C7:77:CF:5B
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:9b:4b:65:9f:3a:84:9d:fb:1e:8c:f9:73:c4:69:77:d7:
         64:04:d4:dd:93:3a:3e:a4:2b:a3:09:05:2f:61:39:d8:86:81:
         66:28:5c:2d:26:5f:06:b4:bb:75:bb:8b:d8:51:06:69:44:97:
         4e:ca:d4:1f:8b:32:a0:c4:5c:38:77:db:37:ce:81:9d:dc:bf:
         8a:ea:0f:dd:8a:bd:27:b1:31:ee:da:2c:bd:55:31:49:af:14:
         f7:c6:39:9d:6c:f7:79:a9:80:7f:55:83:da:b9:bd:be:07:3c:
         5b:59:f6:b1:7e:e4:9a:ad:5f:92:e0:50:36:80:6c:13:c2:b2:
         ed:2f:6a:cd:2e:0c:84:c6:2c:81:c6:16:37:d3:10:fb:3a:f1:
         29:25:47:e4:3e:73:f1:a1:5d:58:b8:d7:e1:91:dd:8f:48:58:
         54:e9:3e:b9:ca:1e:78:64:1e:be:82:a5:68:ef:55:44:c2:e4:
         00:f6:6f:4c:08:0e:06:25:58:55:85:a9:3d:dd:f8:82:bf:98:
         08:a8:d6:cd:a6:30:e5:92:ac:cc:7a:8a:18:0a:f6:72:2c:bb:
         e5:ae:a3:58:64:32:ff:b6:5e:88:6a:0d:84:d8:eb:e0:08:43:
         e3:13:55:49:73:70:cd:ba:65:bc:0c:c7:5a:d4:7a:7a:c5:77:
         95:e9:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 14:27:24 2025 by rpki-client