Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa
File:                     3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa (raw, json)
Hash identifier:          Gb3Zex4UtTBi0O5UiXvQrg40QJCwmqqTvyGxl3mn7iM=
Subject key identifier:   F2:78:84:9F:3B:98:9B:FD:84:09:9B:62:1A:8C:7F:53:E5:BB:0A:71
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       10AB0C95B6DFD91A3F0297723DB498CD0A130A59
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa
Signing time:             Wed 09 Jul 2025 01:43:37 +0000
ROA not before:           Wed 09 Jul 2025 01:38:37 +0000
ROA not after:            Wed 08 Jul 2026 01:43:37 +0000
asID:                     270544
IP address blocks:        187.95.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ab:0c:95:b6:df:d9:1a:3f:02:97:72:3d:b4:98:cd:0a:13:0a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jul  9 01:38:37 2025 GMT
            Not After : Jul  8 01:43:37 2026 GMT
        Subject: CN=F278849F3B989BFD84099B621A8C7F53E5BB0A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:35:d8:ef:72:cf:14:5f:b1:2e:1c:95:3d:
                    61:7a:74:ae:f7:bb:1f:0b:a1:61:36:56:db:5b:a9:
                    1c:a3:69:84:8c:89:b4:45:0b:c7:cc:57:48:3f:46:
                    5c:6e:7a:34:42:d0:22:6b:08:84:5d:65:9b:01:ac:
                    83:be:66:77:98:0d:fb:b3:d6:c1:2e:08:1a:d2:97:
                    2c:ec:dd:d6:b4:05:3d:f9:36:9f:33:26:dc:ae:1b:
                    91:6c:ec:07:cf:c7:4f:e0:9a:29:fd:65:15:12:7f:
                    8f:1b:d4:ed:09:f5:de:4b:42:f6:51:f0:30:57:e8:
                    18:b9:31:9c:34:7a:3d:90:c4:16:4f:e2:26:77:ff:
                    08:49:6c:c5:0b:7f:ce:b0:59:cb:9d:45:1b:1d:68:
                    d6:c4:c1:3c:64:ba:d9:21:25:e2:40:15:ef:ce:f4:
                    5d:2a:f1:d8:00:e2:cb:0a:48:70:b8:26:29:43:70:
                    7e:6d:e3:b3:ff:57:34:b5:cf:b6:25:03:f1:95:5d:
                    b4:67:b5:09:f6:4a:63:eb:e4:3d:cc:ee:1f:db:7c:
                    24:b3:d4:1b:ce:ce:1d:16:79:bb:5c:bb:d7:ae:08:
                    ad:98:a5:d3:7d:05:ca:8b:23:0f:6b:e4:0f:64:4a:
                    3b:82:f5:10:8b:66:43:9d:a1:fd:07:17:40:73:bc:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:84:9F:3B:98:9B:FD:84:09:9B:62:1A:8C:7F:53:E5:BB:0A:71
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:8b:8c:04:61:e4:6a:98:1f:14:27:48:89:7c:c9:a2:4a:
         f7:e3:f1:f3:96:12:40:bc:54:44:2c:9e:b8:fc:ab:49:bc:53:
         91:e3:7c:0a:b2:71:bf:e9:40:d0:7a:0c:a8:9c:e8:96:31:7b:
         68:91:bd:cb:6d:f6:7b:29:bb:cd:e5:a5:8f:e9:97:27:5a:9e:
         bf:f0:44:fd:46:28:50:ba:0c:c0:cd:88:db:2a:b3:d5:24:f5:
         a2:a9:40:3e:44:57:f9:5f:c7:1d:48:cb:29:df:21:61:98:8c:
         7c:02:81:5e:a2:91:62:a2:76:bf:79:e3:c2:24:2f:e7:06:a9:
         3e:f5:e8:c6:a1:5e:c0:b4:1b:b2:cb:c3:0f:80:1f:05:79:97:
         99:f2:16:44:69:b2:7e:14:dc:3c:bd:c7:f0:50:2f:74:8a:3f:
         66:d3:a7:84:fc:c5:be:73:9c:ff:f7:7b:c6:71:c0:8a:24:e4:
         a2:c4:70:27:fa:22:0e:49:58:92:2e:f3:2f:4c:f2:aa:24:ab:
         45:c0:9c:a9:ea:18:8f:f0:87:eb:e2:f4:0d:76:b3:74:67:e7:
         d4:fd:df:28:b9:4f:1a:78:5b:32:cd:f2:47:82:c0:91:12:85:
         0d:f6:a0:a9:b4:50:5f:bf:4b:5b:e4:43:45:d3:2c:54:c4:69:
         d4:a3:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 14:13:55 2025 by rpki-client