Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33352e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e33352e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          rZkPHmTpkapkTycRlljnamRL+YnQ14pYNgU8yee9eU0=
Subject key identifier:   38:70:9C:AF:BB:94:CF:B4:1A:FE:6A:39:4F:D3:DD:F6:14:19:A8:49
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       0C22117C89C6D4AB171CEDC4BBDA31FD9B2DEEEA
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33352e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:50:26 +0000
ROA not before:           Wed 09 Jul 2025 02:45:26 +0000
ROA not after:            Wed 08 Jul 2026 02:50:26 +0000
asID:                     28140
IP address blocks:        187.49.35.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:22:11:7c:89:c6:d4:ab:17:1c:ed:c4:bb:da:31:fd:9b:2d:ee:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:45:26 2025 GMT
            Not After : Jul  8 02:50:26 2026 GMT
        Subject: CN=38709CAFBB94CFB41AFE6A394FD3DDF61419A849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:6c:4a:bd:8c:f7:24:55:d8:ee:38:64:96:
                    4f:12:6d:3b:bc:b0:23:bd:b4:70:47:ee:58:e2:67:
                    fa:34:85:00:83:3b:bd:1d:fc:a2:9d:11:af:37:fe:
                    7f:99:b4:d7:50:4f:7f:88:ef:46:cb:e2:e3:74:01:
                    39:e3:ee:83:30:31:e5:03:6f:6d:21:d9:63:c0:3f:
                    a0:5a:be:08:1e:0f:6a:22:9f:db:2b:da:7d:96:bc:
                    bd:50:21:31:41:5c:bb:fc:f4:38:24:62:9d:5f:ba:
                    90:3f:4b:6d:ab:7f:ba:17:50:5d:9d:ae:ca:ef:59:
                    dc:ff:51:59:e5:83:16:c5:61:83:bc:c3:d3:6a:40:
                    62:c9:c1:d3:5e:ef:c3:ac:eb:d0:8a:d8:cc:72:d1:
                    3b:ee:02:17:00:a3:9a:bf:a0:5e:db:e3:4e:63:e5:
                    a0:dd:dc:4d:83:23:5f:ae:03:19:b6:58:18:d9:df:
                    1d:bb:9f:9b:f6:49:2d:f4:09:97:97:70:a1:b0:1b:
                    51:06:f6:2f:02:6b:f1:69:70:9d:79:58:c3:4b:81:
                    8f:b3:1c:3c:e1:8c:4b:b1:58:28:35:11:43:de:2d:
                    b2:44:ff:3f:a7:59:8d:49:7e:0a:6b:f1:5e:84:53:
                    d2:78:e0:3b:ee:a0:54:8a:db:14:8e:b6:23:76:e0:
                    7a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:70:9C:AF:BB:94:CF:B4:1A:FE:6A:39:4F:D3:DD:F6:14:19:A8:49
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33352e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:f3:92:94:ee:84:b7:be:fa:67:a7:60:37:9b:06:67:22:
         0f:cd:dd:fe:cd:37:2e:dc:d3:de:e6:31:a7:5d:18:5b:1d:7e:
         62:04:bd:a8:97:8c:22:5b:57:fb:30:55:07:44:c5:f8:a3:b1:
         f6:32:eb:c7:08:12:c8:4c:94:53:3a:5a:0a:f6:08:97:49:57:
         96:06:c5:b5:bd:5e:9c:01:fc:99:88:1a:63:62:ef:ac:39:ca:
         a9:b7:f3:8c:99:83:18:17:1f:21:ae:d6:c5:27:a6:71:b0:da:
         1a:32:43:55:5b:f2:e5:aa:95:77:52:2f:53:74:b5:30:79:f4:
         95:70:90:9d:7a:50:1b:fa:da:09:d1:af:75:42:50:a8:e1:2e:
         5c:e6:91:84:03:db:ff:f3:98:fa:28:12:fa:f2:4f:0b:28:48:
         c1:82:37:49:9f:b0:0c:23:b1:c5:2e:3f:8c:a1:48:7e:c1:98:
         41:c0:9f:57:2d:1a:ae:e0:87:ea:e1:40:ba:c4:c9:56:90:55:
         db:1f:85:23:1e:c3:df:6e:9a:5a:75:1e:5d:b6:f7:3a:33:4a:
         a8:19:4a:14:5d:b4:a5:4c:27:ac:4c:41:61:50:ae:07:cc:b9:
         11:f3:85:6a:ed:cc:f7:6c:99:26:02:c2:54:29:cd:df:a7:cc:
         03:11:79:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:21:06 2025 by rpki-client