Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34322e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e34322e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          6rSBFo8l5u10lzSrxggSnZyaABCKQZznNYuDT8XSzXU=
Subject key identifier:   5A:E8:E5:56:CE:5D:F8:2A:C5:C3:A9:6C:88:1D:07:DD:94:9B:B9:E5
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       64E7A0A2CD11B840AD59E3D5B3642FFB2D4F7F2D
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34322e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:51:41 +0000
ROA not before:           Wed 09 Jul 2025 02:46:41 +0000
ROA not after:            Wed 08 Jul 2026 02:51:41 +0000
asID:                     28140
IP address blocks:        187.49.42.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e7:a0:a2:cd:11:b8:40:ad:59:e3:d5:b3:64:2f:fb:2d:4f:7f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:46:41 2025 GMT
            Not After : Jul  8 02:51:41 2026 GMT
        Subject: CN=5AE8E556CE5DF82AC5C3A96C881D07DD949BB9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:a3:8b:61:f6:bb:94:be:29:4a:e0:7b:95:
                    2d:8a:6d:07:77:6b:62:87:6f:21:cb:ea:08:bb:27:
                    34:a8:48:25:69:6a:4c:a3:bd:13:03:a9:3a:a6:30:
                    8f:88:36:83:64:07:77:54:f2:90:79:2e:74:aa:08:
                    ab:ec:f9:0b:13:bc:94:b0:20:e8:ee:a2:81:29:c4:
                    47:f2:dd:4f:ec:d8:fc:75:6c:d0:bb:15:06:eb:c9:
                    58:82:60:75:d4:d0:d3:ae:5a:08:7e:21:a1:25:0d:
                    98:ae:50:f0:03:56:57:62:3f:3b:b5:3e:69:44:52:
                    4a:9c:91:ee:b0:ce:d7:2f:b8:9d:39:34:3c:fa:8e:
                    80:42:dc:db:fb:b6:63:e1:f9:f2:56:18:e0:12:55:
                    d6:76:48:25:a4:62:39:60:1d:bb:db:9c:62:48:83:
                    0d:d3:4f:dc:ea:36:66:3d:af:fc:1d:90:57:f8:62:
                    b2:ce:b0:61:15:a6:58:11:7e:24:8c:0f:29:d4:e6:
                    7d:86:dc:f2:4a:9c:bb:54:00:2a:99:7d:ee:30:66:
                    db:7e:bb:c4:43:80:87:07:8f:fd:ae:20:e0:76:bd:
                    5c:47:94:30:88:38:a0:1f:1f:5c:22:f6:6e:69:81:
                    f1:30:bf:df:a0:0d:fe:cc:13:1b:90:90:65:93:c5:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E8:E5:56:CE:5D:F8:2A:C5:C3:A9:6C:88:1D:07:DD:94:9B:B9:E5
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34322e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:de:78:64:93:76:c2:78:32:37:0e:b4:41:32:0a:c7:4c:
         68:01:70:8e:6e:7a:81:ab:fd:1f:e3:d0:ea:f1:c2:aa:aa:35:
         b0:eb:ac:ba:b7:12:d0:96:19:5a:20:88:52:0c:ee:2a:6e:05:
         dc:27:99:53:8e:9a:cc:6a:4b:05:7b:ac:27:59:2e:0c:4d:46:
         53:ed:c6:e9:84:2a:64:7c:c5:09:b1:be:ac:db:8b:69:55:4e:
         59:01:b2:0b:5b:73:4a:0e:38:1a:dd:9e:da:34:af:a3:ba:f8:
         87:e4:be:d0:12:e2:59:61:88:20:52:11:3b:e9:dc:cf:28:cf:
         e2:df:a5:fb:21:44:f2:fa:5a:a6:29:53:79:c1:99:09:0c:ec:
         13:53:15:f1:6b:6a:0d:ca:d4:54:65:9c:8c:20:ef:15:b1:f5:
         5a:61:b3:7f:05:06:6f:fa:dd:07:ca:ff:47:3a:78:fa:18:b1:
         b7:b1:ca:2a:e6:0f:8e:7e:61:ef:f6:71:7e:8c:fc:46:06:27:
         77:12:e6:55:8c:76:f3:23:f1:08:10:6e:4b:32:12:17:97:db:
         3d:9c:d1:e6:b2:be:eb:b0:5b:76:68:b7:c9:0e:58:de:e8:56:
         e5:d5:fe:46:31:1e:65:77:8e:1c:d9:35:7b:69:18:fe:3a:9c:
         ef:9a:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:21:07 2025 by rpki-client