Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e342e302f32342d3234203d3e20323632373733.roa
File:                     3138372e38372e342e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          H2puFedOBtReCNfypJkHkRwUNKFMy1teVLh9yWOJaWk=
Subject key identifier:   0C:6A:F6:21:2D:BF:B4:2D:A6:80:DC:D1:2C:94:7C:C6:54:44:72:0E
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       755531581F87794C811E8362BD5F82A9395AE925
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e342e302f32342d3234203d3e20323632373733.roa
Signing time:             Fri 08 Aug 2025 14:53:42 +0000
ROA not before:           Fri 08 Aug 2025 14:48:42 +0000
ROA not after:            Fri 07 Aug 2026 14:53:42 +0000
asID:                     262773
IP address blocks:        187.87.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:55:31:58:1f:87:79:4c:81:1e:83:62:bd:5f:82:a9:39:5a:e9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug  8 14:48:42 2025 GMT
            Not After : Aug  7 14:53:42 2026 GMT
        Subject: CN=0C6AF6212DBFB42DA680DCD12C947CC65444720E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:0b:25:57:d2:0f:80:e3:7f:04:77:a4:5c:
                    a8:2a:c1:db:55:71:07:8d:50:af:e1:b4:22:d6:54:
                    67:5d:87:19:9c:19:5d:73:6d:2d:f1:21:7a:1c:7c:
                    45:c8:b0:da:02:cb:3e:96:2e:54:c3:5b:1d:20:f7:
                    04:c0:3c:7b:2f:f1:70:67:a8:60:86:94:0a:9a:f4:
                    36:71:0e:e4:76:fe:54:a5:c3:cb:a4:c7:6c:3e:96:
                    73:e0:2b:dd:34:b4:2f:27:7b:39:1c:59:47:91:bd:
                    63:8a:b7:3d:29:fe:9e:14:0d:f3:43:92:a4:5a:33:
                    28:c7:b9:41:2f:ce:34:fb:5d:95:09:d6:2f:06:ca:
                    b8:3e:2a:98:5a:8d:b5:3f:13:d1:13:5b:f2:6a:b6:
                    b0:c6:33:8b:24:12:f4:44:3b:13:72:02:7a:3e:6b:
                    b4:2d:a4:c8:a6:0d:28:f6:74:91:1b:ba:28:03:ac:
                    ba:59:6a:7a:98:54:7a:49:b1:d2:5a:07:b1:12:25:
                    ca:50:3c:f2:ec:3c:9b:bf:ac:97:10:a2:7d:4f:71:
                    87:2d:06:97:fe:83:04:1c:84:6b:f9:f0:bd:81:94:
                    46:6d:7d:8d:65:cb:20:14:a9:a6:84:55:66:fb:d1:
                    60:d7:bf:7a:a1:bc:22:81:57:d3:e1:db:63:c3:e1:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6A:F6:21:2D:BF:B4:2D:A6:80:DC:D1:2C:94:7C:C6:54:44:72:0E
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e342e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:47:ce:bd:e3:90:0c:78:bb:36:f6:e8:54:dd:95:1c:a4:
         95:21:ab:e9:9b:52:db:f7:7e:9b:b7:f0:43:60:ec:88:64:78:
         dd:f9:cf:50:98:48:98:29:bc:bf:e0:bf:79:53:c2:eb:95:3d:
         12:ac:5b:25:c7:99:7b:ee:72:b0:3b:b7:72:13:56:c0:cf:bc:
         45:55:6a:1b:11:14:ad:75:3e:6f:98:9e:fe:6c:77:77:16:f5:
         b7:32:a5:87:62:51:3d:06:82:95:61:82:f2:9c:dc:ed:54:9d:
         b4:3a:28:ce:8d:c4:5d:dd:57:95:11:ae:e8:9e:e1:fc:53:1f:
         7f:bc:ca:c3:1b:82:9b:1b:a1:74:ee:de:34:f2:3d:a9:83:c0:
         ca:3b:c1:c8:d4:37:a8:61:a4:94:23:39:31:08:88:ce:97:08:
         19:85:bb:c7:16:8d:7e:59:79:e4:73:2f:4a:b3:25:4b:be:cd:
         af:3b:3b:c7:a9:cf:10:d8:66:e2:36:5a:ad:e3:15:e1:95:c6:
         83:4c:83:c1:44:04:1b:95:70:75:4b:be:1b:c1:9d:b3:ff:22:
         84:5d:84:d8:7e:8d:96:62:87:90:38:0a:27:74:a2:09:d2:d3:
         e1:6a:6a:d8:c9:c5:5f:42:dd:36:88:9e:35:4c:f6:9d:e4:0c:
         fe:bc:29:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:53:39 2025 by rpki-client