Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3230382e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          m4Rs6LPyR93t+nU1tnfgqaIXwJu34w7voYyDR6MP9oU=
Subject key identifier:   B8:C7:CF:FB:0C:04:C4:B7:CE:19:B5:CD:AF:0F:0D:B6:20:81:57:36
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       7A6F0E1D4FAD8AE798C04747CCEE393E840B798E
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:57:13 +0000
ROA not before:           Wed 09 Jul 2025 02:52:13 +0000
ROA not after:            Wed 08 Jul 2026 02:57:13 +0000
asID:                     28140
IP address blocks:        187.103.208.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6f:0e:1d:4f:ad:8a:e7:98:c0:47:47:cc:ee:39:3e:84:0b:79:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:52:13 2025 GMT
            Not After : Jul  8 02:57:13 2026 GMT
        Subject: CN=B8C7CFFB0C04C4B7CE19B5CDAF0F0DB620815736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:0c:3b:30:1a:40:e3:4f:07:31:41:4e:a1:
                    3e:64:68:74:58:1c:03:97:0d:32:86:cb:f6:0b:12:
                    f4:76:4b:ba:dc:c6:74:e7:c8:8f:fd:fa:83:26:2c:
                    51:1b:f8:f6:47:02:c4:8a:e3:5a:59:8b:c6:a9:0b:
                    a8:20:55:36:74:da:35:8b:8f:5c:4a:a7:2c:17:d7:
                    30:ac:ae:da:29:02:a8:dd:e0:22:50:42:10:8e:56:
                    33:da:22:ac:0e:b3:f9:d0:e3:9f:49:c8:3d:0c:1a:
                    43:f4:63:e6:fd:70:16:10:58:25:96:9f:3b:27:a0:
                    49:11:ce:7b:e4:5f:41:54:3b:ff:68:29:b3:a4:87:
                    af:65:1d:24:2b:91:dd:27:c1:df:12:e1:91:be:fa:
                    a6:d2:f1:43:0f:f9:d8:64:31:ff:5c:f5:22:7a:6a:
                    40:11:9a:0f:dc:c1:e0:98:8e:7a:a9:73:86:a2:c2:
                    27:88:57:d6:eb:82:53:7d:bb:27:15:01:3c:f0:db:
                    bc:09:3c:81:ea:7d:56:f9:d2:2e:02:46:46:63:7e:
                    d8:d5:55:99:3f:96:f2:df:f4:33:6d:21:0b:af:64:
                    44:4e:78:29:5a:e0:0f:41:66:7b:26:16:fd:a8:b2:
                    04:75:fe:7c:2e:1a:7d:77:81:09:6a:65:f0:90:2c:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C7:CF:FB:0C:04:C4:B7:CE:19:B5:CD:AF:0F:0D:B6:20:81:57:36
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:39:5c:36:97:38:fa:37:97:55:49:a0:a5:c4:15:0f:a3:
         5f:3a:9f:35:84:5e:ce:d5:e0:16:7e:13:5c:f0:79:10:2e:84:
         46:b4:93:70:48:77:ca:9a:ed:e3:45:5b:80:19:5a:49:6f:d5:
         8a:88:b0:48:ed:84:9c:fc:37:1b:ef:15:6f:db:64:90:92:f5:
         5d:55:3a:1d:78:cf:8b:ca:26:16:24:1c:cd:89:a6:2f:43:bf:
         69:e3:38:88:f8:18:94:22:57:fe:5e:90:40:11:97:22:6e:4a:
         8e:ec:9b:bf:67:a0:f0:38:f1:21:58:27:6d:a9:d5:85:42:eb:
         00:29:9c:ac:d3:73:83:09:be:5e:94:e5:52:28:66:fd:67:41:
         03:3e:61:4d:0d:d8:80:19:c1:35:9e:7b:12:3f:70:51:96:94:
         78:a5:d9:a0:3b:88:49:b6:c9:8f:de:a3:c3:4e:93:ad:b1:62:
         7e:0a:da:6e:cb:b9:c8:6d:c4:30:e3:37:ef:c1:a9:3e:6b:68:
         da:c2:80:a8:e2:8b:a6:0f:47:50:43:dd:26:1f:d4:ea:b8:54:
         84:00:0e:cd:1b:2b:dd:21:c1:78:b3:f6:0f:2d:f9:74:a2:0e:
         89:22:e2:d8:48:bf:57:ca:10:cf:5a:20:1e:8e:67:ee:40:12:
         52:9e:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:16:59 2025 by rpki-client