Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230392e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3230392e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          aywnNv0n0IadE5GyOUeTU1WMESQSwZOXCDT/W+BFrk4=
Subject key identifier:   43:DC:A9:4B:74:EE:16:14:1C:31:03:BA:9D:56:4D:4B:35:B3:DB:ED
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       5310EC735EC6EE645CE32222B915365F450FE0D2
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230392e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:54:42 +0000
ROA not before:           Wed 09 Jul 2025 02:49:42 +0000
ROA not after:            Wed 08 Jul 2026 02:54:42 +0000
asID:                     28140
IP address blocks:        187.103.209.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:10:ec:73:5e:c6:ee:64:5c:e3:22:22:b9:15:36:5f:45:0f:e0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:49:42 2025 GMT
            Not After : Jul  8 02:54:42 2026 GMT
        Subject: CN=43DCA94B74EE16141C3103BA9D564D4B35B3DBED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:f6:cf:67:96:97:4a:f3:e2:2f:b5:d8:7d:
                    37:f1:7e:6f:25:f5:c0:e3:09:f0:07:87:38:2e:63:
                    9a:8a:f7:02:ff:07:9f:2c:e3:5d:72:b1:dd:a2:7d:
                    87:0c:03:3b:7d:30:eb:eb:11:fc:b7:d5:1f:8f:ae:
                    ca:db:7b:1a:ec:b2:d3:5b:3d:e3:c0:b4:cc:b3:04:
                    7e:61:32:eb:81:0f:a7:83:a0:df:a7:62:45:57:53:
                    a6:4e:9f:51:0d:ce:c4:97:8f:f7:c0:10:95:94:63:
                    12:91:83:93:13:cf:10:8c:a2:ce:cf:df:70:50:99:
                    0d:7c:0c:cb:1d:77:38:e7:43:da:4f:0e:32:c0:c3:
                    25:49:76:a2:89:2e:ef:e9:22:be:91:57:7e:35:93:
                    34:dd:92:79:c5:d6:9c:8e:51:79:2a:4d:c2:4e:52:
                    2b:34:d7:8f:e0:a1:3e:8c:7d:f7:d5:25:4c:91:18:
                    61:20:df:0a:b8:c1:e6:bb:1c:7d:9e:d6:ad:38:45:
                    19:ec:12:96:af:09:1c:11:6d:b3:08:2f:28:8e:7d:
                    bc:87:6f:ff:f7:36:0d:de:c0:b5:dd:f5:9c:20:e6:
                    1f:23:a4:c3:d4:9f:4a:62:83:da:0c:a7:d6:7c:2f:
                    c3:24:ad:de:07:ff:ce:96:b1:67:5c:4c:73:f9:96:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DC:A9:4B:74:EE:16:14:1C:31:03:BA:9D:56:4D:4B:35:B3:DB:ED
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230392e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:37:d5:02:98:3b:2b:54:0a:e5:2d:b7:01:e3:ac:d3:d6:c9:
         dc:c5:c5:53:77:74:c3:08:94:12:17:51:3e:5c:b8:66:d8:0d:
         ce:90:6b:ac:df:73:2b:58:09:f7:ed:28:74:e9:fa:a3:4e:e3:
         fe:c3:86:9b:97:95:f5:4a:61:89:82:60:ea:17:39:08:2b:de:
         ae:a1:ac:ca:86:08:a8:0e:f9:2f:02:04:25:56:54:7c:e8:7a:
         85:11:ad:34:e5:4e:a0:cb:d8:21:49:42:82:7a:aa:5f:48:bb:
         bc:e3:07:f3:0b:5b:b6:d6:24:7f:ab:b7:6c:76:e9:d7:e1:26:
         18:7d:d4:26:61:56:fa:1b:84:fb:2c:04:6f:9b:9d:d3:e8:3a:
         25:0e:f0:e0:80:e0:ac:d1:8a:de:0b:31:fb:20:0b:b5:b3:6c:
         65:ed:5b:ac:93:c6:b6:7b:d7:29:b4:5c:79:d3:b4:7a:75:bf:
         4e:42:fe:8d:86:9c:f4:38:04:a9:3c:40:da:7e:27:c4:f6:3d:
         d3:98:dc:ef:4b:d6:69:35:74:ac:72:7e:de:9c:48:a7:36:c8:
         57:08:88:2a:f0:dc:95:8d:18:27:a9:6c:aa:c7:ed:7f:7c:49:
         7f:21:3d:36:c0:52:c0:fd:ba:c8:95:e0:72:30:e6:26:28:c7:
         85:10:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:10 2025 by rpki-client