Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231302e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3231302e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          U1a0HARLn+Xfz5a/SLvZsxFHjfKeskOzccqbT/aj+0U=
Subject key identifier:   34:68:30:C5:0F:F8:A7:C7:FB:AB:E7:4C:77:1F:38:F2:BF:7F:2E:C4
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       3D9C793552C2A7162D1F77E689F9A5E965C336FE
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231302e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:55:02 +0000
ROA not before:           Wed 09 Jul 2025 02:50:02 +0000
ROA not after:            Wed 08 Jul 2026 02:55:02 +0000
asID:                     28140
IP address blocks:        187.103.210.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9c:79:35:52:c2:a7:16:2d:1f:77:e6:89:f9:a5:e9:65:c3:36:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:50:02 2025 GMT
            Not After : Jul  8 02:55:02 2026 GMT
        Subject: CN=346830C50FF8A7C7FBABE74C771F38F2BF7F2EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:ef:08:56:b2:0e:ad:d7:20:5a:07:c4:ab:
                    7a:5a:48:55:96:02:90:f5:32:fa:ff:d9:cc:26:8f:
                    25:0c:3d:7d:d9:7b:0b:ff:25:55:1d:78:ee:83:4a:
                    4a:61:5b:78:f1:ab:4f:62:01:a5:a6:44:1a:6f:ba:
                    02:b7:14:a5:5b:e7:ec:66:0f:6f:17:66:fd:aa:da:
                    40:d5:64:57:76:67:39:b1:a2:79:9c:14:07:5d:25:
                    ea:ee:7c:c1:93:59:a1:09:19:62:e3:bc:54:0f:da:
                    95:e1:ed:96:0f:54:8b:7b:7c:83:6f:27:52:f1:e5:
                    a7:8a:ed:96:9f:05:1f:cc:4b:9f:8d:ad:07:de:a4:
                    45:8d:19:85:8c:ab:88:63:a4:d5:79:51:63:0c:f6:
                    78:89:19:40:96:e8:71:c2:c4:d4:ed:63:56:f2:72:
                    95:ca:3e:52:0c:29:70:23:1e:00:33:46:d3:8f:e2:
                    0f:b9:7f:d6:ec:20:eb:b6:46:4f:5e:0b:57:18:75:
                    8d:52:24:61:ef:1f:57:9d:83:96:fb:2a:f4:4e:2b:
                    50:2a:27:a4:6e:d5:0c:af:f8:cf:b6:d8:5e:e8:56:
                    fa:af:ed:a4:b2:f7:75:30:7c:1f:0d:52:a8:30:d6:
                    d1:db:e7:20:ab:26:52:52:01:2f:3c:00:ff:ad:00:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:30:C5:0F:F8:A7:C7:FB:AB:E7:4C:77:1F:38:F2:BF:7F:2E:C4
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231302e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:e5:ac:6a:7a:55:ea:e8:52:16:51:c2:2a:62:96:07:59:
         3a:d4:18:a7:3b:78:d5:48:cb:01:96:a7:94:00:6a:7d:e3:ab:
         7c:02:b1:e7:da:db:cc:6a:64:71:8a:06:21:7a:5e:7e:95:cc:
         40:bf:7a:da:0f:20:41:97:50:9c:a8:a6:1a:21:d2:42:8a:d4:
         57:6c:2e:c1:b8:05:09:3c:95:b7:60:cf:6a:b5:f0:be:ca:49:
         55:cc:08:d2:cf:98:0b:fa:d6:eb:14:6c:e6:50:50:7c:4d:8c:
         c4:d6:42:ad:2f:9f:7f:b3:ce:a6:a6:86:7c:0a:7a:cd:f9:63:
         16:1d:3d:ba:8d:28:94:d5:2f:6e:de:89:b3:f9:e5:a7:ba:ce:
         e2:1d:03:31:c9:79:ff:54:bf:c5:9e:4b:25:73:98:40:08:34:
         05:5a:d0:c0:48:fb:78:73:a6:bb:1d:f5:79:73:89:97:ac:fc:
         3e:4c:cc:86:7a:10:3b:3c:57:60:7c:1e:7c:06:c2:97:e9:e5:
         01:da:bc:41:12:2d:51:c0:e7:68:85:90:2f:5e:6e:5e:02:c9:
         e1:c5:30:a0:b0:ef:1d:03:30:8c:a1:7e:6c:11:35:92:c6:5b:
         5d:5a:05:61:f8:a1:25:a4:be:bd:af:62:30:c9:0f:27:f9:9f:
         04:8d:e7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:09 2025 by rpki-client