Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231312e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3231312e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          f7gLrRE/Rf3AoyTKhTTGjNutQrGDZYGIaJjcO0wA/7Y=
Subject key identifier:   BA:55:F7:C9:23:B2:30:FA:38:92:F4:4C:86:93:3F:38:84:1A:D5:A2
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       4F455CEC87CAEC90FB03390C2EC81F79E8FE5AC2
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231312e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:54 +0000
ROA not before:           Wed 10 Jun 2026 03:19:54 +0000
ROA not after:            Wed 09 Jun 2027 03:24:54 +0000
asID:                     28140
IP address blocks:        187.103.211.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:45:5c:ec:87:ca:ec:90:fb:03:39:0c:2e:c8:1f:79:e8:fe:5a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:54 2026 GMT
            Not After : Jun  9 03:24:54 2027 GMT
        Subject: CN=BA55F7C923B230FA3892F44C86933F38841AD5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:ae:af:cb:12:15:1f:07:72:46:11:cd:d9:
                    e2:ad:30:70:c6:bd:59:26:f1:a1:db:79:47:54:34:
                    f8:b2:0d:bd:df:43:87:11:2a:0e:0c:53:92:f5:b5:
                    cf:4c:2e:70:ae:70:b7:33:19:d8:95:6d:25:51:1f:
                    e3:ed:d7:60:bf:e7:56:a4:af:11:a4:e6:20:a0:18:
                    67:37:f7:01:6a:c6:b3:6c:9d:a2:ea:d1:dc:57:bf:
                    e0:33:10:cd:18:c1:76:69:43:df:87:db:9d:b3:5a:
                    88:4e:f9:b6:e9:ee:df:86:5f:4d:35:cd:40:fc:1e:
                    71:38:7c:1a:a2:ea:ff:46:ca:c5:f0:f4:e3:7c:3f:
                    35:1e:04:3e:5f:b4:20:79:2b:8a:e0:ac:78:5c:91:
                    24:c8:f5:c4:f6:2b:ac:86:78:2e:a2:58:ba:50:9e:
                    0f:45:db:e0:e0:8e:06:97:9d:29:17:13:72:8e:1f:
                    83:53:d5:3f:52:64:e8:3b:82:89:e2:e5:6a:62:26:
                    6a:d5:87:29:82:5b:07:0b:b4:77:57:16:d1:f6:11:
                    5c:80:5e:12:70:b6:0f:bd:89:17:4c:99:7c:51:87:
                    0b:86:73:62:52:e2:e0:a8:8b:be:8e:ef:d0:0e:2a:
                    7d:24:69:e0:34:be:a2:a4:f5:1c:b7:fe:63:86:9b:
                    2f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:55:F7:C9:23:B2:30:FA:38:92:F4:4C:86:93:3F:38:84:1A:D5:A2
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231312e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:47:ab:74:30:f9:06:72:b9:ee:c1:8b:cc:e8:6d:4a:df:
         b6:b9:e2:82:5a:e5:3d:26:37:67:3e:31:fd:61:e2:7c:38:46:
         77:35:4a:49:68:f8:b1:b3:3c:6d:78:fe:26:c7:3f:97:b5:0d:
         cd:69:dc:ce:18:7f:32:d2:1e:fb:41:cf:24:a7:05:7d:40:10:
         fe:e1:d6:b3:d7:33:23:87:c5:25:43:26:21:a1:a5:8f:09:e6:
         54:58:ec:41:cb:28:ab:66:e2:cc:4d:e4:ce:fb:0f:49:fe:e0:
         22:57:51:90:4e:6f:90:80:4f:6d:4b:cc:7a:d0:28:23:75:c1:
         5d:d6:77:6c:34:a5:ed:4f:66:62:42:65:1f:4a:7f:94:60:81:
         cf:89:56:93:8d:87:12:79:8c:02:ea:1a:9b:ac:f2:02:d3:11:
         b0:19:6a:d7:93:e5:80:78:6a:a9:46:47:36:5b:0f:2b:9c:07:
         7f:09:9b:35:08:0a:d9:31:87:9b:d2:68:6f:9f:33:36:31:10:
         a1:71:5e:ee:3d:c3:92:67:0c:50:ab:77:88:0b:06:75:9a:ee:
         6a:c2:04:d9:ec:42:65:ac:04:12:26:36:1b:f0:d9:0f:72:b0:
         a0:cf:0a:f1:c5:df:17:c1:cc:5a:1e:91:80:3a:e9:d1:48:61:
         cd:a1:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:50:58 2026 by rpki-client