Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231312e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3231312e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          4zTemStLdVrGeyhJaZuVJ51+s8Ktkyr3/ZeVOb6k6R0=
Subject key identifier:   9F:B4:5F:74:9E:C4:F6:29:F5:00:5D:BE:23:E6:E7:5E:11:2D:27:CE
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       38AF6F437D05D6F88F16B868CD0E221AE3044EA8
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231312e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:55:11 +0000
ROA not before:           Wed 09 Jul 2025 02:50:11 +0000
ROA not after:            Wed 08 Jul 2026 02:55:11 +0000
asID:                     28140
IP address blocks:        187.103.211.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:af:6f:43:7d:05:d6:f8:8f:16:b8:68:cd:0e:22:1a:e3:04:4e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:50:11 2025 GMT
            Not After : Jul  8 02:55:11 2026 GMT
        Subject: CN=9FB45F749EC4F629F5005DBE23E6E75E112D27CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:7c:f4:7b:12:56:ec:0e:32:47:6a:04:33:
                    b3:7a:10:d1:34:26:ae:a9:e7:18:44:1c:1d:43:16:
                    64:07:dc:d8:de:92:2d:67:6b:94:13:ad:0c:c5:79:
                    78:11:21:85:4c:f8:80:ac:63:92:30:19:d1:16:4d:
                    79:a5:66:ab:01:8c:95:db:b5:57:05:f7:14:6d:c1:
                    da:17:51:af:d5:45:8b:b7:66:eb:4c:60:2e:1b:1b:
                    8a:f3:40:15:73:c8:56:e0:76:d0:80:f7:21:b0:21:
                    8c:a1:fe:59:85:57:54:4c:03:99:aa:00:df:83:39:
                    40:0a:83:cc:f2:a5:e2:83:12:df:14:f1:56:cf:51:
                    c1:88:f6:48:a0:d1:c0:cb:03:3a:b4:f2:5e:2b:f9:
                    d6:79:2b:01:c0:59:e0:ab:d2:a5:38:9f:67:1c:af:
                    65:bf:85:e5:8a:f0:d7:cd:00:4f:e2:b4:34:31:11:
                    fe:bf:f8:dc:5c:19:e2:f2:3a:b6:1e:fa:5c:9b:ea:
                    4d:b2:39:fc:b4:13:d2:0b:e3:2c:0a:92:c4:42:3e:
                    44:dd:26:ae:58:b5:cd:78:40:86:f8:e7:4b:39:30:
                    82:50:25:78:c3:5f:2d:59:46:07:0f:11:cc:8b:d7:
                    b2:ad:28:c0:c0:29:bb:b8:39:a6:00:c1:22:2d:dc:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:5F:74:9E:C4:F6:29:F5:00:5D:BE:23:E6:E7:5E:11:2D:27:CE
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231312e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:55:5e:cf:26:0c:d9:4c:56:e0:a1:f5:d5:a5:d7:34:55:
         04:af:ad:c8:9a:f1:5f:c2:36:a6:a2:ae:3c:6f:8e:d0:31:89:
         7d:0b:4a:fb:14:2e:ef:e5:77:32:19:f9:e0:76:0b:ea:54:d4:
         23:41:80:02:cf:9d:aa:99:07:0d:0a:1b:cd:bb:74:8a:8f:91:
         3e:56:7e:97:3f:81:75:bb:de:e6:bb:c9:8f:d0:8c:f1:f4:2e:
         39:bd:14:4a:7e:45:51:ae:6f:6f:a0:a5:cf:c3:1b:5c:aa:14:
         90:7d:6b:9f:15:d9:38:32:5e:cd:ea:9b:6f:20:92:99:ba:c3:
         c6:0f:95:50:27:46:14:9c:15:4b:f0:6e:87:dc:3a:33:a3:50:
         d5:cd:bf:6f:1d:ec:fe:53:28:e6:a1:6b:cf:57:2d:8b:e1:a9:
         32:1e:1a:c8:c9:c8:92:fd:a7:9d:a4:f2:73:ab:c5:cd:5f:2b:
         df:4e:76:64:5c:97:92:22:74:f4:a4:63:35:9a:2e:4f:54:21:
         88:6b:97:1a:5d:73:42:62:98:9f:3d:c3:18:4b:32:24:41:94:
         ed:07:9e:df:60:34:3b:4c:33:f6:1c:42:3a:d1:86:e1:1e:23:
         9f:b9:a4:84:88:59:3f:d2:73:94:66:58:37:a5:24:db:39:71:
         19:c6:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:06 2025 by rpki-client