Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231322e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3231322e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          jXU4xe5iCI/jRJwZw+VDLFDk7G0kTqDm4KiqwR+oYQw=
Subject key identifier:   16:7A:4E:D9:F1:57:19:4D:68:62:AF:94:1C:B0:C9:4B:E2:98:AE:55
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       6C8A8F06EB65BDB76CEFED3FC6B2A2C145215C15
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231322e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:55:20 +0000
ROA not before:           Wed 09 Jul 2025 02:50:20 +0000
ROA not after:            Wed 08 Jul 2026 02:55:20 +0000
asID:                     28140
IP address blocks:        187.103.212.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8a:8f:06:eb:65:bd:b7:6c:ef:ed:3f:c6:b2:a2:c1:45:21:5c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:50:20 2025 GMT
            Not After : Jul  8 02:55:20 2026 GMT
        Subject: CN=167A4ED9F157194D6862AF941CB0C94BE298AE55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:0c:7a:ea:33:d0:0c:15:3c:cb:19:bc:de:
                    c0:af:7f:4c:c5:ad:c1:7a:9c:ac:b6:8e:e0:d5:5e:
                    63:86:fb:f0:c9:33:ec:b8:5f:b3:b3:a9:86:6e:d9:
                    a1:e9:c9:cd:c6:83:90:7e:0a:7e:a9:93:6f:a3:3f:
                    5f:9e:81:89:d6:b5:b7:80:55:5f:44:88:1c:0e:e5:
                    db:7e:6a:41:34:a2:9a:a2:a1:d9:3d:e9:9e:ce:be:
                    05:4e:84:df:6d:2e:88:6b:b1:50:4c:e8:1a:f0:13:
                    ca:74:79:b1:af:f3:bb:9c:31:84:54:d0:c4:d7:d9:
                    45:18:58:3c:56:95:a2:75:40:ec:c5:7f:d8:2f:05:
                    30:62:40:3b:89:36:fe:27:e0:f1:a9:64:d8:dd:91:
                    c9:45:57:eb:4a:45:0c:51:07:24:05:01:90:ac:68:
                    f9:01:61:b6:1a:a3:e8:b9:d6:7b:b2:99:0f:de:87:
                    11:8a:4d:a6:8d:ba:cc:b4:e8:12:17:fc:d3:31:41:
                    38:e8:19:c2:3d:2d:5e:16:b8:e9:21:6c:8c:4b:a2:
                    d8:e5:19:1b:2c:91:5b:fe:81:ed:9a:cb:ab:1b:ed:
                    2e:64:42:3d:16:03:76:92:de:e1:be:fd:31:8d:08:
                    b6:95:72:cb:ff:5a:f7:8b:8b:0d:7a:46:d0:38:82:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7A:4E:D9:F1:57:19:4D:68:62:AF:94:1C:B0:C9:4B:E2:98:AE:55
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231322e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:01:55:3c:49:73:c5:a9:a9:cb:1d:7b:ea:96:fe:7e:17:
         37:35:ce:4d:a5:f9:06:18:8d:e2:89:65:a0:8e:86:a1:99:e2:
         81:d1:d0:34:5f:98:86:4e:26:1a:45:7e:77:cc:16:84:82:a1:
         0b:b0:b1:43:15:e9:6b:e6:f0:11:6d:4a:65:13:ae:e3:8f:5b:
         9a:95:ee:8e:1a:9e:5e:3e:ec:d0:c6:60:88:bc:c8:e4:b5:42:
         73:2d:0a:d0:f7:99:4d:da:c5:3a:9a:d3:6b:e3:0f:1e:c3:8f:
         ff:19:8e:30:d7:4c:ad:03:d3:cc:7e:80:a4:9b:74:8b:3b:be:
         da:55:5c:40:a7:ec:e9:ac:fd:5e:05:2b:53:19:ea:d0:ef:ec:
         59:8a:bf:ef:26:23:b4:fc:dc:c2:50:fe:16:2a:06:fb:3c:91:
         a8:b9:22:e3:41:69:c7:58:ca:0e:fc:af:c5:d3:de:48:f2:4e:
         41:22:5c:b5:ac:1f:29:7d:14:01:e5:48:b2:19:4c:7b:1c:a4:
         7c:61:ad:94:35:d5:26:1a:ac:90:40:a1:c0:35:83:a9:f1:77:
         09:e2:b7:55:35:b9:c3:a5:b7:ec:b6:eb:c1:95:5e:82:e5:b0:
         d4:79:fa:e3:08:6d:b1:5c:2d:22:a4:e9:e3:a9:9a:c3:66:28:
         77:a3:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:33 2025 by rpki-client