Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231342e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3231342e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          D2bkEqLCozHbjMu7jvJaXPKLe3IMLeiwOtFK1eXGyE4=
Subject key identifier:   D3:9C:E3:B0:DB:23:B3:33:7B:D7:37:52:87:DE:53:B3:6F:26:5D:9A
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       7196DA899472B63D5D35859521897145168401F8
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231342e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:56:06 +0000
ROA not before:           Wed 09 Jul 2025 02:51:06 +0000
ROA not after:            Wed 08 Jul 2026 02:56:06 +0000
asID:                     28140
IP address blocks:        187.103.214.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:96:da:89:94:72:b6:3d:5d:35:85:95:21:89:71:45:16:84:01:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:51:06 2025 GMT
            Not After : Jul  8 02:56:06 2026 GMT
        Subject: CN=D39CE3B0DB23B3337BD7375287DE53B36F265D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:26:a6:c2:5d:31:31:58:0a:58:d9:f5:d3:
                    af:f6:b9:47:a4:87:26:ed:01:ab:91:c3:08:0e:3a:
                    e5:81:c6:52:f0:f6:23:91:76:ad:89:37:2f:87:97:
                    84:bd:55:f7:fb:aa:b5:a2:6a:e2:21:08:c4:3c:93:
                    81:41:be:d0:a3:76:cc:df:ed:c0:b0:13:f3:74:87:
                    4c:5b:26:d4:49:6e:13:3f:02:df:77:85:c4:45:31:
                    18:35:cf:37:75:87:8b:df:62:2b:ec:3e:ea:2d:bc:
                    94:96:bf:cd:a2:c8:20:8c:94:f4:54:41:ab:71:57:
                    2a:84:51:3d:71:42:fa:ae:1a:08:75:1e:db:65:4f:
                    97:6d:52:bf:d2:14:70:7f:db:fa:cc:97:db:09:29:
                    e5:fb:b6:5d:bd:c2:28:85:41:9b:9c:85:a2:83:0d:
                    03:49:c0:2e:c4:b7:9c:6f:36:14:b8:2c:01:d6:2f:
                    0a:7e:11:a5:d6:4c:2f:2d:ea:5d:00:8a:0d:47:ad:
                    26:6b:51:83:07:9d:83:21:36:77:3e:14:75:6b:31:
                    44:fd:6d:b8:d1:77:ac:ff:ed:f9:2b:c6:53:af:ab:
                    0b:fb:0f:b2:10:81:60:fd:4d:f4:cf:07:49:df:bf:
                    ff:23:f9:c7:a6:43:89:c5:6b:eb:1d:a0:56:66:b9:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9C:E3:B0:DB:23:B3:33:7B:D7:37:52:87:DE:53:B3:6F:26:5D:9A
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231342e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:48:68:ba:e1:a0:27:3c:df:48:db:7c:be:13:50:c0:30:8b:
         64:9c:1f:17:72:9e:3a:7b:6f:da:27:6d:d1:c6:db:96:b6:09:
         78:5f:42:61:10:6f:59:da:2f:d0:3f:2d:f1:51:d3:7f:f2:3c:
         e5:8b:33:e9:20:45:66:1e:69:e5:31:fd:7b:85:1f:c2:2f:bc:
         bb:ba:58:a7:e2:95:c2:d7:42:46:42:1d:ae:64:90:79:d1:df:
         db:01:32:15:fd:d6:c2:5b:5b:48:24:62:46:53:6e:99:1d:f8:
         aa:90:78:e5:d4:81:8a:3e:35:9e:d4:4f:19:e3:4a:1f:53:82:
         c8:04:0d:a9:fc:d8:79:88:0e:4d:be:1b:2e:46:d0:33:f1:66:
         7e:31:3e:6c:f2:12:92:c4:7c:74:da:b3:cf:a4:a6:0e:41:34:
         fc:53:01:83:04:63:ed:67:b5:56:eb:45:53:81:c1:ef:c5:3d:
         dd:e8:6d:06:e9:0e:13:a9:b3:f8:76:fe:46:4a:a1:92:ba:3d:
         c5:18:e7:87:93:0b:4e:1d:d0:2e:e5:26:d5:95:19:f3:0d:a6:
         15:7c:d1:06:d2:2a:6a:2f:f4:bc:38:06:55:88:d2:76:ce:d9:
         08:ed:05:1e:69:5d:66:55:f6:c1:51:93:dd:92:04:52:1a:8a:
         1f:03:df:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:29 2025 by rpki-client