Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231342e302f32342d3332203d3e203238313430.roa
File:                     3138372e3130332e3231342e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          0jtWlxaTK+pBhSzzqMihlqlL1W1rbuoRXsBczEmKH0k=
Subject key identifier:   1A:4A:2E:07:B5:48:01:C4:54:8D:F6:03:02:CC:97:24:3D:88:97:B2
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       5F5859D6177FD9580F2A956E4D0CAA1FE6B8BB66
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231342e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:54 +0000
ROA not before:           Wed 10 Jun 2026 03:19:54 +0000
ROA not after:            Wed 09 Jun 2027 03:24:54 +0000
asID:                     28140
IP address blocks:        187.103.214.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:58:59:d6:17:7f:d9:58:0f:2a:95:6e:4d:0c:aa:1f:e6:b8:bb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:54 2026 GMT
            Not After : Jun  9 03:24:54 2027 GMT
        Subject: CN=1A4A2E07B54801C4548DF60302CC97243D8897B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:19:ab:19:3d:31:95:bb:e1:b7:6d:e0:fa:
                    80:6c:9b:89:f2:eb:42:93:41:6d:bd:b8:b4:38:20:
                    9b:53:00:10:97:e2:1a:34:f8:b7:ab:58:4d:df:e6:
                    e1:98:75:71:07:8a:a2:77:14:d9:bf:a5:c1:07:03:
                    a3:e1:84:89:2b:10:11:fa:d8:b1:3e:f0:d2:6e:8d:
                    0d:1a:19:b9:b0:db:2b:9b:24:35:e6:09:1d:1c:11:
                    8f:b8:fd:55:f7:81:4e:1e:a8:71:da:46:e0:11:56:
                    73:36:0d:75:dc:f2:da:b6:8f:19:2d:31:fd:dd:0b:
                    2f:30:fa:18:04:34:11:1a:42:3f:b5:e7:eb:f9:99:
                    a9:9b:94:d1:f1:ec:77:6c:d4:8d:8d:2d:a3:09:4e:
                    bc:c8:2d:c0:de:97:db:46:bf:82:5c:65:df:d6:fb:
                    0f:36:4f:98:20:de:02:ae:87:38:da:89:2d:20:87:
                    e1:a7:80:2d:e7:72:f4:c0:ec:da:10:a0:ac:6b:8d:
                    7c:b9:80:6b:57:66:38:23:c2:f3:75:39:f0:ad:7b:
                    2c:bd:8e:da:6a:a5:a0:77:fb:1f:bb:2c:0e:fd:e6:
                    53:8b:65:20:ff:c3:84:14:ae:47:e7:9f:b9:98:f6:
                    b0:c1:a2:aa:47:4a:f7:3f:f4:5c:a0:88:cd:90:8c:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:2E:07:B5:48:01:C4:54:8D:F6:03:02:CC:97:24:3D:88:97:B2
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3231342e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:25:12:8e:d4:9c:b2:62:34:4d:d0:d6:49:7a:50:fa:a6:ba:
         ab:50:7c:d9:ec:ad:ec:02:67:01:e3:0b:24:4b:f9:0c:ee:44:
         ed:9e:53:62:93:0d:ef:4e:f7:af:84:0d:0b:9a:c3:f3:e2:a7:
         bd:9e:bf:1e:63:40:4c:c3:f3:b3:ec:f7:8c:7f:97:1b:4d:55:
         6e:d4:43:a3:6f:af:d1:c0:17:7b:28:bd:6c:8b:30:69:82:ed:
         42:65:18:d2:d1:9c:33:a6:2c:e7:63:17:fe:e4:c3:b4:19:9b:
         fc:cb:0d:84:4f:2a:1c:50:e0:b3:f4:15:62:36:30:fe:71:4f:
         24:dc:78:ad:0e:08:9c:bd:7f:76:0e:0b:e2:88:8f:ae:a7:d0:
         02:71:d1:29:71:7b:00:60:1c:85:b8:00:38:49:48:ae:f5:c9:
         a5:25:ed:8c:43:1e:8a:d9:7d:a8:7b:b7:e5:18:89:72:c0:83:
         ad:ea:1c:ff:c4:5a:55:1b:f1:bb:c0:90:b7:13:19:6d:f4:ea:
         f4:81:05:3b:4b:ca:01:44:76:1f:af:cf:0a:7b:e8:ee:5a:17:
         66:f8:70:33:f9:e0:db:bb:95:a5:b1:de:93:1d:09:a1:ea:8f:
         cd:ad:31:04:2e:da:57:86:64:e3:e3:15:e8:ba:6e:84:7e:e2:
         40:b9:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:01:59 2026 by rpki-client