Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33342e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e33342e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          jGEYa+pm3EHAqc595TRYqcfplilN4VSde5kmFYIOBv4=
Subject key identifier:   ED:1D:E2:FF:63:44:6F:C9:56:43:54:47:A6:79:BE:2B:1D:C7:EB:A4
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       342E1E30B872E0E461240E31BBDA89D4848C4530
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33342e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:53 +0000
ROA not before:           Wed 10 Jun 2026 03:19:53 +0000
ROA not after:            Wed 09 Jun 2027 03:24:53 +0000
asID:                     28140
IP address blocks:        187.49.34.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2e:1e:30:b8:72:e0:e4:61:24:0e:31:bb:da:89:d4:84:8c:45:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:53 2026 GMT
            Not After : Jun  9 03:24:53 2027 GMT
        Subject: CN=ED1DE2FF63446FC956435447A679BE2B1DC7EBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:bd:2c:ac:bf:c1:0a:c7:0e:02:26:10:a0:
                    10:3a:a4:59:f2:bf:1c:ec:6e:c0:22:54:d3:fb:25:
                    b0:18:de:7c:c4:06:b6:f2:8a:d8:07:71:a6:c1:10:
                    68:a1:4c:89:35:4b:ee:7c:22:dc:0d:20:53:28:6b:
                    00:c4:3a:1e:48:f7:e6:46:16:19:d8:97:c8:09:c8:
                    16:64:2f:60:ed:86:d9:74:3c:08:01:fd:83:10:12:
                    f2:01:cb:a3:bd:4d:ab:f8:20:63:d8:8d:0a:6a:11:
                    83:7f:aa:2a:1b:ee:7e:a0:dc:31:d3:e0:9d:97:7f:
                    6c:4a:f9:63:ef:d5:82:74:38:6c:b6:e2:71:de:2e:
                    66:fd:94:2f:8e:4b:31:69:6a:16:f9:03:d0:67:e2:
                    b0:23:69:a0:7e:ac:79:ae:82:0d:76:be:1c:e2:f2:
                    1a:ba:28:86:23:18:89:a6:b1:56:5b:74:7c:41:b3:
                    d5:97:90:fb:5e:06:21:42:58:45:62:90:2a:aa:47:
                    bf:78:80:e9:10:45:4a:41:bb:18:69:47:d2:af:71:
                    8d:38:53:79:eb:5f:e5:62:10:60:8e:57:7f:2f:cd:
                    48:c4:d0:37:58:3a:16:a6:0e:48:ca:ca:fe:b9:24:
                    2a:07:6d:59:43:bd:3d:a2:65:95:a5:f8:99:63:3b:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1D:E2:FF:63:44:6F:C9:56:43:54:47:A6:79:BE:2B:1D:C7:EB:A4
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33342e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:7a:9c:bc:b3:a7:a6:1d:8b:43:03:cf:fb:8e:c7:42:81:88:
         73:d6:5f:07:ef:7a:76:4a:9d:bc:8b:ac:a5:ae:df:ce:c8:8b:
         52:db:fc:12:19:d7:8e:4f:0b:3e:c1:4d:d5:52:01:ae:5b:bb:
         6f:dd:86:c4:70:8e:9f:e6:51:ff:cd:1c:ea:6a:48:c6:0c:36:
         7d:64:d0:15:c5:4b:71:de:62:29:3d:1d:94:9a:f0:e7:fc:5d:
         ea:75:eb:49:b2:3b:30:4e:60:34:af:84:f2:0f:1d:55:5b:50:
         3a:82:8f:82:a4:bf:51:5f:6d:3f:86:f7:5e:54:60:b1:04:55:
         36:67:ac:a0:f0:1d:b5:0a:45:b5:5b:44:9f:1c:4e:49:34:63:
         c6:d3:1a:86:5e:1b:18:1b:50:a0:04:fe:7b:d0:fc:05:a4:b9:
         0b:4a:28:ed:51:3b:00:c0:8b:17:b1:df:44:d4:fd:47:79:0f:
         bd:5a:4e:5f:86:85:b0:0b:ba:a0:7a:04:bf:e6:fa:38:e4:4c:
         0b:7c:b4:a4:dc:2a:f4:42:c5:bb:46:73:66:e7:7c:40:40:9a:
         ff:5f:9f:67:16:74:b8:42:f1:b3:7d:b7:31:5f:32:03:8b:f0:
         04:65:3e:01:bb:b4:52:9e:72:22:46:41:9b:64:58:2c:58:69:
         65:16:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:27:08 2026 by rpki-client