Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33362e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e33362e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          82V4bIV9CxKvkGitKvxXkZrRNhapPQVan7+W4ANwt3k=
Subject key identifier:   25:56:92:C5:A4:B9:6F:11:B0:08:23:B0:C8:6F:54:AB:15:78:8D:21
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       620204245DED4CF9A1D7E88F692E28CF98B8629D
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33362e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:51 +0000
ROA not before:           Wed 10 Jun 2026 03:19:51 +0000
ROA not after:            Wed 09 Jun 2027 03:24:51 +0000
asID:                     28140
IP address blocks:        187.49.36.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:02:04:24:5d:ed:4c:f9:a1:d7:e8:8f:69:2e:28:cf:98:b8:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:51 2026 GMT
            Not After : Jun  9 03:24:51 2027 GMT
        Subject: CN=255692C5A4B96F11B00823B0C86F54AB15788D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:9b:30:e4:f8:ed:e5:66:d1:01:76:fb:cb:
                    5f:de:94:af:b4:69:54:de:c7:a5:36:45:93:6b:35:
                    a0:f0:e7:0b:04:5c:dd:00:ae:98:f9:57:09:47:18:
                    91:53:eb:58:ad:68:be:9d:a6:14:28:6c:e9:5d:4b:
                    42:81:1c:f5:aa:01:d5:46:ed:36:ae:6a:98:c4:c2:
                    4d:55:34:e9:bc:d8:54:c5:82:c3:66:76:1d:9c:f1:
                    8a:45:15:86:a2:96:5c:24:b1:cd:94:f7:01:b1:d9:
                    c1:04:ca:22:68:84:ce:92:5d:93:0b:90:e4:7d:38:
                    eb:4b:a4:7f:9e:32:69:ae:ed:98:80:2c:6b:0c:af:
                    37:cd:f3:e3:09:3d:1b:69:11:ff:1c:b8:f9:bb:8f:
                    e9:b1:47:08:1f:ad:ac:73:d2:76:35:b4:2c:48:8e:
                    fb:a5:aa:d0:c9:a9:c9:50:74:3e:5e:94:73:4e:71:
                    20:40:86:7d:aa:da:4f:23:25:e6:94:70:e6:53:f4:
                    72:8d:48:3e:2b:a1:08:4c:8b:33:70:92:22:b7:92:
                    1c:f8:d9:bb:b4:7d:9a:45:80:2c:e1:72:8c:30:78:
                    98:bf:6f:77:80:b7:bd:98:40:e9:e9:d8:a6:da:61:
                    1d:56:a3:3d:55:7f:3d:26:b8:33:7a:16:84:ae:b9:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:56:92:C5:A4:B9:6F:11:B0:08:23:B0:C8:6F:54:AB:15:78:8D:21
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33362e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:aa:85:19:2f:dc:32:b8:c3:3f:bb:9e:e2:7f:1b:53:df:19:
         eb:c0:0e:44:35:0a:b5:3e:01:ad:4c:6f:f4:62:c4:fb:e2:69:
         0a:a3:af:9c:00:37:0c:2c:01:fa:76:f0:54:92:cd:8e:47:cc:
         70:ee:e3:01:81:21:b3:a1:3b:4e:1b:bd:59:6d:83:c5:28:25:
         09:a7:ce:47:9f:6a:17:c4:ea:58:d5:23:a0:3c:29:7a:d4:65:
         9f:fb:a1:00:f9:8d:70:45:e8:63:ab:bb:ca:07:af:c2:76:87:
         91:df:b2:cf:06:5f:6a:f6:1a:eb:b1:cb:9d:27:5f:5b:6b:58:
         7b:9b:ec:f1:9a:67:5c:ac:bc:df:d0:f6:6c:c8:80:cd:6a:94:
         63:d1:fd:e4:c1:33:9f:e6:98:48:8c:54:2f:8c:d9:30:24:22:
         08:fb:9d:eb:e9:f1:87:e0:ef:08:a4:b8:fa:0f:ba:59:6a:b3:
         5d:7d:f9:95:87:92:81:2d:73:7b:0f:c5:d9:e8:33:21:d4:64:
         db:b8:30:ff:d5:bf:42:c7:4d:2f:05:ea:9a:ee:eb:30:de:f2:
         48:f4:84:d0:4b:fb:19:35:35:94:0a:f7:d2:13:a2:46:33:34:
         a0:8a:30:2e:86:6e:36:af:91:cb:be:0e:56:84:2d:4b:78:00:
         f5:42:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:50:28 2026 by rpki-client