Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33372e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e33372e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          THneQ0HYBNk94RAjlfdEW/ud+WMOT4bgZyPTM4aKeuE=
Subject key identifier:   54:4D:AB:47:D6:8E:1B:6D:F4:54:F3:AB:C2:75:AF:53:F0:2A:FB:F0
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       53580EB0173EFA8ED55180E4FF1CCA780969BA44
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33372e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:50:50 +0000
ROA not before:           Wed 09 Jul 2025 02:45:50 +0000
ROA not after:            Wed 08 Jul 2026 02:50:50 +0000
asID:                     28140
IP address blocks:        187.49.37.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 04:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:58:0e:b0:17:3e:fa:8e:d5:51:80:e4:ff:1c:ca:78:09:69:ba:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:45:50 2025 GMT
            Not After : Jul  8 02:50:50 2026 GMT
        Subject: CN=544DAB47D68E1B6DF454F3ABC275AF53F02AFBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:68:01:fc:00:e3:e8:90:ec:1b:f2:c2:70:
                    59:54:60:c1:47:8b:59:96:28:d9:9e:fc:65:f2:10:
                    38:df:30:7b:f9:d5:c9:f9:10:9b:f7:55:7f:17:a0:
                    6d:07:cc:a4:06:46:43:34:67:16:04:5b:cb:7f:48:
                    82:d6:49:36:b7:06:8b:d3:32:c8:be:e1:8f:83:d4:
                    61:cc:5b:86:2b:b0:84:29:62:17:20:ef:ca:df:1d:
                    ac:34:8d:ff:db:de:fd:f5:42:ab:5e:e8:a4:07:9e:
                    93:17:a1:c0:c9:71:1a:b0:a9:3f:8c:b5:42:92:5f:
                    e3:18:19:bd:a1:c7:4d:75:72:69:31:42:37:55:4b:
                    89:a4:2b:2a:b7:7f:84:21:a7:4c:0e:92:fe:38:50:
                    bb:69:ce:0f:be:49:f8:44:0d:ef:c5:a9:70:a7:48:
                    67:2b:69:fb:9c:17:f7:21:06:88:8f:c8:13:96:ed:
                    20:d9:da:ca:2a:31:4e:d2:29:4a:ae:52:14:74:54:
                    93:2a:b8:b7:cd:12:b7:25:ae:3d:f5:74:19:15:c2:
                    8f:4d:d3:50:04:cc:fd:a9:78:3b:4e:0b:1b:eb:dd:
                    42:c8:a8:5e:4d:21:57:a7:5f:08:64:0e:3d:6f:72:
                    f4:d7:07:09:a4:db:85:81:08:50:cf:a4:1c:34:91:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4D:AB:47:D6:8E:1B:6D:F4:54:F3:AB:C2:75:AF:53:F0:2A:FB:F0
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33372e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:58:77:dd:6b:04:27:0f:70:42:47:8f:3e:a8:e0:56:86:5d:
         7d:80:66:75:e1:16:47:e0:bb:44:96:56:45:2f:7b:01:c5:ef:
         3f:71:f1:35:5a:2b:55:09:f6:e0:31:16:7a:65:9b:4f:11:52:
         d9:37:ed:e4:21:00:e4:05:09:f8:3a:ea:01:5d:e3:8a:97:92:
         b2:86:af:68:4f:d8:f6:c6:bd:d4:e6:0c:97:3a:08:20:39:35:
         12:4f:90:01:b9:a1:de:d2:d9:54:ce:05:d7:f7:2d:11:4b:94:
         ba:5e:66:b0:40:61:bc:42:4c:6a:d8:43:6f:4f:53:18:e5:17:
         a0:77:dc:a6:b1:b5:4c:8b:0f:bf:b1:2b:0d:94:27:82:0f:cc:
         5f:fe:1c:d4:de:85:59:57:c2:ba:9c:b2:18:a8:bb:32:e0:99:
         9c:07:26:97:b8:89:62:40:08:c3:01:18:3e:19:22:a1:57:72:
         95:16:3f:0a:a6:b7:0e:25:8e:3b:f9:bd:6f:7e:ba:4c:07:3f:
         fb:d6:a8:ef:15:e3:c1:74:c9:0a:01:1f:9e:02:01:da:cd:c8:
         90:d3:79:df:9d:33:39:3b:0b:a7:2e:c4:4e:0c:38:4c:73:ba:
         38:b7:83:84:ce:7c:1d:0a:7f:72:b9:12:06:a5:76:f4:6d:ee:
         d7:13:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:51 2025 by rpki-client