Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33382e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e33382e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          +uAV6WfPNYJoVBlcbPLAeCscQp0o28ZeAKuQL2CyW9g=
Subject key identifier:   DD:79:74:5C:29:58:16:82:15:62:A3:B3:AE:B7:56:F7:24:F2:AA:87
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       6C0FCFBC4576260A39FF8CC3A37F17DB18D21611
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33382e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:51:02 +0000
ROA not before:           Wed 09 Jul 2025 02:46:02 +0000
ROA not after:            Wed 08 Jul 2026 02:51:02 +0000
asID:                     28140
IP address blocks:        187.49.38.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:cf:bc:45:76:26:0a:39:ff:8c:c3:a3:7f:17:db:18:d2:16:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:46:02 2025 GMT
            Not After : Jul  8 02:51:02 2026 GMT
        Subject: CN=DD79745C295816821562A3B3AEB756F724F2AA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:61:1d:14:d1:d8:08:0b:b4:7a:70:74:cb:
                    d5:4b:57:3f:cc:1b:e1:6d:2a:bf:c8:ff:30:9e:a7:
                    1e:93:80:40:30:a1:db:6f:be:c5:c2:af:36:55:37:
                    cc:c9:1c:7a:69:c9:f3:01:32:e9:4b:08:2d:82:59:
                    be:76:d4:f8:3c:b3:08:03:a2:53:1a:2d:b1:6c:47:
                    aa:0e:79:df:43:05:60:3d:12:80:27:d2:a6:6c:ef:
                    6b:78:5c:02:13:46:f8:38:cd:79:ec:fb:bf:e6:01:
                    41:1e:82:63:2f:ef:89:21:e2:a4:b8:f4:c9:59:24:
                    8e:32:39:ea:ce:54:3d:a2:79:50:61:f2:76:6a:6c:
                    1c:90:44:2e:e5:5b:2e:01:e6:b5:80:fe:14:b2:b2:
                    a6:29:cc:67:5f:11:ae:55:22:e6:29:2a:b2:c2:44:
                    ac:f4:1b:bc:ed:2b:a9:c2:12:bc:77:a4:16:60:c5:
                    83:92:2d:f6:f6:53:f7:7a:fb:2a:cc:78:06:21:0a:
                    88:b9:cf:6d:9e:65:8b:88:92:ad:bf:b7:f0:83:2d:
                    8b:6f:55:f4:a9:cd:52:21:68:59:49:9c:89:8e:10:
                    78:71:6a:b6:93:25:84:b6:5d:2a:14:be:7a:4c:9a:
                    f3:aa:99:93:e5:e1:b6:ff:5f:c3:b1:8b:1e:23:ae:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:79:74:5C:29:58:16:82:15:62:A3:B3:AE:B7:56:F7:24:F2:AA:87
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33382e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:07:26:fb:e4:a6:cd:86:da:83:f3:d0:97:b8:dd:14:f2:39:
         8c:8b:d3:75:3c:e3:61:b4:10:ae:45:1a:c2:9c:3c:90:74:9a:
         dd:a3:f5:bb:c2:6a:2d:d2:49:5c:4c:4b:f1:b5:ba:21:ab:16:
         83:02:c2:39:e9:b0:ec:3b:ca:51:f2:5b:d0:e3:b2:ff:40:98:
         1c:8c:63:8e:2f:0b:b2:08:ed:3d:ab:9d:8b:03:bf:60:d0:70:
         39:9c:6d:ed:93:fb:35:84:eb:4a:15:73:c0:a6:73:50:b8:54:
         61:1a:d7:43:4f:31:b6:16:c4:b8:2c:8f:0d:8e:cd:f2:74:49:
         f4:bf:11:d5:f8:fc:e8:63:93:9c:da:64:32:f8:63:52:3b:ae:
         5e:b8:ab:02:2f:72:bb:18:0e:6b:1e:be:5d:f4:c8:4b:ae:86:
         38:ba:6f:9c:78:5c:57:5b:30:f2:05:5e:e3:72:c2:fa:41:ea:
         a2:75:32:04:45:7c:6a:40:33:c3:6b:c3:fa:fa:ea:47:20:28:
         cf:9c:c4:4f:3c:1b:37:dc:5f:d4:c3:ee:1a:64:4c:f1:dd:84:
         d7:14:fa:5f:21:a8:e0:e5:ca:47:6b:06:1e:a3:29:8c:cd:1b:
         2c:86:bb:7b:16:7c:eb:02:11:c7:be:7b:f9:27:e9:f4:46:9d:
         ad:c7:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:33 2025 by rpki-client