Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33382e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e33382e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          A0yjAHzBfuB12FjqxNvW44H7d/m6gGnqsgBRA/sSi8A=
Subject key identifier:   E3:23:4A:E0:79:E8:C9:D9:8C:47:5A:74:E8:3E:31:6F:ED:66:BD:58
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       0B11DC69F9EC8612AFCD027B650C2C2F1809046E
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33382e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:56 +0000
ROA not before:           Wed 10 Jun 2026 03:19:56 +0000
ROA not after:            Wed 09 Jun 2027 03:24:56 +0000
asID:                     28140
IP address blocks:        187.49.38.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:11:dc:69:f9:ec:86:12:af:cd:02:7b:65:0c:2c:2f:18:09:04:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:56 2026 GMT
            Not After : Jun  9 03:24:56 2027 GMT
        Subject: CN=E3234AE079E8C9D98C475A74E83E316FED66BD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:4a:e6:8c:7e:3b:b4:cb:23:fc:96:11:fc:
                    1a:85:98:1f:98:99:e3:e4:59:cc:78:03:27:11:a9:
                    ba:da:4b:76:8c:fa:cd:ab:32:30:48:dd:80:36:c4:
                    98:29:8e:83:04:e7:50:12:48:ef:ef:d9:89:01:d6:
                    c9:73:61:ca:7d:b3:85:ec:69:35:f2:c5:6b:0b:c1:
                    20:e6:64:5e:d0:55:64:7b:ff:9b:f4:0f:a1:67:e2:
                    28:9a:2e:b4:45:52:3c:fd:70:50:4e:3f:e1:72:c7:
                    45:e8:73:c8:f7:92:c5:19:d1:bf:3c:52:2b:20:65:
                    c8:cd:91:7a:8b:f4:d4:3b:05:05:4b:6e:59:f5:c0:
                    2e:46:21:f7:e7:83:fc:68:2f:01:70:e1:ca:74:6e:
                    a2:69:4e:1b:00:b4:61:b9:e5:fd:97:a3:d2:c7:2e:
                    3e:ab:c9:c2:6e:1a:66:fc:93:f0:c4:ac:98:b5:74:
                    ca:0d:f2:4c:7b:fd:cd:b9:e8:97:0b:8e:e3:31:fd:
                    f3:2e:e8:a0:37:74:db:46:88:01:56:fc:ed:8b:f2:
                    bc:c5:b2:f5:16:9f:05:e0:f3:3f:ff:a4:d6:75:d3:
                    ee:ec:05:8c:40:8b:f2:d7:0e:8f:8e:bc:0a:a8:27:
                    c5:86:f4:45:5a:02:7e:af:f1:54:62:4d:7f:5c:58:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:4A:E0:79:E8:C9:D9:8C:47:5A:74:E8:3E:31:6F:ED:66:BD:58
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e33382e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fa:66:65:01:7f:40:97:83:d7:76:64:66:49:3a:10:6d:37:
         49:3e:0c:13:75:7a:c4:a1:e8:ec:81:b4:da:20:9c:60:6f:15:
         49:18:da:62:bb:15:fc:52:ff:74:df:9a:fd:7d:1a:b4:92:e7:
         a2:58:70:79:12:a8:c7:5c:4f:ef:1d:53:53:c1:31:71:3e:60:
         bf:c3:fc:f2:44:f2:f9:02:c5:bc:b4:43:31:11:ca:17:f5:9b:
         46:3d:cb:06:39:df:ae:98:dc:1c:e8:a1:c4:b6:77:58:00:6b:
         fb:4b:6f:d5:a0:4d:94:22:ec:33:17:7f:a4:b6:32:6e:ff:5c:
         de:1f:5c:e1:b2:d6:1c:54:c5:50:8a:03:28:6a:6a:02:3e:c4:
         d7:af:11:50:a7:06:5f:f6:eb:a2:83:69:18:79:a5:4a:5d:ed:
         fd:3c:cc:77:7c:2a:29:16:26:62:ad:bc:5f:72:31:b5:8e:10:
         66:cd:9e:df:c3:3e:3c:00:af:cd:33:bc:f4:70:84:4f:1b:71:
         68:be:72:e6:f6:01:3e:eb:df:54:cd:a9:78:e4:8f:a6:5e:90:
         ac:24:65:3d:cc:62:eb:ce:5c:7e:42:52:64:69:c4:26:8c:16:
         30:76:f1:e3:81:29:3c:c7:70:75:22:20:02:09:49:92:2a:ee:
         c1:cb:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:50:36 2026 by rpki-client