Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34302e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e34302e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          NxflJ1BmdtTMQfRPmltc+dq5ZYncLHroLf/jKCIGXB0=
Subject key identifier:   2F:48:73:5F:15:87:5E:C2:23:A9:A1:E8:AF:2A:AA:FA:5A:03:C0:31
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       64F9261BE12949CB46AB2E831B502ACF9CD217E0
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34302e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:51:22 +0000
ROA not before:           Wed 09 Jul 2025 02:46:22 +0000
ROA not after:            Wed 08 Jul 2026 02:51:22 +0000
asID:                     28140
IP address blocks:        187.49.40.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 01:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f9:26:1b:e1:29:49:cb:46:ab:2e:83:1b:50:2a:cf:9c:d2:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:46:22 2025 GMT
            Not After : Jul  8 02:51:22 2026 GMT
        Subject: CN=2F48735F15875EC223A9A1E8AF2AAAFA5A03C031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:14:26:a4:87:a0:f8:fe:bd:eb:e3:f1:f6:
                    3f:57:6b:a7:3d:b7:0b:a5:6b:be:54:e4:41:e5:10:
                    2a:41:39:e9:1d:99:8b:6f:1d:e5:04:e5:62:e6:67:
                    2b:ae:a3:26:60:2b:e7:9e:78:07:7a:32:f3:e4:0e:
                    0a:1b:92:46:27:51:4a:11:6f:e6:33:21:ab:0e:8f:
                    67:47:b6:a3:a0:97:4d:ce:43:0e:3e:5e:f8:8d:e2:
                    65:bf:88:17:1f:e7:73:87:68:d7:2b:21:c0:3b:6e:
                    50:5a:5b:0a:d4:ab:8d:a1:d5:ad:eb:eb:ad:b7:9d:
                    87:15:1f:8d:82:b6:f0:7b:36:66:47:a4:e1:58:dd:
                    bb:72:cf:85:0f:88:f2:68:9b:ab:35:e1:70:c3:01:
                    9e:0d:20:e8:73:c3:69:86:43:88:d4:6b:f7:eb:ff:
                    af:7e:d6:2c:06:f6:53:f8:98:e2:54:2a:d1:94:54:
                    39:a2:b3:ae:24:59:1e:69:89:ed:0d:16:ad:f2:f4:
                    b3:8a:44:4c:eb:33:36:40:51:1e:3a:48:36:44:14:
                    1b:c1:b0:94:a4:02:51:f7:d2:31:6c:41:05:58:55:
                    83:f1:ed:69:bc:43:50:84:ea:ca:18:b5:dd:35:f5:
                    f2:ee:8d:72:01:bc:07:4b:a2:63:62:85:67:13:9c:
                    42:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:73:5F:15:87:5E:C2:23:A9:A1:E8:AF:2A:AA:FA:5A:03:C0:31
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34302e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:15:7b:89:a4:39:c5:2e:1b:29:6d:31:6b:f2:60:c8:81:
         16:44:eb:25:07:4b:18:73:de:ff:57:c6:23:ab:ef:a3:4f:e5:
         09:dc:2d:2b:e4:28:e7:05:60:92:7a:c8:4c:2f:ce:40:9b:4c:
         44:ff:25:e1:61:5d:33:b2:5c:c4:90:50:96:21:31:54:89:dc:
         d7:27:9c:fe:e9:77:ed:ba:02:6b:87:77:78:fd:03:45:da:8e:
         1c:9a:33:c2:7b:e3:aa:53:7a:76:4e:3a:be:97:e2:84:9d:35:
         02:a6:16:51:b9:16:a0:a1:50:74:35:cd:6e:12:15:79:e6:c0:
         1e:7c:c6:4a:e5:2c:7c:e3:d5:c2:27:30:73:94:bf:bd:c7:f8:
         89:53:92:43:fe:be:7b:e4:eb:7c:77:12:d9:ee:46:a9:7e:89:
         f1:65:8a:bb:1b:75:52:32:6d:35:7b:cc:f0:23:7c:17:c0:2f:
         bb:05:c3:65:b0:18:e0:9b:2b:49:35:45:d5:07:7c:a7:68:a9:
         9a:46:5c:cb:2a:eb:15:70:05:31:2f:a7:b0:2c:a9:56:e9:64:
         69:85:88:83:d5:4b:d9:eb:f2:e0:2b:bf:3b:db:a7:61:28:6f:
         55:ed:d4:a6:5a:5e:b0:fc:d2:df:90:4c:7b:99:1a:13:63:fa:
         25:53:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:31 2025 by rpki-client