Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34322e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e34322e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          9DZFCXWXDwKvTiep1GrH7CrUyKabEO5CQGXen4Jy4Mg=
Subject key identifier:   25:E9:3A:4D:15:65:6B:C8:8F:57:E2:E1:46:60:58:C3:03:DB:08:00
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       396FD96594CF597B83BB346366C33DFF902F192A
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34322e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:52 +0000
ROA not before:           Wed 10 Jun 2026 03:19:52 +0000
ROA not after:            Wed 09 Jun 2027 03:24:52 +0000
asID:                     28140
IP address blocks:        187.49.42.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6f:d9:65:94:cf:59:7b:83:bb:34:63:66:c3:3d:ff:90:2f:19:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:52 2026 GMT
            Not After : Jun  9 03:24:52 2027 GMT
        Subject: CN=25E93A4D15656BC88F57E2E1466058C303DB0800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:29:ca:1c:a6:f7:2d:fa:55:94:c7:95:00:
                    d9:3a:e0:f3:eb:75:cc:87:3c:87:f9:92:0c:4c:80:
                    10:ca:ae:e8:85:35:90:99:20:7f:2a:a4:7b:65:16:
                    51:5a:30:c5:9d:ff:3f:11:57:b8:6c:40:5e:d9:45:
                    e3:31:eb:3f:5d:77:b8:87:83:38:3e:42:9a:d2:da:
                    c8:c5:dc:a6:b2:e7:13:ef:6b:4f:73:3c:50:24:d7:
                    bd:33:f3:94:b9:e0:1e:bf:6d:5e:66:0e:70:b6:9f:
                    9a:e9:5c:c1:ca:2b:d6:da:55:72:d6:b1:97:b4:73:
                    6b:27:7f:f4:60:6d:44:bc:95:09:95:e1:80:8a:94:
                    4d:9d:dd:22:9c:8e:02:a1:a2:bc:43:73:b2:de:40:
                    4d:ce:54:80:b1:1d:57:38:89:1f:8a:9f:25:55:fb:
                    9f:39:8d:d3:6a:c1:7b:86:fb:07:be:c0:31:f1:3f:
                    56:b9:19:0a:c9:45:6c:7e:0e:04:5a:ad:19:eb:d1:
                    1b:35:3d:4b:46:c6:35:17:bd:59:f3:9f:5b:d0:18:
                    3d:8b:57:f5:5b:19:4f:61:2a:0a:a0:4d:5c:98:c4:
                    67:c5:a1:7e:87:82:63:9d:88:72:99:d7:31:bb:c1:
                    21:20:64:f0:a9:a3:af:66:e2:7a:e7:7c:e4:80:7b:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E9:3A:4D:15:65:6B:C8:8F:57:E2:E1:46:60:58:C3:03:DB:08:00
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34322e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:38:f6:6c:cd:8a:ec:41:90:26:7d:63:e5:3f:61:98:d3:36:
         6d:18:8f:f7:c3:dd:c3:e5:f8:db:cf:0d:09:a7:ef:18:42:58:
         80:c5:9c:42:0a:06:76:93:3b:d5:13:59:2e:b5:e8:56:9d:56:
         89:94:ef:fb:61:12:15:03:b2:f9:be:dc:8c:77:9c:b4:7a:97:
         95:99:5b:32:d2:e1:63:27:f4:17:81:33:f6:0c:1b:ad:85:22:
         7b:73:de:49:71:de:22:c8:fb:73:68:14:0b:2a:94:f6:a6:29:
         9f:c5:8d:43:31:ae:ef:13:57:5f:2c:3f:2c:44:3c:c8:48:7b:
         02:45:77:7d:6a:84:48:d7:85:e2:cc:ef:dc:3a:3e:64:7c:a0:
         df:27:34:32:df:20:4c:5e:84:15:41:ca:56:39:c3:2f:28:9c:
         02:41:6e:f7:7b:74:5b:53:d6:ab:6d:72:e5:4d:81:d4:46:d5:
         db:90:21:b9:a2:35:bf:8d:25:87:ec:5a:52:6a:6c:d5:bb:e7:
         57:7b:23:30:6b:30:21:23:b4:88:76:33:e8:67:fa:09:01:a7:
         91:7e:19:19:62:fd:82:3f:0e:4b:7c:22:57:3b:fd:4f:04:30:
         af:04:5e:67:d0:ab:7d:74:c5:2a:50:3e:1c:a4:87:e3:eb:22:
         17:f2:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:28:51 2026 by rpki-client