Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34332e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e34332e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          ytoQ+o9ipPOUTCv3lJ/g2r13EDW25eOGUMxfCSaNPn8=
Subject key identifier:   C4:19:30:53:B8:8F:8C:FF:8B:40:F6:FA:72:9E:32:D6:C0:3C:11:BC
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       43A6DF8243286A738AD729B48A3E88B3EEAAEE27
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34332e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 09 Jul 2025 02:51:53 +0000
ROA not before:           Wed 09 Jul 2025 02:46:53 +0000
ROA not after:            Wed 08 Jul 2026 02:51:53 +0000
asID:                     28140
IP address blocks:        187.49.43.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 01:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a6:df:82:43:28:6a:73:8a:d7:29:b4:8a:3e:88:b3:ee:aa:ee:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  9 02:46:53 2025 GMT
            Not After : Jul  8 02:51:53 2026 GMT
        Subject: CN=C4193053B88F8CFF8B40F6FA729E32D6C03C11BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:b3:8e:2d:66:76:b1:ec:59:32:69:14:dc:
                    a8:39:6e:e7:80:9e:74:6a:69:61:53:fe:63:8e:5f:
                    4d:74:c7:f6:89:aa:1f:64:96:78:20:a5:dd:90:bb:
                    dc:80:0c:3e:68:26:54:54:98:8b:b6:90:d3:e3:44:
                    76:63:9d:7b:09:df:5f:49:5e:1f:46:f4:be:29:e2:
                    f7:b2:22:e8:01:90:9f:67:35:95:4a:76:c9:ac:eb:
                    db:f6:c1:fd:5f:09:f3:33:3b:83:ff:d1:e1:03:ea:
                    ab:f8:21:cb:0c:cb:c2:2d:77:c1:11:60:f4:6a:c0:
                    ec:55:2f:68:c7:7a:eb:0c:7d:e8:5f:f5:d6:20:20:
                    f4:fe:c6:18:1d:e2:00:ad:40:c9:2c:c1:21:75:e2:
                    c9:46:67:6d:13:85:92:08:e9:e7:c7:cf:07:ef:cc:
                    96:5b:a9:00:e6:d0:53:f9:ab:5d:c5:a9:b8:1a:5b:
                    6b:79:9a:0e:32:60:d2:9b:5e:c8:02:77:c1:8f:41:
                    5a:53:cf:73:b0:c9:44:55:5a:13:07:db:c6:2f:57:
                    3a:e9:c3:0c:83:ec:88:f5:6a:fa:8e:6b:ec:17:92:
                    7d:de:00:a0:2c:85:5b:f0:e9:a5:11:28:7d:d7:04:
                    30:57:06:ca:e1:db:a9:3d:3c:c1:1b:a3:6d:24:16:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:19:30:53:B8:8F:8C:FF:8B:40:F6:FA:72:9E:32:D6:C0:3C:11:BC
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34332e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:40:5f:f5:ff:13:3b:b0:aa:3e:d9:a1:f4:9b:86:3b:4a:
         d0:21:e2:4c:54:78:24:50:c7:2d:a2:cc:b0:29:b2:27:06:04:
         ee:05:b0:8d:7c:47:3d:05:00:92:f4:5e:9d:f9:10:22:58:c5:
         53:3f:d6:cf:08:be:d4:9f:c7:a8:32:1b:30:8f:ea:08:02:74:
         af:01:d6:ad:91:af:37:40:c8:54:be:16:96:79:2e:fd:da:a5:
         d4:91:6c:f3:12:76:2f:8c:f4:0c:7a:1c:0c:bd:93:40:ec:48:
         3a:48:b6:d3:63:4c:28:18:f4:93:a4:2b:95:7f:19:4e:39:fc:
         5b:aa:d1:62:64:9d:fd:31:f1:9d:1f:37:a7:8b:42:44:4b:83:
         8c:28:f8:a9:3e:52:fa:28:14:e8:e0:e7:3d:3e:5d:f7:a3:26:
         44:2a:ed:af:b1:2d:76:39:b8:78:2b:78:df:bd:b0:66:fb:76:
         6b:40:7f:2b:92:bb:d2:77:96:31:e3:5c:86:ce:eb:36:ef:9f:
         e8:60:c6:4c:47:6b:54:56:14:16:c3:ab:88:7e:0a:ac:09:a7:
         0c:71:75:e4:8e:61:3d:23:ae:a5:65:1c:6a:28:c1:26:d9:1f:
         cf:75:1a:0c:c5:f0:f7:70:fa:b4:43:fe:eb:04:d3:a0:02:5e:
         06:44:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:02:10 2025 by rpki-client