Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34342e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e34342e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          s87jVavejXofMFmibzK34AQwWeourue9fj+H1/pVTpk=
Subject key identifier:   81:A3:46:05:E4:FC:54:16:D2:AE:79:AF:00:8E:0D:A6:8B:8A:1D:69
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       05A8195D8E89A54B1E846F977409C40449A8B6B0
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34342e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:49 +0000
ROA not before:           Wed 10 Jun 2026 03:19:49 +0000
ROA not after:            Wed 09 Jun 2027 03:24:49 +0000
asID:                     28140
IP address blocks:        187.49.44.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a8:19:5d:8e:89:a5:4b:1e:84:6f:97:74:09:c4:04:49:a8:b6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:49 2026 GMT
            Not After : Jun  9 03:24:49 2027 GMT
        Subject: CN=81A34605E4FC5416D2AE79AF008E0DA68B8A1D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:d3:35:ed:93:05:6b:43:aa:9b:4a:19:2b:
                    18:09:22:ac:9b:44:3b:a9:10:58:c5:9d:ae:ed:d6:
                    63:ec:07:9b:a2:13:09:fe:77:61:4c:21:00:c9:8c:
                    be:26:ce:d4:de:34:63:c5:9c:a4:2f:5d:f6:41:2c:
                    63:fb:a5:a7:33:27:77:ea:97:ac:4b:7a:47:8f:d1:
                    d3:8a:3b:b9:58:0a:97:73:ef:f6:77:a9:0c:36:4f:
                    36:e6:96:0e:ad:9d:05:82:a0:c1:38:5d:22:59:d5:
                    f6:bf:d0:16:92:73:0f:62:6b:a2:96:06:09:b1:6b:
                    e5:bd:eb:4a:8e:7f:5a:d1:6f:77:76:3d:53:28:3b:
                    98:f2:45:d0:fb:b2:1a:90:05:f4:41:89:cd:3b:88:
                    35:f5:5c:89:60:d0:71:d8:c8:5f:9b:a9:50:7e:5a:
                    5e:0b:c2:5d:60:2d:ce:ca:83:f8:99:68:28:54:81:
                    1b:b9:aa:c1:26:26:d4:34:de:a0:2c:23:64:71:e1:
                    23:9e:3c:0a:62:a1:6d:8d:ab:90:5a:45:b0:77:e1:
                    72:c5:b5:ad:46:3f:53:89:88:1b:f1:67:f0:21:ae:
                    21:d5:32:77:b1:fd:43:a9:06:8c:5f:c8:ad:96:f9:
                    f1:0d:c5:d9:3b:a6:45:37:7c:92:b3:be:e3:db:c8:
                    57:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A3:46:05:E4:FC:54:16:D2:AE:79:AF:00:8E:0D:A6:8B:8A:1D:69
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34342e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:6a:01:89:58:81:62:9f:78:85:15:06:76:51:68:0b:53:
         c4:2f:43:aa:b1:1c:53:60:0f:ac:15:6e:3b:53:ec:2d:af:fc:
         7b:d1:60:7d:c9:c7:8c:9d:99:78:b2:3b:cd:a6:27:bc:5d:1c:
         dc:be:f0:be:ab:83:9b:a8:ea:ea:a5:8c:df:36:22:dd:98:8c:
         5b:5e:ac:cd:ec:f9:6c:6b:7b:42:d4:a6:e6:7d:a1:ac:45:1e:
         94:08:ab:78:06:2f:1c:c1:d6:6f:a4:9c:de:41:73:13:6d:e7:
         3e:40:5f:ff:f1:9f:54:cd:56:8d:82:68:4b:26:ab:b1:f3:f2:
         87:c5:22:e1:58:bd:c4:39:0f:dc:2f:c4:a5:e3:02:5a:ce:65:
         e6:9d:2f:7b:94:a9:6f:6f:e8:36:19:e5:39:b3:9e:e4:29:51:
         3e:96:18:f7:b6:3e:80:64:fd:4a:5e:65:8a:80:17:7d:2c:73:
         6c:6b:6a:c9:aa:dc:76:4a:e3:91:d5:ca:d9:8e:39:d4:5e:69:
         cd:4c:48:6f:85:9d:b0:9f:64:22:ba:46:f6:d6:c4:81:9d:44:
         2d:21:b1:1e:32:1a:52:fe:cd:6e:bb:5a:37:4e:de:1c:48:dc:
         26:d3:dc:1a:cc:b9:72:43:c0:19:20:f5:28:29:84:20:fa:3d:
         3a:dc:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:02:35 2026 by rpki-client