Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34372e302f32342d3332203d3e203238313430.roa
File:                     3138372e34392e34372e302f32342d3332203d3e203238313430.roa (raw, json)
Hash identifier:          eN+tf3KWnOzgbstbHOc/g1gq9lOavH0Xfiv8DiQkUZ4=
Subject key identifier:   70:04:4C:CD:D8:24:1A:D5:25:32:BD:65:29:C4:6F:C0:58:BB:60:6A
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       8C8EF658A49F7034681C5BBF5E208338C642B1
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34372e302f32342d3332203d3e203238313430.roa
Signing time:             Wed 10 Jun 2026 03:24:49 +0000
ROA not before:           Wed 10 Jun 2026 03:19:49 +0000
ROA not after:            Wed 09 Jun 2027 03:24:49 +0000
asID:                     28140
IP address blocks:        187.49.47.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8c:8e:f6:58:a4:9f:70:34:68:1c:5b:bf:5e:20:83:38:c6:42:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jun 10 03:19:49 2026 GMT
            Not After : Jun  9 03:24:49 2027 GMT
        Subject: CN=70044CCDD8241AD52532BD6529C46FC058BB606A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:df:11:4a:01:85:76:48:9d:0d:9c:ec:10:78:
                    9d:38:04:3e:25:5d:d5:f9:96:09:df:08:f5:1a:fb:
                    f5:01:46:50:64:27:69:d3:09:c8:4d:90:3f:7e:a3:
                    48:a0:9c:ed:4b:1e:cc:52:59:da:d1:4c:85:2c:ea:
                    aa:f2:28:69:89:65:45:20:af:70:25:66:02:7c:47:
                    ee:3d:77:2e:b0:c8:79:22:1c:1e:f0:57:6f:59:c4:
                    3a:23:09:aa:7a:18:27:a6:c6:02:4a:17:7d:ac:4d:
                    9b:62:d2:b3:e6:a1:a9:c7:88:18:f8:5e:49:95:e4:
                    8c:09:b8:44:b9:ff:b2:99:54:d3:41:4a:b7:2f:b4:
                    37:7e:13:1d:41:f3:d1:19:b5:1a:2e:a8:65:e2:ea:
                    4f:c0:30:fc:35:24:d1:7b:4a:8c:87:3a:ba:bb:7a:
                    95:ab:1c:d1:52:1d:1e:08:c3:a8:58:1a:0c:2d:28:
                    2e:40:a3:25:fe:50:42:76:48:1c:fb:a5:f2:6e:91:
                    18:8c:53:51:0b:51:c4:80:ca:88:64:a6:0a:87:80:
                    2f:0c:5f:36:57:b5:22:28:fe:e3:38:5c:99:e9:4a:
                    f7:04:53:54:2b:fa:54:a2:e5:b8:dd:d7:ba:93:97:
                    2a:77:b1:8e:c8:44:57:75:91:e5:c9:52:e5:70:e8:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:04:4C:CD:D8:24:1A:D5:25:32:BD:65:29:C4:6F:C0:58:BB:60:6A
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e34392e34372e302f32342d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:13:2d:a6:98:e1:1c:9c:f0:8d:60:a1:14:a4:95:35:f5:
         c2:88:5b:c1:38:28:82:48:e4:47:61:ac:57:ed:fd:12:e9:6e:
         2a:ff:2d:5d:70:2e:e1:30:be:25:02:4c:1e:41:48:b7:37:8d:
         3c:c8:84:e0:89:a8:83:21:fc:6c:24:b7:a3:66:14:7b:b4:55:
         af:7f:08:40:6f:32:f3:62:de:ad:98:b8:44:4b:c8:50:15:64:
         2a:08:4b:a8:67:df:c2:06:e6:01:9a:ef:aa:f3:8d:b7:25:3d:
         06:47:f1:4e:99:68:c5:f9:33:e8:cc:1e:14:75:3b:36:a2:22:
         e1:65:63:39:57:1a:1b:d6:22:11:76:f8:8a:be:8d:68:22:e3:
         d0:3f:e3:fc:6a:bc:84:ca:4b:81:cc:39:bf:03:4c:db:49:60:
         17:90:21:07:3f:31:f8:1a:ce:b9:ce:49:d0:3d:cc:01:5c:32:
         16:64:75:eb:5e:7e:d8:79:bc:33:be:4b:73:0e:04:61:15:47:
         1f:7d:3b:29:4d:cd:27:53:ee:1b:5e:e3:f1:83:ff:dc:dc:0d:
         d1:8d:fb:ed:d6:4b:b0:df:1e:22:fb:fa:3b:b7:9e:14:01:a9:
         b3:9c:d6:f6:ec:63:61:2d:e4:46:c7:e4:69:ac:e9:ad:dc:04:
         6b:e2:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:27:41 2026 by rpki-client