Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133332e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133332e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          ygpavRShLKrzbFGpVsAadNLnUFOLPynsLAdG1AggJv0=
Subject key identifier:   96:45:1C:3A:CC:EB:F5:6D:34:FE:B1:1F:9F:EA:E5:21:71:A1:10:A2
Certificate issuer:       /CN=4DAC2642FACAE6887214205D5E592F569A4E611B
Certificate serial:       455DEDD7C3677B42437CA44051D23F93995FDB7D
Authority key identifier: 4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133332e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 01 Jul 2025 21:36:58 +0000
ROA not before:           Tue 01 Jul 2025 21:31:58 +0000
ROA not after:            Tue 30 Jun 2026 21:36:58 +0000
asID:                     28238
IP address blocks:        187.0.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 19:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5d:ed:d7:c3:67:7b:42:43:7c:a4:40:51:d2:3f:93:99:5f:db:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Validity
            Not Before: Jul  1 21:31:58 2025 GMT
            Not After : Jun 30 21:36:58 2026 GMT
        Subject: CN=96451C3ACCEBF56D34FEB11F9FEAE52171A110A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:4a:e0:58:57:66:ad:a9:45:5d:1b:df:b3:
                    83:47:21:c7:ec:df:90:1e:ac:38:cb:f4:35:67:3f:
                    90:3e:3d:39:05:91:e2:0e:f4:73:6d:1e:f2:9d:25:
                    1d:e9:eb:6d:e2:ce:c4:38:6d:5f:48:da:e5:50:ff:
                    f7:c9:1a:9c:6b:ad:8a:04:a5:26:99:09:db:51:c6:
                    17:aa:47:ae:8b:dc:5c:88:14:fe:9c:f8:a8:be:0e:
                    0c:ab:54:38:14:06:01:6d:dd:ba:60:c9:77:b0:b1:
                    2b:7f:f5:28:96:9c:c2:35:02:27:05:da:44:38:e4:
                    52:f8:83:2d:a7:6b:c2:dc:69:70:47:77:26:43:fb:
                    5d:17:ae:c7:24:5b:b7:44:6b:bd:ce:8f:43:3f:90:
                    86:ff:10:7d:4c:10:36:b8:2d:9e:24:f2:6e:20:7d:
                    28:f5:f7:59:bf:84:6f:d9:1d:f3:11:8e:82:67:24:
                    e0:f0:8c:1a:02:b1:33:11:32:4b:aa:58:5f:c9:17:
                    f0:5e:16:b6:0b:55:b8:2e:c9:7d:b0:c3:21:63:98:
                    f2:4b:86:57:35:39:74:9d:ac:6e:20:85:56:8f:4c:
                    91:fa:f4:ab:51:d2:22:93:bc:f6:b3:36:27:f5:7d:
                    5a:f5:86:b1:eb:04:a3:e7:f0:a4:21:95:40:d7:ff:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:45:1C:3A:CC:EB:F5:6D:34:FE:B1:1F:9F:EA:E5:21:71:A1:10:A2
            X509v3 Authority Key Identifier:
                keyid:4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133332e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:00:3c:b6:74:e3:64:f0:ef:98:6a:e2:8b:bb:07:ad:5b:2d:
         02:a2:63:46:01:f1:56:ad:06:64:6b:30:e0:2a:2c:38:88:0c:
         dc:92:0a:9e:28:17:da:2f:76:68:75:9b:d2:4e:30:19:20:fa:
         8f:90:2c:d0:f4:14:93:27:ab:4a:36:f5:29:83:08:e4:71:87:
         8d:13:d8:ee:9a:f9:0e:eb:e2:1c:d2:86:18:67:f4:3a:f9:d2:
         c3:02:7b:a4:f9:92:c3:75:5a:de:e2:92:9b:e9:4e:dc:7a:3d:
         d1:a6:5c:73:b0:a7:81:bd:21:a9:0b:98:57:5b:52:33:4f:04:
         d7:e6:3c:e8:7d:8b:ff:14:9d:1a:b7:ae:ce:d5:91:1f:49:67:
         8c:f0:f9:56:42:4a:ac:5b:10:4b:14:5d:c1:c6:7a:dd:89:d1:
         7c:0b:57:f6:7e:95:ea:6a:12:70:9a:fb:53:af:8c:80:7e:2e:
         8e:d9:87:1b:b1:ee:6f:d8:94:f9:4b:30:de:3b:41:6f:c4:b2:
         50:4e:be:fd:04:be:36:2b:99:80:c7:88:ac:6e:01:80:d8:bc:
         64:65:82:6c:91:46:ff:a3:01:f9:46:a3:4a:d2:13:38:c4:a2:
         ed:f4:7e:d5:f0:4b:99:32:f4:41:13:cb:a7:2d:c8:f6:68:88:
         06:d6:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:23:20 2025 by rpki-client