Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133342e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133342e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          AeSriS2f3mxZS2VZ5oWYlBvBp7BtaoWikVIMovPd2p8=
Subject key identifier:   89:D2:A7:FE:98:CA:93:1C:BC:92:93:1D:39:DB:1B:21:D8:31:FA:6E
Certificate issuer:       /CN=4DAC2642FACAE6887214205D5E592F569A4E611B
Certificate serial:       2D548C3C953FD380ED36676A61A0BF5E788FDEA4
Authority key identifier: 4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133342e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 01 Jul 2025 21:37:00 +0000
ROA not before:           Tue 01 Jul 2025 21:32:00 +0000
ROA not after:            Tue 30 Jun 2026 21:37:00 +0000
asID:                     28238
IP address blocks:        187.0.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 19:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:8c:3c:95:3f:d3:80:ed:36:67:6a:61:a0:bf:5e:78:8f:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Validity
            Not Before: Jul  1 21:32:00 2025 GMT
            Not After : Jun 30 21:37:00 2026 GMT
        Subject: CN=89D2A7FE98CA931CBC92931D39DB1B21D831FA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:77:79:13:ce:a6:0f:0a:2d:1d:b4:22:51:
                    0f:ed:cd:b1:59:f8:1b:eb:19:d8:da:af:4a:fb:08:
                    7a:47:c9:f4:e3:5a:a3:85:56:80:ea:3e:83:0f:64:
                    a4:0d:4d:c5:5a:87:69:32:a3:e0:d1:f7:16:5a:ba:
                    d6:e4:6e:30:65:41:91:f2:13:e5:34:c5:dd:5b:03:
                    00:cc:02:97:87:c4:1e:c0:f2:02:c0:b9:b1:3e:20:
                    07:98:89:3c:18:95:9f:b5:11:64:68:90:c1:5d:c9:
                    34:a7:ef:a6:48:20:79:f3:ce:c8:9b:0c:25:e7:5f:
                    da:d6:73:de:df:43:a5:e1:27:0c:7a:f4:70:36:0f:
                    a0:4d:ed:2b:ad:34:6b:0e:64:74:6c:2c:17:a8:f6:
                    8f:fd:81:9f:5a:80:01:f8:a1:a7:95:4a:77:89:77:
                    db:da:25:5b:dc:16:d5:0e:a3:39:ba:91:70:0d:85:
                    bf:bb:70:71:27:33:b2:50:37:52:97:71:18:23:9c:
                    d4:4b:18:13:68:ed:42:99:ed:31:a4:86:3f:29:18:
                    35:bd:62:ca:4c:48:96:93:09:00:62:8b:9d:02:a6:
                    c0:6a:14:7f:bb:c6:04:ea:c1:8c:d2:ac:16:7b:d5:
                    8f:9c:63:45:9f:79:9f:fc:0d:6c:1e:67:3c:d2:5c:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:A7:FE:98:CA:93:1C:BC:92:93:1D:39:DB:1B:21:D8:31:FA:6E
            X509v3 Authority Key Identifier:
                keyid:4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133342e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:15:bc:8f:9b:1b:aa:02:21:57:8c:d0:27:1a:69:de:c6:63:
         c5:5a:69:9a:e5:47:44:9c:55:10:b5:7f:c8:bd:a2:cf:af:da:
         79:e2:6a:25:69:4a:cd:75:46:a7:7d:b1:68:51:4a:41:f1:e4:
         de:21:58:5b:f7:a8:b7:69:11:d9:ef:17:46:d9:b7:64:a8:6b:
         bf:e9:17:1a:4b:8a:c9:e3:52:de:ce:23:ac:a6:de:2a:57:4b:
         05:f1:63:10:a9:c9:5c:68:2b:84:e2:2a:78:39:26:25:43:16:
         a7:73:5a:06:5c:3a:60:2c:14:2f:9c:0b:8d:d9:04:f0:03:6d:
         84:ee:19:aa:9a:42:17:cd:46:25:06:c9:bc:81:d3:7c:e0:73:
         19:7c:6f:d8:fa:42:54:09:36:4b:fb:99:45:d4:a1:3b:d1:57:
         04:90:1a:b6:3d:55:92:0a:8a:37:54:12:a0:52:e2:bd:24:b4:
         67:20:5a:69:cb:58:73:c1:e3:40:8d:29:9c:5e:c1:92:7e:7a:
         81:22:57:ba:05:64:22:4b:ab:b5:ee:5a:b8:45:5f:c6:49:d3:
         63:a8:fe:93:15:3e:5b:51:43:87:c0:64:53:42:27:69:29:96:
         08:ff:67:08:48:7c:aa:0a:ae:a3:64:42:25:e4:71:4f:43:80:
         d6:e3:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:23:19 2025 by rpki-client