Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133352e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133352e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          OH+bsVoX3oO5MBzN5QlYYgNSgoH6kB0gw5L/u40O3DY=
Subject key identifier:   83:97:B9:4B:F7:61:B3:C4:D9:45:BF:FA:A1:CD:C5:02:84:91:56:72
Certificate issuer:       /CN=4DAC2642FACAE6887214205D5E592F569A4E611B
Certificate serial:       381A9C25B8186D18F86780B5E964F8663B37680F
Authority key identifier: 4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133352e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 01 Jul 2025 21:37:02 +0000
ROA not before:           Tue 01 Jul 2025 21:32:02 +0000
ROA not after:            Tue 30 Jun 2026 21:37:02 +0000
asID:                     28238
IP address blocks:        187.0.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 19:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1a:9c:25:b8:18:6d:18:f8:67:80:b5:e9:64:f8:66:3b:37:68:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Validity
            Not Before: Jul  1 21:32:02 2025 GMT
            Not After : Jun 30 21:37:02 2026 GMT
        Subject: CN=8397B94BF761B3C4D945BFFAA1CDC50284915672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:3a:8f:d4:fc:46:3f:b1:c9:08:bc:0a:24:
                    97:d7:2a:96:7c:5e:8c:bb:55:59:9c:70:93:6e:86:
                    a8:e9:c3:e6:c5:33:b8:e4:bf:61:b9:9b:a6:33:49:
                    f6:c2:7d:4a:ff:e3:db:ae:83:e9:88:8e:29:ac:53:
                    91:9c:e9:83:57:37:1c:69:f6:0b:06:30:4c:aa:24:
                    47:f9:71:c7:c3:6c:da:65:1f:2e:8f:fd:2c:60:97:
                    5b:2a:9d:68:c7:ab:37:59:05:76:52:fc:92:5f:be:
                    45:20:03:a1:f8:d4:05:a3:c9:27:92:19:d3:85:2e:
                    04:18:18:59:88:03:1d:6d:d8:51:b0:1f:a5:ee:6a:
                    31:b7:c6:58:26:98:49:4d:d4:6d:fd:5d:1d:56:cd:
                    aa:de:82:6d:d6:2f:aa:95:48:10:36:0d:9e:46:a1:
                    68:ac:b4:6f:23:08:33:0d:7a:bc:11:17:35:f3:ee:
                    a9:b4:15:8f:5f:51:12:1c:b0:c8:68:da:64:3e:f1:
                    04:cf:d2:22:45:cf:f3:59:b8:ad:09:6b:89:0d:21:
                    ab:83:57:48:60:ef:8f:b5:dc:9e:29:30:2c:b0:2a:
                    13:d8:ba:0e:c7:01:f0:9e:18:80:3c:0d:94:4b:95:
                    c5:7f:c6:9f:27:fa:49:bb:5a:6d:cf:df:56:fc:de:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:B9:4B:F7:61:B3:C4:D9:45:BF:FA:A1:CD:C5:02:84:91:56:72
            X509v3 Authority Key Identifier:
                keyid:4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133352e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:eb:14:48:d0:a2:4e:18:ee:0b:fe:16:7a:7b:34:58:d0:05:
         65:28:f7:99:48:76:a7:d2:b3:29:4e:8d:c0:6d:a3:0e:2c:ea:
         59:a1:b7:e5:bb:f4:54:7b:40:bf:b9:e6:67:ad:ef:ec:6e:fc:
         97:90:5d:8c:a9:87:9d:81:7a:15:1e:89:3c:4e:96:3a:e0:1f:
         ad:f2:f1:45:89:1c:4e:dc:34:b5:f2:c3:3f:8b:1c:a4:59:85:
         14:3e:49:e7:69:c5:2f:11:95:b2:6e:c3:6f:09:d2:f9:3a:b7:
         e2:31:77:66:d9:7e:73:5f:6a:88:4f:6b:e3:4a:74:f1:0c:01:
         d1:8b:32:a3:0c:d1:15:08:46:5b:58:03:69:b3:5b:11:7a:0a:
         86:40:53:09:b6:8f:f6:0e:bf:f8:1a:4d:c2:30:e1:22:32:ab:
         30:f6:36:e3:6b:77:e7:2b:d8:dd:60:bd:03:8a:cc:54:5a:64:
         1c:93:5f:23:3f:16:db:99:21:71:64:20:86:a7:e2:71:b4:d5:
         b0:f5:39:7e:ca:54:a1:b4:cb:46:9f:b3:f7:86:89:45:fc:de:
         b3:b7:03:c4:db:ea:38:1d:4d:41:e7:c5:98:6e:97:83:bb:27:
         dc:d0:16:1b:9e:55:f0:55:f1:67:41:6a:2f:e6:f6:f5:e8:cf:
         0e:fb:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:23:19 2025 by rpki-client