Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133362e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133362e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          LyTlk7GsdZsrCVn4oKwoi9QuARj+UCbUAH/ce8IWXWI=
Subject key identifier:   CB:1A:9E:CF:1D:58:58:14:5E:02:C7:26:C4:BB:BF:7D:17:94:B8:32
Certificate issuer:       /CN=4DAC2642FACAE6887214205D5E592F569A4E611B
Certificate serial:       30DB5FC32F35217D6DE93A93710B9B354AA765DA
Authority key identifier: 4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133362e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 01 Jul 2025 21:37:05 +0000
ROA not before:           Tue 01 Jul 2025 21:32:05 +0000
ROA not after:            Tue 30 Jun 2026 21:37:05 +0000
asID:                     28238
IP address blocks:        187.0.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 19:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:db:5f:c3:2f:35:21:7d:6d:e9:3a:93:71:0b:9b:35:4a:a7:65:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Validity
            Not Before: Jul  1 21:32:05 2025 GMT
            Not After : Jun 30 21:37:05 2026 GMT
        Subject: CN=CB1A9ECF1D5858145E02C726C4BBBF7D1794B832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5d:b7:53:d1:d3:34:15:72:f9:0c:7b:9d:96:
                    91:56:66:d9:7f:3d:03:d1:58:13:48:2a:7e:49:30:
                    14:ea:6d:ef:7c:9c:fa:7c:89:9d:02:df:76:cf:7b:
                    ac:5f:ab:d4:69:e5:b5:43:92:ce:8c:76:7f:0c:fa:
                    15:d9:8f:91:88:9a:04:ca:44:a5:dd:4d:54:1d:d4:
                    24:17:7e:2a:b7:aa:f8:7e:f3:a4:67:5e:92:0b:1f:
                    aa:fb:a6:eb:3d:d0:e6:e4:44:d1:4d:23:44:c1:d7:
                    8b:b8:10:fd:ec:91:33:4a:b2:3d:77:d7:fb:0a:e9:
                    0d:1a:c7:b5:d2:9c:2e:c7:0f:a4:55:3d:b5:a4:dc:
                    b7:cc:43:7a:df:45:42:e7:1e:48:92:98:8a:4e:66:
                    aa:01:2e:ca:fd:60:ed:b8:e2:11:78:a1:77:32:ba:
                    99:77:d6:30:af:ed:d4:30:31:48:a0:52:d2:fe:ac:
                    1f:d3:4b:c0:a8:59:47:9a:6a:80:f6:d8:99:36:44:
                    7b:11:08:ae:69:ee:5a:46:5e:82:7c:83:db:f6:2f:
                    57:f2:e6:43:06:c4:71:34:9d:22:e8:95:92:71:e9:
                    16:ab:cb:f8:6a:8d:85:10:e2:3e:25:2a:ad:af:e8:
                    3e:1e:da:c2:fc:a2:2b:cf:35:4a:a3:49:d2:86:20:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1A:9E:CF:1D:58:58:14:5E:02:C7:26:C4:BB:BF:7D:17:94:B8:32
            X509v3 Authority Key Identifier:
                keyid:4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133362e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:01:26:22:c5:d4:86:eb:2f:90:ea:db:3c:b9:53:f5:5d:dc:
         5b:1b:13:c8:76:d6:95:85:92:71:12:f3:b0:41:c8:1f:1b:a7:
         6e:7f:e7:e9:1e:f3:d4:17:91:9f:2a:d7:d2:75:c3:84:1e:89:
         45:2f:21:20:c0:70:91:b8:ce:2d:33:22:1e:1b:1d:4a:b2:7a:
         20:5c:f8:dd:d1:87:a9:c7:b1:56:3c:77:1d:45:38:b5:63:04:
         1d:07:d0:6c:ce:31:0a:e5:75:54:6f:4e:b2:41:05:44:b9:f3:
         63:48:bb:97:f6:cf:1a:b2:4a:97:e7:86:38:65:03:f2:db:cd:
         df:54:8f:f3:f0:69:41:78:07:8b:5a:e0:4a:25:8e:e8:e6:0a:
         c1:48:d1:2c:df:44:b5:da:39:2e:09:6f:9a:7f:8b:8f:f0:06:
         f7:aa:14:1c:bf:20:05:18:8f:61:8c:e7:b2:6d:ce:cb:b7:d2:
         05:3b:fa:42:5d:fc:9b:b6:f0:12:3f:08:4d:59:00:61:8e:07:
         94:59:40:d5:c7:b7:bd:ea:6b:16:fd:29:b6:e2:f8:25:ea:0e:
         6d:52:d7:ad:d9:6d:4b:b8:a1:7d:0e:69:9d:34:25:68:21:d6:
         f9:e8:00:0d:84:e3:b2:1e:07:99:a3:79:33:79:7d:da:ad:c9:
         f4:dd:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:22:38 2025 by rpki-client