Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133392e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          g8S4Ho45NLYfp7x34Th4+hV7qf5d1Dg7vLabfUMMpfI=
Subject key identifier:   72:FA:EE:91:1B:C4:7F:86:1F:A4:07:28:D6:5A:96:E8:F9:A9:67:62
Certificate issuer:       /CN=4DAC2642FACAE6887214205D5E592F569A4E611B
Certificate serial:       3024165CC57FBAABBC8AC0BB6375B7B7587C13A7
Authority key identifier: 4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 01 Jul 2025 21:37:13 +0000
ROA not before:           Tue 01 Jul 2025 21:32:13 +0000
ROA not after:            Tue 30 Jun 2026 21:37:13 +0000
asID:                     28238
IP address blocks:        187.0.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 19:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:24:16:5c:c5:7f:ba:ab:bc:8a:c0:bb:63:75:b7:b7:58:7c:13:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Validity
            Not Before: Jul  1 21:32:13 2025 GMT
            Not After : Jun 30 21:37:13 2026 GMT
        Subject: CN=72FAEE911BC47F861FA40728D65A96E8F9A96762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:6b:df:df:0d:33:d3:68:ab:dc:56:24:6d:
                    67:a6:06:d8:30:1c:27:7d:22:5d:9b:b5:e1:f8:f8:
                    61:ef:ac:de:bf:6e:9e:3d:c7:0a:49:22:08:1c:5b:
                    86:24:af:6e:54:b8:40:dd:10:bc:e5:f9:76:fb:e1:
                    b6:30:2d:a2:de:d8:f6:bc:eb:3b:c8:db:4d:bf:f3:
                    3e:e9:8e:60:24:0e:43:0f:24:f2:cd:69:f0:8c:fe:
                    72:23:86:37:14:df:94:a7:52:11:58:9f:24:6b:f5:
                    d7:2f:9d:2c:f4:8b:5e:35:fd:2c:f6:3c:13:13:44:
                    74:97:34:88:a3:3e:4b:e0:57:54:1b:76:ed:fb:0c:
                    d7:39:1c:5f:63:2f:af:6b:5b:89:36:44:45:0e:0c:
                    74:72:2c:27:59:cb:8c:c0:60:f4:1e:6e:0a:4a:45:
                    14:63:e5:ee:6c:c7:3b:a6:15:49:89:2e:7e:20:dc:
                    47:f1:bc:c1:06:6e:4e:1c:89:64:18:de:be:50:96:
                    d3:3e:46:f7:e7:9f:b7:67:95:d2:12:28:ff:5d:6b:
                    05:32:24:aa:cf:78:92:b8:f9:e4:9d:14:8d:46:db:
                    87:8d:1d:81:5e:18:02:51:97:99:3a:fb:f9:14:ef:
                    01:71:c4:00:31:a5:0d:30:07:25:11:9c:9e:24:f0:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FA:EE:91:1B:C4:7F:86:1F:A4:07:28:D6:5A:96:E8:F9:A9:67:62
            X509v3 Authority Key Identifier:
                keyid:4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133392e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:06:b0:b0:b6:56:1e:a9:1f:38:91:06:e2:34:55:6d:3b:bc:
         c9:7a:c9:59:48:da:3c:10:75:cc:ff:77:79:f9:29:e9:d2:27:
         4c:81:0c:9e:4a:04:93:4a:b9:4f:ea:40:27:9b:0f:5d:59:51:
         b4:42:1f:d0:7c:8b:74:bd:b9:ad:d4:36:af:06:de:bf:63:db:
         c2:7b:a9:1d:7b:15:2a:fe:28:ef:c9:ff:fc:0b:ce:54:48:0d:
         16:ec:af:94:dd:4b:50:ce:50:2e:92:13:ef:2c:47:95:7a:9c:
         3b:37:b6:43:84:12:c7:5a:69:7d:11:65:e2:77:4b:75:7e:71:
         12:c1:ac:a5:06:b5:4b:e6:da:cd:1d:c8:7b:d8:5c:f0:1b:b2:
         49:53:7a:87:51:ce:14:bf:14:bb:7d:21:15:c0:47:93:58:a7:
         2b:5a:bc:18:ae:eb:e7:c5:72:71:40:f8:c0:2a:f4:0f:71:6b:
         58:32:76:72:59:17:1c:8b:c9:8a:39:dc:79:67:63:a0:57:b5:
         7a:49:1e:b7:82:65:32:41:0b:5e:f1:d9:ed:a0:d2:86:95:c2:
         a9:3e:ea:f8:fb:df:5d:01:8b:bb:42:e4:e8:39:8c:11:60:3f:
         aa:40:a3:41:89:eb:4e:a9:86:1e:9f:2a:9f:af:42:5f:29:0c:
         35:a0:e3:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMCQWXMV/uqu8isC7Y3W3t1h8E6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERBQzI2NDJGQUNBRTY4ODcyMTQyMDVENUU1OTJGNTY5
QTRFNjExQjAeFw0yNTA3MDEyMTMyMTNaFw0yNjA2MzAyMTM3MTNaMDMxMTAvBgNV
BAMTKDcyRkFFRTkxMUJDNDdGODYxRkE0MDcyOEQ2NUE5NkU4RjlBOTY3NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMGvf3w0z02ir3FYkbWemBtgw
HCd9Il2bteH4+GHvrN6/bp49xwpJIggcW4Ykr25UuEDdELzl+Xb74bYwLaLe2Pa8
6zvI202/8z7pjmAkDkMPJPLNafCM/nIjhjcU35SnUhFYnyRr9dcvnSz0i141/Sz2
PBMTRHSXNIijPkvgV1Qbdu37DNc5HF9jL69rW4k2REUODHRyLCdZy4zAYPQebgpK
RRRj5e5sxzumFUmJLn4g3EfxvMEGbk4ciWQY3r5QltM+Rvfnn7dnldISKP9dawUy
JKrPeJK4+eSdFI1G24eNHYFeGAJRl5k6+/kU7wFxxAAxpQ0wByURnJ4k8AbvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcvrukRvEf4YfpAco1lqW6PmpZ2IwHwYDVR0j
BBgwFoAUTawmQvrK5ohyFCBdXlkvVppOYRswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVZMZXRncG5SSmFUdzdpYlEzeVpmbUVVNnhzczkzUk45RExCUmVFNG9O
NVkvMC80REFDMjY0MkZBQ0FFNjg4NzIxNDIwNUQ1RTU5MkY1NjlBNEU2MTFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREQUMyNjQyRkFDQUU2ODg3
MjE0MjA1RDVFNTkyRjU2OUE0RTYxMUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlWTGV0Z3BuUkphVHc3aWJRM3laZm1FVTZ4c3M5M1JOOURMQlJlRTRvTjVZLzAv
MzEzODM3MmUzMDJlMzEzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsAizANBgkqhkiG9w0BAQsFAAOCAQEANgawsLZWHqkf
OJEG4jRVbTu8yXrJWUjaPBB1zP93efkp6dInTIEMnkoEk0q5T+pAJ5sPXVlRtEIf
0HyLdL25rdQ2rwbev2PbwnupHXsVKv4o78n//AvOVEgNFuyvlN1LUM5QLpIT7yxH
lXqcOze2Q4QSx1ppfRFl4ndLdX5xEsGspQa1S+bazR3Ie9hc8BuySVN6h1HOFL8U
u30hFcBHk1inK1q8GK7r58VycUD4wCr0D3FrWDJ2clkXHIvJijnceWdjoFe1ekke
t4JlMkELXvHZ7aDShpXCqT7q+PvfXQGLu0Lk6DmMEWA/qkCjQYnrTqmGHp8qn69C
XykMNaDjBg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 10:24:03 2025 by rpki-client