Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3134312e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3134312e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          rl2BcOWFzuBdq86wFEdxon+OsptCjybcpYWqDjCf+U8=
Subject key identifier:   A8:C9:9C:12:20:18:7E:D8:FD:F5:13:B7:CD:CC:EE:87:08:CB:A3:21
Certificate issuer:       /CN=4DAC2642FACAE6887214205D5E592F569A4E611B
Certificate serial:       493748F777C3690C99B4B717B1140D952E3CB20B
Authority key identifier: 4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3134312e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 01 Jul 2025 21:37:17 +0000
ROA not before:           Tue 01 Jul 2025 21:32:17 +0000
ROA not after:            Tue 30 Jun 2026 21:37:17 +0000
asID:                     28238
IP address blocks:        187.0.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 19:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:37:48:f7:77:c3:69:0c:99:b4:b7:17:b1:14:0d:95:2e:3c:b2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DAC2642FACAE6887214205D5E592F569A4E611B
        Validity
            Not Before: Jul  1 21:32:17 2025 GMT
            Not After : Jun 30 21:37:17 2026 GMT
        Subject: CN=A8C99C1220187ED8FDF513B7CDCCEE8708CBA321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bc:70:40:fd:6b:8e:ee:6c:b9:a7:c6:13:88:
                    25:ec:cd:77:97:f4:6e:7b:56:cf:68:ed:81:0e:bb:
                    60:f4:72:27:ff:67:66:91:cd:e8:b9:e5:60:81:6d:
                    4e:67:a1:63:38:cb:5f:0a:45:5f:24:8f:81:7c:3f:
                    58:ee:0e:ca:71:c5:60:21:90:1c:0e:b1:3d:a7:d7:
                    21:e9:0a:9a:c8:91:9a:80:d2:f9:ad:45:6e:61:12:
                    2d:22:28:b1:95:c4:b8:47:90:aa:63:73:ac:4f:d8:
                    2d:f7:e1:42:a9:0e:80:91:47:72:57:a9:4c:7a:14:
                    1f:af:35:50:47:42:c0:7f:40:e0:2f:85:78:33:e6:
                    24:8a:f7:45:9c:93:4c:19:86:12:77:90:5c:cb:1e:
                    d4:9a:a7:3a:8e:46:5d:0f:a2:1a:eb:58:36:66:79:
                    65:b4:20:64:61:4b:8f:a7:75:17:2d:e3:8a:fa:0f:
                    d8:d1:d9:60:57:49:a8:3b:dc:bd:2d:28:5b:17:85:
                    f3:d4:4d:e5:9c:3f:c5:be:b7:d4:67:78:14:ee:6e:
                    38:b6:16:28:bc:56:61:c0:b8:12:83:ea:cd:b8:97:
                    59:a1:4b:72:05:54:63:c6:be:ae:a9:fe:e9:1e:ef:
                    7a:12:6e:df:00:2e:a8:b5:7f:fe:c3:25:69:4f:90:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C9:9C:12:20:18:7E:D8:FD:F5:13:B7:CD:CC:EE:87:08:CB:A3:21
            X509v3 Authority Key Identifier:
                keyid:4D:AC:26:42:FA:CA:E6:88:72:14:20:5D:5E:59:2F:56:9A:4E:61:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/4DAC2642FACAE6887214205D5E592F569A4E611B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DAC2642FACAE6887214205D5E592F569A4E611B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3134312e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:83:c2:a7:68:0d:5a:e5:82:02:71:b9:01:c6:59:44:71:2c:
         77:0d:f1:df:1c:a2:7d:d9:30:b9:35:13:77:d4:f2:da:ea:27:
         b8:35:ed:8b:d5:53:37:8a:e8:c1:1e:f4:a5:b6:64:c8:7c:00:
         2d:4e:f7:77:04:aa:30:73:a4:67:2e:45:68:f2:5b:97:bd:d0:
         ac:33:fb:e5:0b:1a:a3:d8:fb:e4:b3:84:3c:6e:40:5c:fc:5c:
         82:ac:e2:6f:ea:45:ff:6c:b6:94:95:32:41:1a:80:d1:95:e4:
         65:40:01:1b:3f:1f:69:ae:65:1b:87:e6:49:46:54:28:9d:20:
         31:ac:36:54:cf:71:02:69:fd:7d:de:b9:20:87:70:5d:20:0f:
         d9:95:2d:67:ac:a4:12:d2:ba:9c:16:7c:a6:7d:ec:f0:82:ee:
         e9:6f:59:e6:7f:c7:a0:47:fd:42:0a:1a:11:c5:bf:8f:d3:b6:
         98:66:b8:6e:45:89:2a:ee:9b:5f:ce:bc:41:48:f8:94:ba:8d:
         7d:da:40:02:34:07:11:ed:dd:a0:12:2d:34:ac:5f:3e:c6:0e:
         e9:6e:7a:57:32:db:fb:a5:32:f7:56:e6:2c:e7:b0:00:2d:b6:
         fc:57:de:bd:41:97:31:af:99:15:2c:b3:c0:3b:74:be:52:0d:
         16:a3:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:23:23 2025 by rpki-client