Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234352e302f32342d3234203d3e20333936353039.roa
File:                     3138372e3130322e3234352e302f32342d3234203d3e20333936353039.roa (raw, json)
Hash identifier:          THBtDrQJHNKyn04P36MfTYOqmM2FORYwjp4YMQPP4lI=
Subject key identifier:   A1:DA:AE:CA:17:AF:82:A9:F5:98:A3:C6:E4:2F:CF:F2:A0:09:9A:F2
Certificate issuer:       /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
Certificate serial:       0CC39C20DAC5103D9B1C5A31300742BE5F782982
Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234352e302f32342d3234203d3e20333936353039.roa
Signing time:             Wed 24 Sep 2025 01:45:14 +0000
ROA not before:           Wed 24 Sep 2025 01:40:14 +0000
ROA not after:            Wed 23 Sep 2026 01:45:14 +0000
asID:                     396509
IP address blocks:        187.102.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Oct 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c3:9c:20:da:c5:10:3d:9b:1c:5a:31:30:07:42:be:5f:78:29:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
        Validity
            Not Before: Sep 24 01:40:14 2025 GMT
            Not After : Sep 23 01:45:14 2026 GMT
        Subject: CN=A1DAAECA17AF82A9F598A3C6E42FCFF2A0099AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:cb:c8:91:53:93:22:64:23:4f:54:37:be:
                    3a:e6:c3:21:ac:1c:90:66:06:be:1f:37:1b:4f:45:
                    0b:58:bc:02:3b:3f:e9:4d:f6:57:6f:40:17:29:45:
                    a1:6e:19:c7:ba:1f:57:1f:42:f3:d1:39:f8:62:81:
                    8f:11:0d:46:a3:c4:10:21:1e:1e:60:b1:68:af:ef:
                    58:2a:7e:34:f0:86:47:cb:f6:a8:a7:a8:95:19:76:
                    64:f8:7d:c6:c7:ae:e4:e6:6a:bd:87:46:f5:93:c8:
                    31:b1:37:69:96:f1:25:40:9f:7b:02:c4:e8:58:ee:
                    6a:fb:6b:36:51:c8:6e:6d:5a:6f:51:b5:a9:1b:b3:
                    09:ee:0c:ab:ee:f7:e8:1b:97:dc:02:49:dc:18:3f:
                    c9:66:61:43:00:91:24:55:21:aa:51:b9:3c:80:49:
                    66:ed:0b:87:11:d0:df:ba:21:37:fd:dc:cf:e5:73:
                    17:2b:9e:96:79:e8:f5:f1:87:0c:e4:4e:d8:68:77:
                    4d:e6:c5:bf:c3:13:10:1a:2e:9c:01:f4:09:3f:fa:
                    71:eb:2f:e0:38:70:f9:5b:76:a4:76:03:4a:7b:25:
                    f3:b7:45:2b:79:70:6d:08:51:a2:f4:78:88:ee:96:
                    65:db:93:9a:c5:31:e7:a2:dc:94:b6:d5:60:60:cc:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DA:AE:CA:17:AF:82:A9:F5:98:A3:C6:E4:2F:CF:F2:A0:09:9A:F2
            X509v3 Authority Key Identifier:
                keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3138372e3130322e3234352e302f32342d3234203d3e20333936353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:b3:cf:28:63:5d:b5:f4:63:06:a8:3f:4d:56:23:c0:1a:8c:
         f1:87:8a:31:ef:ec:b1:52:0a:03:d2:6a:4a:13:b7:5a:b0:c8:
         6e:75:c5:23:16:51:03:91:fb:29:b3:20:b5:09:c5:11:dd:b7:
         51:f5:bb:fc:29:44:ed:f0:ac:19:77:1a:ae:67:21:34:22:22:
         c1:71:7d:2a:e8:fe:91:36:53:c3:89:a1:40:fa:d7:c3:4e:d0:
         6f:85:72:09:66:b3:70:c1:57:8f:b2:94:ad:5b:9c:07:27:92:
         a5:62:25:63:ff:82:0c:52:ed:08:c1:ac:53:29:a9:69:02:35:
         a5:5f:c7:52:86:c0:02:a2:b7:03:76:92:58:1e:11:b0:4d:09:
         b7:4c:fd:94:bd:91:e7:84:84:ff:58:d3:6e:5b:5c:39:e7:7e:
         92:54:83:0f:f0:87:d5:7b:7b:90:43:da:35:36:87:89:99:ee:
         67:13:3f:99:07:1b:16:b1:63:18:e7:dd:29:91:ab:33:6e:de:
         1a:e5:38:c0:6c:14:f4:c3:1f:49:c5:f3:f9:ad:d5:b4:39:7e:
         e8:42:74:9d:fa:45:1d:a9:0a:3c:66:94:3c:4f:c9:30:52:2d:
         47:d3:f3:7d:ba:90:a6:ff:4a:a7:99:62:f0:40:cd:f8:1a:8b:
         56:ed:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:10:41 2025 by rpki-client