Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233382e302f32332d3234203d3e20323634323132.roa
File:                     3138372e302e3233382e302f32332d3234203d3e20323634323132.roa (raw, json)
Hash identifier:          mgYcgMTQ5cVwumu/tPZjM9VzRGAu+tgpiFmvXTgV8Dg=
Subject key identifier:   9D:94:C7:F2:02:F4:F5:5D:C7:91:69:44:B6:38:38:72:1B:15:96:66
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       4A6E808711E4ADBA5EF55B96518E3736EFB07DF3
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233382e302f32332d3234203d3e20323634323132.roa
Signing time:             Tue 29 Jul 2025 21:43:32 +0000
ROA not before:           Tue 29 Jul 2025 21:38:32 +0000
ROA not after:            Tue 28 Jul 2026 21:43:32 +0000
asID:                     264212
IP address blocks:        187.0.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 23:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6e:80:87:11:e4:ad:ba:5e:f5:5b:96:51:8e:37:36:ef:b0:7d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Jul 29 21:38:32 2025 GMT
            Not After : Jul 28 21:43:32 2026 GMT
        Subject: CN=9D94C7F202F4F55DC7916944B63838721B159666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:0b:bb:70:a7:dd:3c:d5:73:49:16:61:f5:
                    e0:dc:71:2d:33:0b:b3:e5:cd:e0:c4:d9:28:da:a1:
                    f6:65:ee:3b:00:3b:03:a9:b7:6c:b6:b4:19:ca:80:
                    a5:11:cd:7f:a7:48:cd:e5:d2:9a:20:90:55:ac:07:
                    a3:ea:3e:02:02:0b:b3:0e:85:98:db:07:95:b8:14:
                    f1:8a:54:f6:a8:09:04:a8:e4:9e:50:91:77:1c:e8:
                    c5:99:81:1b:7e:1f:85:98:46:c7:d2:54:9b:60:10:
                    94:48:02:58:b7:e3:40:80:de:8e:39:be:28:05:1c:
                    27:3c:2b:f9:ef:95:31:1c:e3:1d:74:5d:1f:8d:39:
                    3d:0d:76:2c:f8:a5:bb:86:8e:52:4e:24:56:b0:ae:
                    a5:8d:34:be:26:b9:f5:60:ec:b1:12:d6:93:aa:7c:
                    c4:1b:9c:b1:37:4e:48:1c:06:2e:7c:0b:98:cb:dd:
                    92:21:40:8c:19:e8:47:0a:bb:ef:a7:22:d4:96:ee:
                    72:9e:65:76:f1:26:48:cb:41:c3:42:bc:ae:d6:96:
                    c7:fc:ce:21:54:6e:34:1f:58:fe:1d:c6:7b:e1:7b:
                    93:6b:bb:9f:ff:0b:ae:64:70:63:ac:00:91:ee:c1:
                    f7:49:2e:50:ca:ae:ba:f9:5c:7a:8b:e9:1f:65:cb:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:94:C7:F2:02:F4:F5:5D:C7:91:69:44:B6:38:38:72:1B:15:96:66
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233382e302f32332d3234203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:e1:c7:b0:6b:6d:a2:37:47:a4:89:50:95:5a:15:81:1e:
         36:9f:7f:d1:ec:3a:db:98:56:13:71:71:6b:fc:ee:09:0a:99:
         0a:98:22:66:91:3d:70:80:5f:c0:87:52:bb:ed:bd:4c:3c:10:
         d6:b8:84:99:a4:b2:0b:fe:6a:18:bd:6a:df:ec:d4:a9:02:d0:
         d2:a8:65:94:02:3a:21:b0:fd:e0:91:59:ef:fc:6c:fb:ae:fc:
         74:a7:8f:82:14:be:a0:f8:53:5b:b1:24:59:b7:41:80:6f:93:
         82:13:fc:04:33:32:36:c6:3d:44:5c:fb:84:3e:8a:33:90:ba:
         81:3c:3a:30:e3:c5:97:a2:5b:ec:4b:db:8c:43:ff:79:f1:4a:
         2c:5e:92:fb:94:72:5d:c2:cc:1c:42:c7:11:04:be:9f:04:ab:
         45:ef:bc:82:90:67:76:a9:37:ad:3f:e4:60:af:12:6a:5a:e0:
         b0:c7:d2:f7:ac:37:84:38:18:a0:ae:8d:27:22:4f:6f:a0:04:
         af:6f:04:40:58:2b:72:d5:45:8a:e8:62:4f:86:cf:b6:ab:69:
         c7:60:8f:fa:10:01:c0:e8:4b:1d:b0:93:f4:60:3a:c4:45:74:
         62:e9:32:83:b5:cd:6d:0b:0e:50:ec:f9:69:88:de:07:61:9a:
         07:47:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 14:49:28 2025 by rpki-client