Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3232203d3e203238353736.roa
File:                     3138392e33382e31362e302f32322d3232203d3e203238353736.roa (raw, json)
Hash identifier:          TSCQiGqQY3zf4kmFXwvxpmNuz5sJuKSpQP3grRPl2VQ=
Subject key identifier:   3F:6D:B0:8F:2B:08:E4:89:B8:AB:F6:76:23:CF:33:E3:CF:35:40:FE
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       273757900A744516618F7B0A5C87E5ADE0ADB129
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3232203d3e203238353736.roa
Signing time:             Fri 04 Jul 2025 21:12:11 +0000
ROA not before:           Fri 04 Jul 2025 21:07:11 +0000
ROA not after:            Fri 03 Jul 2026 21:12:11 +0000
asID:                     28576
IP address blocks:        189.38.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:37:57:90:0a:74:45:16:61:8f:7b:0a:5c:87:e5:ad:e0:ad:b1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Jul  4 21:07:11 2025 GMT
            Not After : Jul  3 21:12:11 2026 GMT
        Subject: CN=3F6DB08F2B08E489B8ABF67623CF33E3CF3540FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b7:e6:6a:19:fd:16:f1:3d:73:57:f6:55:3b:
                    ed:7a:d9:fd:86:94:df:92:30:f4:ef:84:47:d5:1c:
                    b2:ca:d5:7a:0c:9e:e1:28:6c:e4:bb:ec:c4:21:c6:
                    dc:f9:a9:ad:63:eb:69:7b:1d:30:af:9c:b5:10:b3:
                    b7:50:43:97:74:c4:b6:79:14:a9:ae:e6:af:4f:67:
                    e4:fd:48:b5:eb:a1:08:0c:ba:5d:d9:99:ff:39:6e:
                    22:5d:59:55:37:ab:cf:24:b5:c7:4d:b2:f8:d4:49:
                    06:4a:2f:c9:92:bb:ae:d4:32:ec:34:f5:eb:b6:5c:
                    90:6b:bc:0a:50:0a:42:f1:14:2c:d7:8c:39:cf:45:
                    9d:20:40:cc:47:f2:73:8d:ff:fb:ff:41:14:67:70:
                    4a:ff:76:34:6f:ed:fd:b0:45:75:74:f1:2a:dc:e2:
                    d6:85:19:80:4d:09:93:b1:2a:06:50:6e:ba:3f:d8:
                    63:d5:b0:b9:8a:b8:35:85:5e:10:bb:ba:c8:4f:ec:
                    03:b8:e4:27:f7:4a:63:2d:06:82:9a:fe:ac:df:3d:
                    b1:11:15:a9:a5:42:69:10:b1:97:4f:b4:44:f0:ab:
                    71:98:f3:c7:49:ad:54:66:4b:52:60:f2:a2:53:2c:
                    85:e3:64:0f:2f:1d:fc:9e:d5:00:9e:f7:39:0e:9a:
                    8e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6D:B0:8F:2B:08:E4:89:B8:AB:F6:76:23:CF:33:E3:CF:35:40:FE
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3232203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:22:1b:3d:16:fa:32:f4:95:a6:24:bc:c4:8c:4c:f3:d4:
         a7:4f:90:f0:2f:97:24:ff:3a:22:eb:6e:05:9a:cf:2a:58:98:
         e6:30:52:19:19:f1:13:53:43:80:1c:73:6d:ff:ea:7e:73:73:
         59:fb:8d:c9:77:22:81:98:7f:1d:70:99:1f:e0:f8:ff:75:92:
         91:7d:25:5d:17:37:52:7c:e6:95:75:e7:46:70:b3:8f:47:d2:
         09:5a:50:5d:87:95:e6:e0:51:58:f4:5c:54:ee:1a:6b:d6:5b:
         2b:63:03:61:63:21:a6:cc:fd:cb:ed:63:a9:1b:d1:c3:50:55:
         a3:2b:83:cd:bf:58:f1:75:5e:85:42:64:71:b8:81:b1:bc:3f:
         d9:cd:f4:55:c0:d7:5b:f1:bd:53:b7:7c:4c:6f:b6:f1:4d:86:
         70:7d:a6:da:a6:75:ac:44:33:1d:be:59:5e:bc:80:b6:a3:68:
         67:38:11:74:4b:9e:ce:96:9d:a3:0d:e5:8f:db:fc:09:0d:17:
         30:ac:20:e8:31:2c:f3:3e:7c:bc:e6:5b:7d:e1:10:70:78:a8:
         bd:71:d8:6a:41:53:39:6c:e8:c7:ad:0a:0b:b1:80:21:cb:4d:
         7b:0c:82:aa:c5:47:30:8d:3d:1e:ab:20:d8:18:31:73:a2:00:
         32:0d:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:19:21 2025 by rpki-client