Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e34382e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          1MEsuExElToGqYldwAa5cKjVo0Wtv/5RKnfbj1SuMvI=
Subject key identifier:   52:48:8A:26:F7:94:F8:B6:77:7E:A0:89:6E:A4:E1:8E:F8:38:09:F7
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       4F654975C51D016FA0E57B51F637BFA29CE4322C
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32322d3232203d3e203238333532.roa
Signing time:             Mon 08 Sep 2025 14:46:36 +0000
ROA not before:           Mon 08 Sep 2025 14:41:36 +0000
ROA not after:            Mon 07 Sep 2026 14:46:36 +0000
asID:                     28352
IP address blocks:        187.0.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:65:49:75:c5:1d:01:6f:a0:e5:7b:51:f6:37:bf:a2:9c:e4:32:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Sep  8 14:41:36 2025 GMT
            Not After : Sep  7 14:46:36 2026 GMT
        Subject: CN=52488A26F794F8B6777EA0896EA4E18EF83809F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:74:f7:7c:68:8a:0b:33:0c:e2:65:9f:66:
                    0e:34:79:51:9c:f7:7f:72:18:29:40:b0:54:cb:2b:
                    cb:8e:18:da:3b:b6:b9:b8:e2:af:e9:87:c8:34:62:
                    85:9a:d8:67:4f:a8:73:3e:4c:75:48:39:ac:09:83:
                    58:41:bd:e9:33:5a:25:4e:cf:62:53:13:a9:6c:49:
                    66:4a:f4:ed:6d:5e:33:cf:77:57:9e:89:0b:c5:2d:
                    0b:e3:ce:85:6b:1c:be:40:b0:b5:18:8c:10:b7:5b:
                    47:c4:2b:7a:52:0c:a0:14:08:a8:dc:0f:51:5f:8d:
                    38:9d:21:52:b2:75:5f:9d:0b:9b:af:91:b8:46:28:
                    f9:c9:a1:cf:34:2e:b2:7d:fb:a2:c1:eb:10:4f:84:
                    41:91:c7:45:07:cd:3f:82:01:21:00:53:a2:3b:b9:
                    ca:eb:e1:b7:63:ab:ba:74:43:17:66:bd:7a:2e:30:
                    ee:06:6b:55:01:da:be:ea:44:34:39:91:c3:f4:37:
                    76:74:de:17:6f:58:68:d8:2f:69:42:9d:6d:f3:e3:
                    89:26:94:df:93:28:43:5d:06:de:87:bb:ee:1b:97:
                    73:28:9e:57:41:43:e1:eb:f3:d2:e1:50:d7:12:d5:
                    7a:f9:b0:e7:3d:f0:da:eb:16:74:33:46:e2:47:81:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:48:8A:26:F7:94:F8:B6:77:7E:A0:89:6E:A4:E1:8E:F8:38:09:F7
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:28:bc:b7:3c:97:d8:22:33:c2:42:14:57:3e:ff:0f:3f:69:
         c1:54:38:4e:c5:6f:92:36:10:1b:47:e6:c1:df:a7:5a:c3:a4:
         f4:0d:a3:e3:d3:78:c4:3b:50:df:a6:bd:10:de:81:43:85:ce:
         5b:e3:11:c9:72:42:f9:bc:cd:33:c5:b8:7a:ad:0a:91:ef:1f:
         16:a1:35:71:e5:c5:20:7e:f6:6b:f8:ae:65:3d:a7:05:23:94:
         1e:53:c5:e5:42:c0:66:ad:fc:28:43:31:16:17:99:f6:89:ca:
         08:55:49:6c:f3:91:49:cd:5a:c5:37:4d:78:82:a8:ad:71:96:
         b8:09:7d:c8:04:fe:0e:ef:26:b2:6c:06:f6:fc:15:5a:c6:e1:
         c5:38:b5:3a:88:a4:d8:2e:5c:f4:c0:8f:e8:06:c0:9f:cb:a8:
         ce:ea:ef:33:06:c4:4b:3a:a7:f9:bc:6e:10:d2:36:45:0e:9c:
         1f:27:57:20:87:44:1c:84:6f:60:06:d0:20:29:8b:d7:ff:5c:
         ae:db:e9:ad:1f:85:5e:1e:61:86:cd:1d:a0:d2:ce:51:91:59:
         83:60:7a:1b:7f:0f:58:43:00:b8:df:78:f7:2d:cb:48:a2:a5:
         fa:9a:5d:68:97:fd:e3:da:40:3e:c7:22:e1:f2:05:56:bb:c7:
         06:82:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:24:56 2025 by rpki-client