Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33352e302f32342d3234203d3e203533303532.roa
File:                     3138372e38342e33352e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier:          bZVmKTe4oncs3dZRChOZ0UYNu+g+uqMW4C2vDaiETUQ=
Subject key identifier:   DD:56:26:BE:69:E9:3A:DA:99:F3:40:7C:2A:4A:6E:F3:AA:2E:70:FD
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       502E56D3B45341B3D730B0BA31C9BD112C68D3B6
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33352e302f32342d3234203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:34 +0000
ROA not before:           Mon 01 Sep 2025 18:40:34 +0000
ROA not after:            Mon 31 Aug 2026 18:45:34 +0000
asID:                     53052
IP address blocks:        187.84.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2e:56:d3:b4:53:41:b3:d7:30:b0:ba:31:c9:bd:11:2c:68:d3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:34 2025 GMT
            Not After : Aug 31 18:45:34 2026 GMT
        Subject: CN=DD5626BE69E93ADA99F3407C2A4A6EF3AA2E70FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:6d:a1:1e:cd:6c:22:95:8d:4d:7c:9e:ce:
                    30:2d:da:a0:38:a5:3b:f6:3a:fb:6e:56:40:6e:7f:
                    ae:9a:48:ad:9b:95:05:12:0f:6f:f1:a5:17:a5:7e:
                    1f:4d:1c:89:f1:02:27:ec:16:bb:22:4f:f7:49:21:
                    b6:fc:d5:3b:ec:d6:38:a6:c8:ab:a3:c4:af:6c:8a:
                    ef:15:9f:66:a8:01:15:13:90:63:8d:50:80:60:c0:
                    94:bd:35:48:93:ff:23:88:0b:1f:0c:57:69:9a:65:
                    45:ec:af:6d:e8:a8:4b:e3:2c:96:58:05:f1:77:5d:
                    66:f0:da:13:85:4f:36:b3:c9:f4:90:b0:c6:98:88:
                    ae:1c:52:20:ff:d5:30:bd:7d:f5:11:6c:30:13:01:
                    e4:d6:68:4b:ea:8d:49:b6:85:e1:34:20:19:d8:26:
                    a6:10:13:b6:20:30:0e:cb:d3:a1:42:86:02:3e:f5:
                    d0:8a:3d:1d:04:ed:63:09:1b:4a:82:9a:88:fa:0a:
                    b3:64:1f:1b:47:8f:68:c7:ca:f8:6a:89:49:fd:fd:
                    9a:a7:b6:ff:f3:78:ed:9c:0a:b1:66:48:43:30:fc:
                    cd:aa:35:00:75:aa:98:41:0e:0e:ad:c8:af:5c:e6:
                    7b:e5:a9:dc:dc:50:b4:87:93:6b:c3:a6:56:57:0e:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:56:26:BE:69:E9:3A:DA:99:F3:40:7C:2A:4A:6E:F3:AA:2E:70:FD
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33352e302f32342d3234203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e5:62:55:7f:6f:cc:3a:9c:d3:05:64:e6:47:24:2d:e1:85:
         f3:8e:8e:42:34:cc:b6:a7:6d:cc:04:ba:23:fd:ed:3c:42:a9:
         52:ed:a5:09:da:79:5e:25:af:96:06:93:86:5c:1f:ce:4c:4d:
         ca:67:15:28:ac:95:1c:14:c0:ae:35:74:f1:bb:09:51:7f:49:
         3e:56:e3:63:a4:bd:29:9c:94:1d:6c:f4:b4:38:b1:48:cc:4d:
         38:46:a9:ec:47:52:bf:b2:bd:f7:77:6a:4b:9d:fe:cc:86:3b:
         e1:fa:4e:4d:0d:d1:85:67:a0:32:68:ad:29:62:ee:8a:f1:9a:
         fc:5a:1f:b1:0c:2c:b2:16:8b:d4:b0:90:77:13:15:e9:ca:59:
         d2:e7:24:e0:e5:ed:20:fa:6a:e1:1b:e7:75:69:67:4d:91:3d:
         31:5e:bd:80:39:3d:21:18:1f:4a:66:3f:2c:c4:6b:a2:8d:78:
         6a:b0:a8:5e:7a:ea:b4:c8:19:76:70:c5:eb:ee:db:37:2e:7c:
         34:18:f0:42:97:c7:cc:61:c2:99:64:24:bd:67:ec:6a:95:6a:
         d8:16:9e:d3:f1:8e:cf:52:70:2c:94:14:28:68:cf:a3:22:42:
         b0:ba:1c:b2:24:ff:bf:d2:46:a2:10:8c:dc:a6:11:5f:16:52:
         5b:7a:aa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:37:23 2025 by rpki-client