Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/3138372e38342e3134342e302f32332d3234203d3e20323734363835.roa
File:                     3138372e38342e3134342e302f32332d3234203d3e20323734363835.roa (raw, json)
Hash identifier:          zjq465cypziIH5qfLO64FqR9Sf0K9HD9embRiXIa/VU=
Subject key identifier:   4F:9D:E6:A9:95:B8:B9:81:8E:E9:E8:38:EC:3D:59:57:DC:E2:9B:03
Certificate issuer:       /CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
Certificate serial:       19920C9594822CBB3F73236C832F440E783F6797
Authority key identifier: E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/3138372e38342e3134342e302f32332d3234203d3e20323734363835.roa
Signing time:             Fri 27 Jun 2025 21:50:15 +0000
ROA not before:           Fri 27 Jun 2025 21:45:15 +0000
ROA not after:            Fri 26 Jun 2026 21:50:15 +0000
asID:                     274685
IP address blocks:        187.84.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl
                          rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 00:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:92:0c:95:94:82:2c:bb:3f:73:23:6c:83:2f:44:0e:78:3f:67:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
        Validity
            Not Before: Jun 27 21:45:15 2025 GMT
            Not After : Jun 26 21:50:15 2026 GMT
        Subject: CN=4F9DE6A995B8B9818EE9E838EC3D5957DCE29B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:3e:93:1f:c1:a9:68:3d:ae:ca:e8:20:f4:
                    22:c0:7e:13:94:e6:7f:a6:13:a7:4e:03:a8:bb:de:
                    a2:8f:36:4c:af:bf:61:35:a3:62:58:97:ab:9a:5f:
                    03:02:da:74:c0:ed:f6:ac:5f:00:f6:f6:b9:d2:c5:
                    58:5f:00:25:1e:a8:e6:b7:11:f1:c0:c8:47:d9:0b:
                    31:88:8d:d1:4b:82:e7:34:01:c9:3c:5d:9f:c5:63:
                    c4:e6:02:2d:93:b0:56:a4:e9:9f:2e:25:8a:92:2f:
                    77:5d:c4:86:31:2e:fb:bf:44:95:27:02:b8:92:62:
                    59:f5:4a:32:a5:e9:a2:a0:55:ba:8f:cc:ae:16:fe:
                    c1:75:e9:1e:d5:98:a7:84:b3:54:75:71:6d:68:65:
                    c3:c1:ab:11:b7:53:71:a7:01:29:27:06:16:62:50:
                    b3:fc:90:0a:14:1f:44:0f:5c:8e:31:e4:7b:a6:84:
                    83:ac:1e:d3:32:d1:ef:42:05:3e:43:c8:0f:33:44:
                    27:cd:fe:93:f4:31:e9:19:75:38:4a:fa:91:fc:f0:
                    65:f6:67:48:61:43:23:18:47:b7:05:c6:e8:7f:70:
                    75:0a:9d:3f:10:83:fd:be:c5:1f:40:a5:05:80:79:
                    e0:c9:29:9a:db:25:98:0e:ad:4a:17:4b:ae:6b:ec:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9D:E6:A9:95:B8:B9:81:8E:E9:E8:38:EC:3D:59:57:DC:E2:9B:03
            X509v3 Authority Key Identifier:
                keyid:E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/3138372e38342e3134342e302f32332d3234203d3e20323734363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:37:3d:60:c1:26:d8:8c:6c:01:85:63:eb:1b:dc:52:fe:ca:
         0c:cb:7d:16:39:d4:d6:bd:22:e2:9d:4b:0d:5c:02:6e:1f:8e:
         a5:d8:84:d0:8a:f6:c9:5e:f6:24:4a:2f:fe:44:60:db:3c:27:
         54:9f:e1:ee:0c:d4:91:59:7d:2c:b2:36:21:d0:e8:27:22:12:
         42:e9:6f:2e:81:26:77:5c:7d:99:71:2b:15:0f:c0:d7:b6:3a:
         58:07:40:06:ec:5a:41:0b:c6:fd:04:96:28:62:8a:21:1c:22:
         dd:93:ac:55:3c:93:29:4e:d8:8c:b9:41:e8:3a:5d:ca:cc:c7:
         b4:7b:dc:f5:4b:89:16:bc:82:25:08:9d:d9:3f:a1:94:07:13:
         7b:a6:00:cd:b8:15:71:bb:91:25:ab:ed:d1:2a:30:d5:e5:09:
         8a:25:fd:1e:fe:b4:24:1e:be:66:81:d6:3c:cf:63:92:7c:10:
         04:7a:df:63:d4:c4:6b:5a:67:31:52:09:41:d6:8c:ce:0b:12:
         bc:50:a2:e9:5e:0a:5c:90:e6:6e:fe:5a:72:d2:92:04:c2:19:
         3b:e6:cb:19:6e:bd:d2:20:d1:b2:1e:e5:f3:c7:24:24:f3:73:
         75:7c:17:ed:4e:52:30:ff:8e:82:15:50:3c:88:f2:9e:70:15:
         92:92:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:55:30 2025 by rpki-client