Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32342d3234203d3e203238313238.roa
File:                     3136382e3139352e33322e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          hTJbO7UH8v6RFSUeGdnibgE9Bk+dl3CMMTgyQ3AlADE=
Subject key identifier:   1C:A9:F3:10:76:4A:30:4C:02:77:79:95:53:DF:A0:C5:7A:5D:A2:37
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       33DD84041120E25B8CE46663426F1F492C83985E
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:32:36 +0000
ROA not before:           Fri 12 Sep 2025 14:27:36 +0000
ROA not after:            Fri 11 Sep 2026 14:32:36 +0000
asID:                     28128
IP address blocks:        168.195.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:dd:84:04:11:20:e2:5b:8c:e4:66:63:42:6f:1f:49:2c:83:98:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:27:36 2025 GMT
            Not After : Sep 11 14:32:36 2026 GMT
        Subject: CN=1CA9F310764A304C0277799553DFA0C57A5DA237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:68:8c:bf:24:d1:4c:d4:05:b8:83:a0:29:
                    aa:62:e3:0d:51:0d:b6:87:8d:ac:c4:04:b9:69:9c:
                    a8:69:0f:ac:1e:d2:01:b6:db:7a:1d:49:6a:f0:d2:
                    95:52:08:a8:89:59:ce:c1:38:b2:40:87:6d:db:12:
                    dd:06:01:98:54:7b:4c:07:39:37:d5:68:2e:f3:45:
                    3b:5d:1b:51:b0:60:fd:18:f0:3c:bb:12:dc:38:d0:
                    71:28:a4:b9:c1:10:75:d8:a6:9f:b0:f2:97:c8:e9:
                    14:cf:56:c6:ee:6f:c0:7c:74:1e:b3:8c:f1:05:9b:
                    ce:25:0f:46:f5:3d:84:7a:12:d0:c5:d1:10:29:f1:
                    68:85:27:82:67:99:d8:2a:25:b0:25:fa:ef:ac:44:
                    41:f2:ee:b6:be:4e:f1:a6:b4:ac:20:aa:bf:a8:db:
                    e7:e2:01:72:db:85:fe:4a:90:09:61:e4:fd:2b:ee:
                    9a:80:5d:9a:f2:27:14:79:87:02:9a:7b:6c:d9:e1:
                    7c:16:23:ac:52:c1:fe:57:8d:24:ff:af:80:4c:de:
                    21:c5:e8:32:22:e2:5f:ce:9f:d4:8a:d5:ba:d7:b5:
                    65:53:ce:09:8c:f1:2d:c0:0b:09:5b:e4:4b:aa:d5:
                    44:f8:76:87:40:27:d8:16:62:26:2a:ba:79:96:cd:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:F3:10:76:4A:30:4C:02:77:79:95:53:DF:A0:C5:7A:5D:A2:37
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33322e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:27:e8:e9:78:a4:93:05:a4:c8:9e:b6:7a:39:86:f4:1c:19:
         7e:17:dc:3e:d2:f1:c1:65:31:65:99:89:46:cc:a7:58:b4:45:
         e7:08:e0:c4:26:f4:5e:c1:68:12:58:c5:0a:c5:71:9a:3b:b5:
         07:5c:59:1b:bf:80:1d:62:cc:62:1d:5f:72:81:e9:a5:fa:80:
         39:4b:ac:d3:56:8f:94:a7:5a:e4:98:ff:4f:15:18:d4:9e:59:
         c5:de:55:38:7f:47:92:2e:09:18:65:b4:53:f8:16:93:15:8f:
         3e:df:28:d1:a5:2e:f2:a4:a7:ab:78:c8:17:87:d6:3d:ab:ac:
         ca:f8:37:1c:0a:1c:7f:be:72:0b:df:bf:1f:9f:51:4e:46:96:
         b0:a1:2e:7a:b9:bd:69:88:45:ab:16:97:f8:dd:c2:c8:5a:b1:
         fa:a6:99:55:e4:95:29:f0:21:bd:95:1b:82:09:1e:b8:47:e6:
         d0:8d:2f:f4:79:9d:66:10:3d:d0:a7:6c:cf:38:a2:73:ca:89:
         4e:93:6a:3d:aa:0f:6f:e1:ac:eb:d9:f5:3d:3d:08:4e:b0:d2:
         07:64:24:6e:4c:36:aa:f4:7a:48:59:55:84:16:e0:29:95:0c:
         2a:01:03:00:99:f1:9c:48:3d:ea:36:c0:ae:1b:3e:2b:d8:b8:
         08:fb:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:37:26 2025 by rpki-client