Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33342e302f32342d3234203d3e203238313238.roa
File:                     3136382e3139352e33342e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          uQMgKR47DdRdHTXTQfNquSF2hto+6fAIfHHuXnJ0RBA=
Subject key identifier:   F9:AF:10:EF:2D:D5:87:F3:A8:8A:21:F0:77:22:58:67:65:52:AF:BD
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       103112CE2A007EF1FBE7EA026F72CA359986C306
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33342e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:06 +0000
ROA not before:           Fri 12 Sep 2025 14:28:06 +0000
ROA not after:            Fri 11 Sep 2026 14:33:06 +0000
asID:                     28128
IP address blocks:        168.195.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:31:12:ce:2a:00:7e:f1:fb:e7:ea:02:6f:72:ca:35:99:86:c3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:06 2025 GMT
            Not After : Sep 11 14:33:06 2026 GMT
        Subject: CN=F9AF10EF2DD587F3A88A21F0772258676552AFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:7b:0f:9e:b9:9c:de:28:ec:06:89:c9:b6:
                    d7:9f:14:da:66:aa:19:4a:46:f3:1b:a8:d0:17:26:
                    ca:6b:ca:02:1d:b2:23:45:01:8e:4b:51:35:71:88:
                    6b:3b:26:e0:7b:13:66:ad:58:c5:a7:fd:f2:2c:6f:
                    bb:2b:d2:be:60:33:65:1b:87:5e:ee:f6:9d:0b:df:
                    5b:f2:ac:b8:89:22:ac:44:8d:60:e8:bc:a1:4c:c3:
                    ab:ec:0c:5a:96:ff:f9:77:67:8c:4d:58:20:d6:ef:
                    c0:06:d5:61:b9:b9:71:46:b0:b0:3b:9c:88:10:ba:
                    a3:e8:52:68:40:5d:be:a2:75:bf:8d:93:6e:62:a6:
                    81:82:80:50:4d:3d:50:2d:e2:39:80:62:02:a2:65:
                    26:08:28:bb:19:48:ad:cc:6a:7a:58:de:74:da:4b:
                    96:81:ce:0c:b4:52:ce:50:3c:7c:71:10:40:17:7e:
                    c3:f6:78:92:ac:71:c3:72:43:06:41:17:3b:50:9c:
                    f0:47:fc:22:aa:ee:22:e4:4c:78:04:a2:2e:92:7d:
                    05:7a:91:10:0a:ec:12:d3:74:0c:61:23:29:61:c0:
                    1e:f2:3e:ce:9a:da:0c:31:09:eb:bd:25:61:ac:c8:
                    c3:6a:94:21:0d:3a:cb:6e:6c:4a:46:58:9e:a9:e4:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AF:10:EF:2D:D5:87:F3:A8:8A:21:F0:77:22:58:67:65:52:AF:BD
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3136382e3139352e33342e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:80:8a:12:e6:d2:37:fe:2b:2e:64:c1:42:99:8d:1b:21:
         83:1f:62:93:cd:af:b9:db:c3:64:25:75:e5:48:07:bd:5c:20:
         cb:5a:1d:af:3d:de:8d:ff:de:c8:8f:31:49:b0:7f:20:42:80:
         e9:82:28:c1:0b:fe:8d:31:6a:d2:99:14:36:9a:a9:e3:df:02:
         48:db:7c:9e:0a:8a:37:57:73:f6:62:4e:cf:c1:d7:96:30:05:
         1c:4d:05:34:07:6c:41:15:a5:02:19:53:df:74:3b:63:16:32:
         2f:e0:f5:87:db:48:d5:95:26:ee:6c:fb:f2:4d:0a:a6:f8:ff:
         c7:0a:49:b6:2a:11:6d:90:f1:48:5a:f4:79:b2:c8:29:a9:93:
         ec:38:6d:71:ba:0b:8d:66:f1:5b:9c:41:1b:4b:fb:23:bf:ea:
         6b:c0:4f:41:0b:e7:ce:ea:03:4b:ed:9a:48:8b:1d:2b:98:63:
         c5:73:04:34:1b:b6:3c:d2:c1:f6:d1:ec:98:67:a3:cf:3f:3a:
         e9:61:d9:14:0c:d6:4c:cc:7a:e4:14:c6:3e:c3:9b:81:ec:34:
         36:aa:c8:c0:3c:37:e8:2f:00:aa:a5:73:d4:b0:d2:59:66:df:
         a6:be:48:ef:ce:85:49:b7:f2:37:51:94:e1:66:15:fa:a0:f9:
         cf:5e:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:00:25 2025 by rpki-client