Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32302d3230203d3e203238313238.roa
File:                     3138372e31392e34382e302f32302d3230203d3e203238313238.roa (raw, json)
Hash identifier:          PS+jzXVyDPVHvEu2vS06GLPJF7lLEYbtfVOgNNax7x0=
Subject key identifier:   DC:C1:61:FF:7E:2C:4C:39:BF:E8:A9:2C:C5:19:BF:1E:AC:A7:15:B9
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       2D198F9EFA49DC6F1B54E867C32CC552D95B4E21
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32302d3230203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:32:59 +0000
ROA not before:           Fri 12 Sep 2025 14:27:59 +0000
ROA not after:            Fri 11 Sep 2026 14:32:59 +0000
asID:                     28128
IP address blocks:        187.19.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:19:8f:9e:fa:49:dc:6f:1b:54:e8:67:c3:2c:c5:52:d9:5b:4e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:27:59 2025 GMT
            Not After : Sep 11 14:32:59 2026 GMT
        Subject: CN=DCC161FF7E2C4C39BFE8A92CC519BF1EACA715B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:87:aa:ec:eb:24:5d:4f:c2:eb:d4:42:ad:
                    75:e5:ae:62:46:f5:9f:35:8c:9c:dc:79:d2:3c:d0:
                    cc:81:bc:30:d9:1d:6c:1e:c7:cd:6d:39:4b:5a:c0:
                    4b:43:62:48:d5:4b:ae:8c:6f:4c:eb:c5:18:7d:b1:
                    dc:1f:a1:15:60:aa:b0:88:72:f2:32:25:a5:a4:30:
                    3c:f7:44:83:65:ea:c3:c8:a5:95:59:3f:92:79:17:
                    54:19:98:71:61:4e:32:c6:a7:d0:61:4d:15:c1:6b:
                    b0:68:a3:d1:3c:53:65:3f:9d:26:76:31:ed:0f:3d:
                    f1:27:b1:fe:ce:8c:e6:3f:27:88:97:f3:3b:51:2f:
                    41:b6:e2:29:c3:89:5c:f5:2c:db:8b:88:ba:e6:c9:
                    06:5e:43:7a:f7:dc:0e:47:17:c7:fe:77:40:ae:1d:
                    cd:c7:f5:7e:f1:99:32:98:96:31:94:51:28:03:96:
                    91:95:08:4a:64:28:a3:b8:23:36:b6:06:24:2e:c7:
                    d8:b3:dc:49:87:b1:52:f6:b7:b1:1b:15:fe:a0:f4:
                    28:90:a9:f0:56:67:40:e5:00:a4:44:7c:b8:98:a7:
                    13:41:ad:07:0d:bd:56:ce:fe:3c:e3:cc:2d:5d:67:
                    cb:3b:84:55:5d:51:00:20:37:92:80:16:63:92:dd:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C1:61:FF:7E:2C:4C:39:BF:E8:A9:2C:C5:19:BF:1E:AC:A7:15:B9
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32302d3230203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:fd:63:a3:eb:88:16:8e:66:93:d4:91:71:3d:2d:bb:4f:
         41:47:54:58:64:cf:4b:b9:41:c0:97:df:3f:f3:3f:a8:ba:18:
         e7:a6:59:3d:85:df:bb:63:7b:66:a9:98:fd:35:24:fa:6a:7c:
         ea:85:72:e9:f4:2c:46:ff:3d:cb:42:08:eb:a9:10:ce:8c:d2:
         83:46:93:47:60:dd:7e:bd:c0:8c:55:72:3f:3f:06:5b:23:11:
         71:61:e6:c5:70:0d:49:17:89:c7:aa:0c:89:62:0b:a6:f8:ad:
         38:2b:63:85:30:e3:b5:ee:f0:db:3b:bd:0a:62:26:bd:46:13:
         3a:8b:d8:37:a0:2f:af:8a:4b:7f:76:a0:7c:50:66:ce:93:76:
         96:6a:30:ae:87:82:5b:06:fb:5a:4c:91:53:6c:e6:59:89:d0:
         16:6b:f2:fc:8b:c0:e1:3e:91:6b:3c:aa:2f:13:f8:59:7d:d3:
         4f:5c:48:de:0e:4c:da:e8:d5:ec:51:2e:05:9d:5a:a7:2b:bd:
         24:0e:21:7a:63:41:0f:37:7a:5e:a4:f3:59:fb:ca:af:d6:c7:
         09:68:e2:05:7f:a2:09:09:ac:73:4d:6b:9b:ae:ed:df:63:6a:
         6f:95:b8:fd:22:80:f0:8c:be:34:9d:3a:3b:fc:92:84:ae:17:
         63:68:bc:95
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULRmPnvpJ3G8bVOhnwyzFUtlbTiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxQjkxNEJDMEM2Q0RBNkQzN0MyQ0IwNzA4RjdGNzI4
RjlDNTI3MjAeFw0yNTA5MTIxNDI3NTlaFw0yNjA5MTExNDMyNTlaMDMxMTAvBgNV
BAMTKERDQzE2MUZGN0UyQzRDMzlCRkU4QTkyQ0M1MTlCRjFFQUNBNzE1QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRqoeq7OskXU/C69RCrXXlrmJG
9Z81jJzcedI80MyBvDDZHWwex81tOUtawEtDYkjVS66Mb0zrxRh9sdwfoRVgqrCI
cvIyJaWkMDz3RINl6sPIpZVZP5J5F1QZmHFhTjLGp9BhTRXBa7Boo9E8U2U/nSZ2
Me0PPfEnsf7OjOY/J4iX8ztRL0G24inDiVz1LNuLiLrmyQZeQ3r33A5HF8f+d0Cu
Hc3H9X7xmTKYljGUUSgDlpGVCEpkKKO4Iza2BiQux9iz3EmHsVL2t7EbFf6g9CiQ
qfBWZ0DlAKREfLiYpxNBrQcNvVbO/jzjzC1dZ8s7hFVdUQAgN5KAFmOS3aW5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU3MFh/34sTDm/6KksxRm/HqynFbkwHwYDVR0j
BBgwFoAUBhuRS8DGzabTfCywcI9/co+cUnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpzdzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIx
OUQvMC8wNjFCOTE0QkMwQzZDREE2RDM3QzJDQjA3MDhGN0Y3MjhGOUM1MjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MUI5MTRCQzBDNkNEQTZE
MzdDMkNCMDcwOEY3RjcyOEY5QzUyNzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vqc3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAv
MzEzODM3MmUzMTM5MmUzNDM4MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzODMx
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLsTMDANBgkqhkiG9w0BAQsFAAOCAQEAd279Y6PriBaO
ZpPUkXE9LbtPQUdUWGTPS7lBwJffP/M/qLoY56ZZPYXfu2N7ZqmY/TUk+mp86oVy
6fQsRv89y0II66kQzozSg0aTR2Ddfr3AjFVyPz8GWyMRcWHmxXANSReJx6oMiWIL
pvitOCtjhTDjte7w2zu9CmImvUYTOovYN6Avr4pLf3agfFBmzpN2lmowroeCWwb7
WkyRU2zmWYnQFmvy/IvA4T6RazyqLxP4WX3TT1xI3g5M2ujV7FEuBZ1apyu9JA4h
emNBDzd6XqTzWfvKr9bHCWjiBX+iCQmsc01rm67t32Nqb5W4/SKA8Iy+NJ06O/yS
hK4XY2i8lQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:38:18 2025 by rpki-client