Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e34382e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          lJ2eW3SYUhEYG/vvobI0XNTuqLHA+hfNatIUp8EYwWA=
Subject key identifier:   7A:01:1B:59:F8:7A:14:91:00:0A:DE:5A:D5:EA:FD:99:62:C5:96:97
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       2519C4E81669DBE99E219EBD1CA4C17416B24038
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:09 +0000
ROA not before:           Fri 12 Sep 2025 14:28:09 +0000
ROA not after:            Fri 11 Sep 2026 14:33:09 +0000
asID:                     28128
IP address blocks:        187.19.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:19:c4:e8:16:69:db:e9:9e:21:9e:bd:1c:a4:c1:74:16:b2:40:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:09 2025 GMT
            Not After : Sep 11 14:33:09 2026 GMT
        Subject: CN=7A011B59F87A1491000ADE5AD5EAFD9962C59697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:33:9e:ae:60:de:13:7d:18:cd:79:e2:71:
                    2d:14:74:ac:6b:95:30:8d:04:48:1a:e7:40:00:f8:
                    8b:97:3f:ce:b0:15:eb:d1:71:b0:d8:12:ad:f6:56:
                    1d:1f:d9:f6:f1:60:b0:5c:f2:cb:29:3b:fc:5f:cd:
                    5b:ff:77:1f:d8:5e:c8:01:fb:d9:47:34:b5:4a:11:
                    23:22:70:24:0b:dd:18:be:2e:fb:1e:7e:fa:79:e8:
                    78:19:3a:55:73:f1:ab:55:43:bd:25:1c:00:99:69:
                    3d:1f:a6:b4:48:57:03:9b:30:80:7f:b1:8f:cc:42:
                    22:3e:1f:b9:89:fc:53:e2:e1:e2:60:41:54:27:6e:
                    04:1c:47:ee:db:39:1d:bb:a7:c0:4a:01:9a:01:80:
                    46:d6:e6:34:eb:b7:ea:ce:f7:84:53:1d:1d:57:a9:
                    02:3e:e5:e2:83:79:c7:bc:3a:9f:82:7a:95:db:cf:
                    81:9a:ec:d5:22:e6:5d:1b:86:23:3e:9d:b4:fd:30:
                    2b:7a:6b:04:f7:61:af:63:93:89:a3:69:29:e0:44:
                    9e:5e:97:d9:28:4c:37:fe:4e:9f:9c:de:27:d6:a2:
                    cb:ae:70:5e:e7:4c:69:86:d7:d7:ad:60:92:03:fb:
                    9a:f1:d4:de:ff:97:1f:cf:3e:e8:a5:8f:87:39:60:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:01:1B:59:F8:7A:14:91:00:0A:DE:5A:D5:EA:FD:99:62:C5:96:97
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:76:01:fb:08:f0:e3:12:55:6e:29:fa:b3:78:77:1a:9a:2f:
         5c:d0:40:1c:bf:87:26:48:a9:1d:5f:3c:9f:35:ce:30:c4:2a:
         92:ca:08:90:4c:94:ec:e8:80:fc:8f:5a:2c:6f:42:34:ad:e7:
         57:e0:2e:95:2b:d7:8f:6b:da:31:5e:a5:34:84:eb:14:e4:99:
         4d:ee:34:87:48:18:ce:92:c3:97:02:56:20:93:41:11:a1:9e:
         fa:65:4a:2d:a1:81:d8:b2:7a:86:a0:0c:d8:ca:d2:02:ad:f4:
         21:0e:3e:c9:57:a2:ee:54:c2:2c:64:2b:e4:67:bf:67:3e:14:
         ca:3c:36:13:d1:c7:38:e5:93:b2:58:01:95:75:30:6c:ce:33:
         8c:47:e2:3c:69:24:90:cb:91:4b:58:12:50:19:52:a8:b8:e6:
         9f:ba:de:31:3f:7b:eb:87:ec:78:13:d9:c6:13:9e:93:77:66:
         57:0f:a1:c6:64:1e:4f:6e:da:be:67:22:ab:b1:56:48:68:ea:
         96:12:af:04:f4:92:c5:df:3e:73:9e:e8:71:ba:66:c2:c0:fe:
         71:df:d1:35:9d:be:57:c4:4d:c3:b4:22:f5:aa:a0:d0:8c:a6:
         ed:13:18:22:d0:88:09:89:86:03:fc:74:96:df:4f:e4:84:5a:
         db:65:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:38:21 2025 by rpki-client