Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34392e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e34392e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          24ATEr8W6KLi6+19P6TrXx3Ur8I8uJ++70rGJgvpE3w=
Subject key identifier:   22:1D:A1:79:77:C9:EA:88:A0:CE:2E:39:4F:92:07:19:00:06:5A:36
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       3948573AA9AB5268549F441F1E43C9F35F75A3B6
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34392e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:11 +0000
ROA not before:           Fri 12 Sep 2025 14:28:11 +0000
ROA not after:            Fri 11 Sep 2026 14:33:11 +0000
asID:                     28128
IP address blocks:        187.19.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:48:57:3a:a9:ab:52:68:54:9f:44:1f:1e:43:c9:f3:5f:75:a3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:11 2025 GMT
            Not After : Sep 11 14:33:11 2026 GMT
        Subject: CN=221DA17977C9EA88A0CE2E394F92071900065A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:39:1a:8c:ba:cb:6f:c3:cf:62:c3:c9:35:
                    5b:41:b2:1d:1e:f5:b4:f4:51:9a:1b:40:35:e4:e6:
                    8b:2b:d4:1b:3a:57:8f:7f:bd:02:6b:a1:bc:20:98:
                    6f:80:fd:a6:3c:4b:ba:f2:2b:2a:b8:7d:5b:67:44:
                    ec:1c:19:1c:9b:45:43:36:b9:78:96:ac:fd:82:c5:
                    43:80:9b:e6:2a:ae:39:e1:81:b4:dc:05:98:d9:a4:
                    1c:9c:f9:17:9f:b4:39:93:40:33:b2:a3:15:b7:07:
                    ac:3e:b4:7c:4f:7f:96:6e:bf:5d:a8:40:5c:5f:2d:
                    00:65:15:9a:b2:2a:a3:90:86:ca:63:9e:71:77:c4:
                    b9:c3:f5:36:d8:b8:0a:32:79:4c:50:37:8f:62:12:
                    6b:b1:eb:30:0a:15:2b:15:92:98:40:55:d1:b9:09:
                    0f:de:8b:bd:3d:33:7d:fa:03:2e:ec:d8:3d:6b:3d:
                    59:fd:25:e6:f5:e4:cd:d7:36:0f:e6:ca:ec:a0:05:
                    8f:7e:06:c4:1f:a5:0d:aa:b2:fc:45:44:5f:18:db:
                    c0:df:70:e7:1c:0d:62:e4:3e:2d:ad:4b:12:d5:36:
                    7b:e1:0e:bf:5d:d7:7e:dc:78:65:b3:23:c0:c1:53:
                    e8:15:94:07:3b:01:d3:ef:d2:c2:3a:f7:95:99:d6:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1D:A1:79:77:C9:EA:88:A0:CE:2E:39:4F:92:07:19:00:06:5A:36
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34392e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:95:c2:b1:4c:cf:23:b2:0d:42:56:22:82:9d:47:a8:2b:c6:
         b5:9a:83:3e:d3:25:08:9d:c6:40:78:61:66:f7:83:37:b2:01:
         8d:40:aa:04:80:1f:4f:9d:43:13:5a:f7:de:67:cd:97:12:09:
         1c:8d:ff:01:98:bb:14:b9:d5:59:12:91:12:61:4e:21:ff:24:
         5b:f6:6e:c7:fe:e8:a5:d1:25:a3:f8:84:84:bf:2b:58:f5:9c:
         98:39:62:6f:92:27:e1:96:b4:cd:d8:77:4a:8a:58:f9:f2:bf:
         7e:f7:03:55:c9:c0:c2:9a:cc:89:45:34:2f:bc:e4:35:86:f7:
         5f:af:f8:44:65:f6:9c:9d:d2:3f:0e:7e:81:eb:70:22:35:ec:
         e5:e8:88:df:47:59:a1:e8:74:65:f4:9f:42:13:78:d9:f5:f3:
         17:2a:09:23:89:82:e0:ad:1d:5d:8a:97:bb:84:98:bd:47:8a:
         04:cb:fc:72:04:89:6a:86:b2:d6:5b:7f:ac:44:00:4a:fe:0c:
         b9:c5:09:f6:30:37:78:52:0e:0f:14:af:3e:4a:d9:8c:91:80:
         a8:a3:4c:1d:05:c3:8d:f6:27:ac:06:a3:8b:86:d1:57:bc:72:
         56:2e:c5:ce:b5:46:3a:bb:02:e5:85:62:bc:49:16:29:c3:1c:
         73:4b:8f:19
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOUhXOqmrUmhUn0QfHkPJ8191o7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxQjkxNEJDMEM2Q0RBNkQzN0MyQ0IwNzA4RjdGNzI4
RjlDNTI3MjAeFw0yNTA5MTIxNDI4MTFaFw0yNjA5MTExNDMzMTFaMDMxMTAvBgNV
BAMTKDIyMURBMTc5NzdDOUVBODhBMENFMkUzOTRGOTIwNzE5MDAwNjVBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fDkajLrLb8PPYsPJNVtBsh0e
9bT0UZobQDXk5osr1Bs6V49/vQJrobwgmG+A/aY8S7ryKyq4fVtnROwcGRybRUM2
uXiWrP2CxUOAm+YqrjnhgbTcBZjZpByc+ReftDmTQDOyoxW3B6w+tHxPf5Zuv12o
QFxfLQBlFZqyKqOQhspjnnF3xLnD9TbYuAoyeUxQN49iEmux6zAKFSsVkphAVdG5
CQ/ei709M336Ay7s2D1rPVn9Jeb15M3XNg/myuygBY9+BsQfpQ2qsvxFRF8Y28Df
cOccDWLkPi2tSxLVNnvhDr9d137ceGWzI8DBU+gVlAc7AdPv0sI695WZ1v3rAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUIh2heXfJ6oigzi45T5IHGQAGWjYwHwYDVR0j
BBgwFoAUBhuRS8DGzabTfCywcI9/co+cUnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpzdzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIx
OUQvMC8wNjFCOTE0QkMwQzZDREE2RDM3QzJDQjA3MDhGN0Y3MjhGOUM1MjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MUI5MTRCQzBDNkNEQTZE
MzdDMkNCMDcwOEY3RjcyOEY5QzUyNzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vqc3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAv
MzEzODM3MmUzMTM5MmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsTMTANBgkqhkiG9w0BAQsFAAOCAQEALpXCsUzPI7IN
QlYigp1HqCvGtZqDPtMlCJ3GQHhhZveDN7IBjUCqBIAfT51DE1r33mfNlxIJHI3/
AZi7FLnVWRKREmFOIf8kW/Zux/7opdElo/iEhL8rWPWcmDlib5In4Za0zdh3SopY
+fK/fvcDVcnAwprMiUU0L7zkNYb3X6/4RGX2nJ3SPw5+getwIjXs5eiI30dZoeh0
ZfSfQhN42fXzFyoJI4mC4K0dXYqXu4SYvUeKBMv8cgSJaoay1lt/rEQASv4MucUJ
9jA3eFIODxSvPkrZjJGAqKNMHQXDjfYnrAaji4bRV7xyVi7FzrVGOrsC5YVivEkW
KcMcc0uPGQ==
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:09:11 2025 by rpki-client