Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35302e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35302e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          6cpaLLvWfjWrzKBzx5rljJZKHmSidLR3uH6OjUN6xg4=
Subject key identifier:   13:7D:84:FF:2D:39:18:11:F7:C1:65:33:19:8D:6A:BA:D5:5C:C7:30
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       06E96E47A2B81920489F23D6288F468A360A54C6
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35302e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:14 +0000
ROA not before:           Fri 12 Sep 2025 14:28:14 +0000
ROA not after:            Fri 11 Sep 2026 14:33:14 +0000
asID:                     28128
IP address blocks:        187.19.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e9:6e:47:a2:b8:19:20:48:9f:23:d6:28:8f:46:8a:36:0a:54:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:14 2025 GMT
            Not After : Sep 11 14:33:14 2026 GMT
        Subject: CN=137D84FF2D391811F7C16533198D6ABAD55CC730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:92:0a:82:f6:74:9c:cc:12:e6:99:4a:5f:
                    29:5c:ff:81:8a:c5:9c:12:ce:d1:9a:f6:45:0e:91:
                    75:7c:70:67:b7:9e:59:6b:19:88:80:e1:bf:35:9b:
                    3c:6c:61:b6:65:07:5f:50:37:bf:cc:f6:0a:ea:b1:
                    1a:ba:61:6b:66:93:b3:b4:cc:89:8d:8c:3f:bf:9a:
                    10:01:75:34:0e:63:b9:4b:29:e8:04:6f:29:7c:a4:
                    ed:91:8c:0a:39:f2:12:dd:d7:a2:67:0e:51:b8:a9:
                    93:d4:10:90:86:6c:6e:69:f1:24:e6:ec:de:5c:1d:
                    52:2b:a7:91:f2:d4:b5:f5:81:1a:e4:0a:a8:50:83:
                    c3:90:a4:89:1e:cb:79:53:c5:e7:97:27:9e:f8:9e:
                    f6:8d:db:0d:b1:f1:16:9a:84:23:4e:b4:8e:d4:0f:
                    54:07:74:a0:c1:0d:f3:c7:91:4d:8f:b6:bf:3d:c7:
                    6b:1b:f8:59:55:56:1c:aa:40:5e:45:7c:b5:2d:3a:
                    4f:ed:69:60:85:af:7c:b4:75:53:e8:3b:2f:18:61:
                    7f:aa:4e:86:c4:51:b7:70:4b:53:54:09:76:c6:12:
                    5a:74:16:54:7a:3e:6a:38:47:b2:75:63:bd:73:40:
                    6e:ca:b3:d4:6b:cc:09:c5:21:2f:ef:4d:54:00:26:
                    ce:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7D:84:FF:2D:39:18:11:F7:C1:65:33:19:8D:6A:BA:D5:5C:C7:30
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35302e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:57:50:24:41:05:35:97:fb:91:01:77:ff:c1:da:d8:b8:8a:
         71:50:b5:6d:0f:7f:3c:b4:0b:c2:18:87:fc:f9:d1:a2:aa:50:
         c8:bc:e1:33:03:da:ca:ff:e8:a4:46:d5:35:62:19:83:0d:56:
         a9:c2:cd:e2:bc:02:6b:99:d3:77:6d:8d:82:fd:f6:b8:b3:0f:
         b6:a9:38:36:94:c6:92:a0:b1:5b:0a:22:26:67:f3:d8:98:47:
         e8:01:31:28:5d:9b:c3:89:83:35:bf:01:dd:76:da:e4:aa:b8:
         4b:c5:58:b3:21:df:77:ad:ff:cb:10:11:41:3c:63:0a:ff:c4:
         df:1b:55:aa:1a:e5:55:c4:b7:14:fa:2f:a1:4d:2b:ac:16:9e:
         3f:ba:2b:3d:ce:46:87:43:8d:63:8b:29:4c:92:69:bd:0d:dd:
         b9:78:5a:23:07:16:ca:75:25:9c:34:3d:38:c5:7b:af:90:11:
         f6:26:eb:55:fc:13:75:18:87:14:e2:08:1c:11:76:6d:57:5e:
         14:94:55:0d:25:f0:65:e4:f6:71:c9:4f:38:d5:90:e1:b7:a5:
         eb:46:d4:c8:f9:a5:8c:c3:ae:77:df:c3:38:f6:d8:60:9c:74:
         71:54:70:59:53:04:69:7a:4e:b5:8d:08:49:a1:12:00:8c:8c:
         1a:60:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:09:16 2025 by rpki-client