Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35312e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35312e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          t92JgYbZ/I6XlcBmYV8H1+4H6XVDilPC5G/VGLlDGfs=
Subject key identifier:   2F:91:FC:E9:B8:B4:07:CA:77:98:DC:08:C0:0A:01:34:29:54:57:2D
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       1C7F30C55D9038988637E78FDA5BC76B953B0EE8
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35312e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:16 +0000
ROA not before:           Fri 12 Sep 2025 14:28:16 +0000
ROA not after:            Fri 11 Sep 2026 14:33:16 +0000
asID:                     28128
IP address blocks:        187.19.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7f:30:c5:5d:90:38:98:86:37:e7:8f:da:5b:c7:6b:95:3b:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:16 2025 GMT
            Not After : Sep 11 14:33:16 2026 GMT
        Subject: CN=2F91FCE9B8B407CA7798DC08C00A01342954572D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:90:2b:17:93:bd:b3:d9:c6:38:e7:d5:c3:
                    31:4b:0e:97:58:ea:40:02:c6:3b:d7:78:a6:aa:46:
                    ed:70:e1:59:59:e4:5f:f4:28:4c:bf:aa:3e:a3:47:
                    7b:81:24:22:fb:23:0f:83:52:c5:55:35:7c:c4:d2:
                    f2:13:66:a6:22:26:87:53:6b:c6:54:9b:cd:e3:24:
                    55:d6:7d:40:5e:46:57:c8:10:77:6e:e6:ee:34:8b:
                    a3:4a:f0:08:07:f9:d4:d1:44:e9:80:ba:44:88:2a:
                    f3:f2:6a:6f:a3:db:2e:18:a3:98:71:0c:35:51:82:
                    d4:3b:eb:d4:12:93:74:01:95:16:07:47:b2:22:78:
                    ad:36:b1:13:bf:da:27:67:59:4d:1a:3a:86:e4:3e:
                    b8:58:cb:78:72:5f:5a:c2:f3:81:bb:7b:d5:62:e1:
                    f3:f1:61:b0:3b:4a:69:04:8d:26:b2:40:05:a5:7d:
                    e5:92:2f:35:0d:c9:0b:e5:37:5e:e3:72:10:71:d5:
                    c7:d2:af:76:40:c5:f9:6b:4e:48:20:ed:d9:0d:ae:
                    be:8c:9e:df:4a:7e:ce:e5:48:92:17:22:f9:f3:79:
                    50:b1:28:53:54:7e:6c:7f:7b:4f:70:36:73:15:f0:
                    64:97:73:3d:3e:f8:31:80:f4:ad:26:6d:30:40:83:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:91:FC:E9:B8:B4:07:CA:77:98:DC:08:C0:0A:01:34:29:54:57:2D
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35312e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:61:3d:ca:b3:df:2c:ec:dc:2b:03:76:43:2d:87:e3:01:
         4a:89:ea:25:29:02:e8:dd:ae:00:21:5e:d5:93:ac:3c:f7:8b:
         10:c8:95:61:6f:2d:9d:ed:b2:8c:ce:27:2d:ae:8a:73:37:f3:
         fb:46:6e:1c:59:76:e4:6b:de:2d:f4:f8:88:df:a2:ce:16:3a:
         84:44:18:05:c4:8e:43:97:41:fd:a9:a6:7e:6b:aa:af:84:dc:
         7e:55:07:3d:bb:93:e9:da:54:cb:cc:21:e6:2f:31:94:f9:90:
         c7:9c:00:0f:2e:8c:de:3d:bd:12:37:05:b9:9d:1e:62:51:e4:
         f6:ca:12:3f:24:d1:3e:e1:a6:43:de:c2:25:e7:29:80:f3:0b:
         1c:95:19:71:95:5c:eb:71:c4:b4:64:5a:20:f2:8c:cd:61:40:
         ed:68:f7:d9:d0:8c:0b:71:0a:46:fb:94:0a:f2:9c:1b:5c:d2:
         5e:a8:7e:ac:4e:6e:86:62:a9:ef:be:c5:80:01:a3:ef:57:05:
         c2:d9:a4:9a:3c:73:fe:a8:17:e2:4b:d7:6a:a9:f5:dc:29:43:
         9b:51:75:9a:63:ab:7e:29:30:e3:d5:af:0d:92:31:d5:d1:14:
         0b:e5:8b:8c:e2:95:fb:20:14:1a:e6:a2:d3:47:8d:99:44:0c:
         0f:93:a6:58
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHH8wxV2QOJiGN+eP2lvHa5U7DugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxQjkxNEJDMEM2Q0RBNkQzN0MyQ0IwNzA4RjdGNzI4
RjlDNTI3MjAeFw0yNTA5MTIxNDI4MTZaFw0yNjA5MTExNDMzMTZaMDMxMTAvBgNV
BAMTKDJGOTFGQ0U5QjhCNDA3Q0E3Nzk4REMwOEMwMEEwMTM0Mjk1NDU3MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ15ArF5O9s9nGOOfVwzFLDpdY
6kACxjvXeKaqRu1w4VlZ5F/0KEy/qj6jR3uBJCL7Iw+DUsVVNXzE0vITZqYiJodT
a8ZUm83jJFXWfUBeRlfIEHdu5u40i6NK8AgH+dTRROmAukSIKvPyam+j2y4Yo5hx
DDVRgtQ769QSk3QBlRYHR7IieK02sRO/2idnWU0aOobkPrhYy3hyX1rC84G7e9Vi
4fPxYbA7SmkEjSayQAWlfeWSLzUNyQvlN17jchBx1cfSr3ZAxflrTkgg7dkNrr6M
nt9Kfs7lSJIXIvnzeVCxKFNUfmx/e09wNnMV8GSXcz0++DGA9K0mbTBAgzuHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUL5H86bi0B8p3mNwIwAoBNClUVy0wHwYDVR0j
BBgwFoAUBhuRS8DGzabTfCywcI9/co+cUnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpzdzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIx
OUQvMC8wNjFCOTE0QkMwQzZDREE2RDM3QzJDQjA3MDhGN0Y3MjhGOUM1MjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MUI5MTRCQzBDNkNEQTZE
MzdDMkNCMDcwOEY3RjcyOEY5QzUyNzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vqc3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAv
MzEzODM3MmUzMTM5MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsTMzANBgkqhkiG9w0BAQsFAAOCAQEALOdhPcqz3yzs
3CsDdkMth+MBSonqJSkC6N2uACFe1ZOsPPeLEMiVYW8tne2yjM4nLa6Kczfz+0Zu
HFl25GveLfT4iN+izhY6hEQYBcSOQ5dB/ammfmuqr4TcflUHPbuT6dpUy8wh5i8x
lPmQx5wADy6M3j29EjcFuZ0eYlHk9soSPyTRPuGmQ97CJecpgPMLHJUZcZVc63HE
tGRaIPKMzWFA7Wj32dCMC3EKRvuUCvKcG1zSXqh+rE5uhmKp777FgAGj71cFwtmk
mjxz/qgX4kvXaqn13ClDm1F1mmOrfikw49WvDZIx1dEUC+WLjOKV+yAUGuai00eN
mUQMD5OmWA==
-----END CERTIFICATE-----
Generated at Thu Sep 18 18:57:43 2025 by rpki-client