Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35322e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35322e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          cJJ9oLU0LOWUcX1gB30y2iVAn7HglnI2nF9tz1l+4rQ=
Subject key identifier:   63:C2:A8:4C:73:A9:BD:7B:06:25:AC:D0:2C:F7:AA:DD:68:D7:17:B8
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       379C44ACD951CE0D497E5D28F23E7A1D5EAE0393
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35322e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:19 +0000
ROA not before:           Fri 12 Sep 2025 14:28:19 +0000
ROA not after:            Fri 11 Sep 2026 14:33:19 +0000
asID:                     28128
IP address blocks:        187.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9c:44:ac:d9:51:ce:0d:49:7e:5d:28:f2:3e:7a:1d:5e:ae:03:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:19 2025 GMT
            Not After : Sep 11 14:33:19 2026 GMT
        Subject: CN=63C2A84C73A9BD7B0625ACD02CF7AADD68D717B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:c7:e0:20:80:e7:b4:42:49:5b:f0:e6:92:
                    f4:54:ba:5c:11:95:eb:e8:57:7f:79:3f:a7:71:17:
                    f6:ee:0f:9b:7f:85:e5:3b:7b:62:2c:a8:fd:d5:32:
                    49:3b:60:60:88:b7:57:56:70:3d:44:e2:91:e5:1e:
                    2a:f1:67:45:e3:44:dd:56:02:4e:7b:6a:50:26:ed:
                    36:ae:81:fe:6b:0e:d2:8a:11:cb:9d:39:a2:0c:1f:
                    00:54:c8:48:48:eb:c2:67:6e:37:1a:c2:0d:bd:8d:
                    b0:5d:78:96:16:60:ad:f7:1a:41:21:63:09:95:7a:
                    0a:9a:be:6b:7f:98:31:ab:b9:45:2c:61:f9:97:3c:
                    16:e0:27:c2:3c:1d:f0:02:10:fc:9d:78:0c:d6:a4:
                    b2:04:16:be:a0:b6:7c:1a:11:f9:1e:cc:69:54:6f:
                    36:71:e3:9a:93:6d:a5:8a:27:17:c6:f8:5f:fe:98:
                    d4:ac:fd:a1:58:ed:ed:c0:5a:00:f8:14:29:40:ea:
                    61:80:ee:b1:89:13:a1:b9:da:48:d2:39:8c:06:ed:
                    18:11:53:5c:44:18:6b:63:98:e0:a1:79:d9:7f:85:
                    76:b8:65:0b:5d:79:44:22:d1:84:fd:04:31:c5:29:
                    71:0e:62:d3:77:aa:dd:90:a0:d8:ce:23:67:f6:0a:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C2:A8:4C:73:A9:BD:7B:06:25:AC:D0:2C:F7:AA:DD:68:D7:17:B8
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35322e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:9e:07:81:2b:78:7f:7c:e3:69:3e:cf:21:12:9f:ed:20:
         0f:ac:44:a7:6b:1b:f1:80:f7:85:0e:e2:19:aa:aa:d6:d7:e1:
         74:e5:65:ae:0a:ee:04:db:b9:d6:c6:c5:90:39:f2:a9:9e:67:
         da:ff:d6:60:e9:d0:b6:5b:cf:9b:40:42:96:a9:c1:ed:c8:b7:
         1b:3a:0c:54:dd:5e:2c:55:3b:56:5c:95:d2:8c:ea:70:37:25:
         07:13:1e:a5:d2:6a:fb:c1:3f:12:5a:99:21:17:76:1f:8b:73:
         73:0c:dc:d6:42:9b:da:9c:6e:88:4c:fe:7e:ea:3b:7a:6f:c7:
         c0:a4:62:24:cd:b2:6a:18:ff:81:bb:fa:4c:d7:b8:28:d1:21:
         b0:87:47:19:00:42:04:d5:36:e2:16:9f:60:f3:95:56:98:68:
         3b:7f:d1:de:93:f1:3f:c4:1b:a9:4c:20:52:6a:60:66:cb:b5:
         ee:5f:cd:12:ad:79:5b:30:41:ab:1a:a1:c9:db:37:a8:58:65:
         6e:12:ac:5c:5e:ab:fd:44:ac:9f:8f:1d:46:46:79:70:8b:87:
         c1:e6:a9:88:a9:e8:35:93:3e:c0:3d:dc:05:61:af:0b:55:0f:
         d7:31:13:4f:03:b7:f0:4a:85:78:a9:5b:90:1b:47:4f:f1:75:
         ec:6d:e0:1e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUN5xErNlRzg1Jfl0o8j56HV6uA5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxQjkxNEJDMEM2Q0RBNkQzN0MyQ0IwNzA4RjdGNzI4
RjlDNTI3MjAeFw0yNTA5MTIxNDI4MTlaFw0yNjA5MTExNDMzMTlaMDMxMTAvBgNV
BAMTKDYzQzJBODRDNzNBOUJEN0IwNjI1QUNEMDJDRjdBQURENjhENzE3QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQr8fgIIDntEJJW/DmkvRUulwR
levoV395P6dxF/buD5t/heU7e2IsqP3VMkk7YGCIt1dWcD1E4pHlHirxZ0XjRN1W
Ak57alAm7Taugf5rDtKKEcudOaIMHwBUyEhI68Jnbjcawg29jbBdeJYWYK33GkEh
YwmVegqavmt/mDGruUUsYfmXPBbgJ8I8HfACEPydeAzWpLIEFr6gtnwaEfkezGlU
bzZx45qTbaWKJxfG+F/+mNSs/aFY7e3AWgD4FClA6mGA7rGJE6G52kjSOYwG7RgR
U1xEGGtjmOChedl/hXa4ZQtdeUQi0YT9BDHFKXEOYtN3qt2QoNjOI2f2CkB7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUY8KoTHOpvXsGJazQLPeq3WjXF7gwHwYDVR0j
BBgwFoAUBhuRS8DGzabTfCywcI9/co+cUnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpzdzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIx
OUQvMC8wNjFCOTE0QkMwQzZDREE2RDM3QzJDQjA3MDhGN0Y3MjhGOUM1MjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MUI5MTRCQzBDNkNEQTZE
MzdDMkNCMDcwOEY3RjcyOEY5QzUyNzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vqc3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAv
MzEzODM3MmUzMTM5MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsTNDANBgkqhkiG9w0BAQsFAAOCAQEAPXeeB4EreH98
42k+zyESn+0gD6xEp2sb8YD3hQ7iGaqq1tfhdOVlrgruBNu51sbFkDnyqZ5n2v/W
YOnQtlvPm0BClqnB7ci3GzoMVN1eLFU7VlyV0ozqcDclBxMepdJq+8E/ElqZIRd2
H4tzcwzc1kKb2pxuiEz+fuo7em/HwKRiJM2yahj/gbv6TNe4KNEhsIdHGQBCBNU2
4hafYPOVVphoO3/R3pPxP8QbqUwgUmpgZsu17l/NEq15WzBBqxqhyds3qFhlbhKs
XF6r/USsn48dRkZ5cIuHweapiKnoNZM+wD3cBWGvC1UP1zETTwO38EqFeKlbkBtH
T/F17G3gHg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:04:32 2025 by rpki-client