Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35332e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          d/gH6WtRYAXmiGRuyPvwuRt0VzP29anYz3V6iM+Ekg4=
Subject key identifier:   49:DD:A7:34:2A:85:13:5C:A0:28:39:A1:90:9E:5D:10:B6:C3:C2:D9
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       6E1ACE56CD43028F56100B060F6BAC4AD1906A0D
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:21 +0000
ROA not before:           Fri 12 Sep 2025 14:28:21 +0000
ROA not after:            Fri 11 Sep 2026 14:33:21 +0000
asID:                     28128
IP address blocks:        187.19.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1a:ce:56:cd:43:02:8f:56:10:0b:06:0f:6b:ac:4a:d1:90:6a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:21 2025 GMT
            Not After : Sep 11 14:33:21 2026 GMT
        Subject: CN=49DDA7342A85135CA02839A1909E5D10B6C3C2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:2b:11:24:c2:fb:ef:47:33:ed:8e:f3:6c:
                    af:77:1d:b1:52:2a:70:a8:3c:61:23:f9:08:28:36:
                    55:45:2d:7f:79:19:64:4e:ec:14:29:d7:72:bf:a7:
                    c8:f3:19:7c:3c:c1:16:77:27:be:b2:82:56:ae:db:
                    51:28:04:fd:d2:d7:0b:8f:66:21:6a:c6:01:a8:1f:
                    d7:60:46:52:66:57:25:42:bc:a3:48:28:f9:6c:11:
                    58:91:7f:fd:06:67:bd:64:8f:be:9c:00:63:5f:35:
                    92:01:bb:10:26:95:9c:38:b3:0d:d4:d2:dd:00:ca:
                    07:86:bf:94:ca:1e:d1:1f:4a:35:8b:2e:28:e9:43:
                    97:2e:ac:fc:9f:20:e7:8c:ff:f8:f4:bf:6f:8a:51:
                    ca:c6:24:2c:2c:d4:2e:72:01:5d:04:5e:13:d7:68:
                    fe:b7:7f:4f:ec:1b:89:74:01:84:45:74:5c:69:36:
                    aa:c5:7c:72:df:5c:8a:ab:11:69:1f:0f:9a:db:0c:
                    68:05:2b:3f:fc:cc:9f:54:3e:bd:dd:a0:80:c6:7c:
                    df:83:7b:41:7f:02:43:32:3b:bc:46:ea:9d:07:6d:
                    40:a6:c7:15:db:37:6e:2c:0a:11:e5:c9:6b:59:0e:
                    43:a1:9c:c8:86:8f:19:ec:05:37:12:a7:7a:5f:05:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DD:A7:34:2A:85:13:5C:A0:28:39:A1:90:9E:5D:10:B6:C3:C2:D9
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:05:fb:6c:74:54:fb:eb:f2:01:df:2a:e9:2c:6c:00:a6:21:
         fc:29:1e:aa:01:59:fc:51:9a:1d:69:f3:60:f5:1e:f3:41:10:
         45:c6:2a:ec:b7:87:bc:67:7e:7d:6f:af:1d:a5:e3:54:e2:d0:
         11:6a:47:2e:f3:cf:75:db:f5:23:85:ff:73:ce:fc:f9:b8:5f:
         5d:de:05:ed:fb:7b:13:9f:23:d3:0e:ba:7c:55:85:23:2a:e2:
         cc:cf:da:e5:81:b8:b8:4d:fc:b0:77:93:d5:99:6a:7c:85:91:
         f8:3a:86:3b:34:e9:c9:5e:d6:81:df:95:3e:3e:48:d3:4a:af:
         6b:5c:8a:48:11:94:30:b6:9e:ef:b0:c2:f5:a2:0e:d7:47:aa:
         28:86:d9:17:d3:8b:72:bb:6b:60:0e:9d:03:52:85:ef:0b:ed:
         53:af:99:a7:85:a0:0e:f4:13:ec:e3:ec:ef:ff:ec:68:ae:38:
         b6:a9:11:10:a0:29:d1:ec:e6:d1:ab:d9:28:9a:7c:4a:32:3b:
         d8:e8:09:ca:c1:e7:50:9d:14:58:7b:d2:39:29:21:0b:75:96:
         1f:0f:45:e2:81:d1:c6:94:89:dd:f2:35:1b:16:75:cb:62:67:
         b4:36:e3:ec:9c:94:0e:88:f3:61:9e:b5:f6:05:50:d8:7c:3a:
         a2:98:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:38:28 2025 by rpki-client