Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35352e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35352e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          uyP+ovjfA1UKR31Gc6tNAyRCgcQnyYM2ZY7NNdWA+p8=
Subject key identifier:   D3:FE:2F:98:4A:1F:7A:B4:5A:5C:1F:48:FB:8D:4D:4B:6D:48:D0:09
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       3B8EE47AC9FE50028D44D55A43E1EFB10AE3BD76
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35352e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:24 +0000
ROA not before:           Fri 12 Sep 2025 14:28:24 +0000
ROA not after:            Fri 11 Sep 2026 14:33:24 +0000
asID:                     28128
IP address blocks:        187.19.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8e:e4:7a:c9:fe:50:02:8d:44:d5:5a:43:e1:ef:b1:0a:e3:bd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:24 2025 GMT
            Not After : Sep 11 14:33:24 2026 GMT
        Subject: CN=D3FE2F984A1F7AB45A5C1F48FB8D4D4B6D48D009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:51:9f:aa:66:5a:08:35:a5:70:b2:05:91:
                    e7:51:e7:bb:6e:b4:68:37:fa:02:56:8e:f3:c6:56:
                    41:7d:e1:e8:e0:2b:06:97:1d:15:6a:2c:8a:2a:3f:
                    ff:50:37:2b:17:bc:b0:1f:4e:65:27:a9:31:66:98:
                    17:ab:c5:14:1b:03:ec:bd:98:45:b7:44:c8:4b:d8:
                    61:9f:cc:05:3a:dd:dd:ac:1e:c8:e3:a4:bd:87:e5:
                    bf:b0:08:cc:21:50:07:49:a7:68:03:76:13:e5:22:
                    97:14:02:b1:cb:54:da:3b:88:98:7c:a2:53:be:4e:
                    c8:37:7d:e6:c7:cc:f1:53:1a:cc:fe:ee:d8:ef:1b:
                    b9:e1:ce:6f:7f:08:a3:61:70:37:0e:c9:5e:a5:03:
                    49:2f:57:39:8e:a0:9c:cf:44:60:e7:e1:3f:cd:3a:
                    5a:dc:b2:98:a8:0a:18:9e:b5:16:e3:a9:be:70:6e:
                    fb:dc:f5:68:55:7f:52:71:65:55:92:a9:4d:42:04:
                    6b:9e:d0:d2:f6:d1:88:ee:89:9e:42:7a:53:25:9d:
                    64:d5:84:8b:b2:59:69:b7:10:0f:de:81:45:27:67:
                    35:dc:f5:ff:2b:53:82:eb:32:eb:35:92:a6:78:cf:
                    fc:50:aa:9e:bf:88:90:db:14:2f:cc:5e:06:27:d2:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FE:2F:98:4A:1F:7A:B4:5A:5C:1F:48:FB:8D:4D:4B:6D:48:D0:09
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35352e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:67:d6:40:d4:6d:49:5e:8a:91:ab:37:a2:de:bf:32:e9:
         1a:b6:45:c1:4b:f9:62:7d:93:45:b1:9b:14:23:2d:5c:c6:5a:
         f7:42:b3:2d:1c:7c:63:bb:fa:1e:47:c9:d9:85:ba:86:9f:4a:
         a9:2c:5b:90:5c:1f:84:ef:37:a2:4a:ee:01:b3:88:ae:e4:f0:
         ec:70:a5:59:42:05:bc:a0:66:9f:26:f6:f2:50:e6:ad:a1:bc:
         fe:8b:cb:6a:d3:05:dc:9e:23:97:4c:66:ed:ee:22:d8:02:05:
         32:67:4f:bd:45:c8:32:4b:b2:8f:f2:d4:80:f4:43:5b:51:e7:
         20:ac:45:c8:4f:46:5a:af:e3:c0:69:1c:e0:e8:de:e5:53:68:
         7e:3a:8c:51:65:88:b8:fa:e8:c8:c6:26:51:f1:00:b3:b5:3d:
         4f:12:3b:3f:ab:7f:85:5b:5b:f6:c4:35:05:04:3d:8b:b9:b0:
         77:98:8a:55:65:69:23:be:69:d3:78:1c:e4:e4:94:28:4f:8c:
         a4:50:5d:b2:66:5b:08:af:87:1e:37:44:69:25:a1:50:14:f1:
         61:60:8d:2c:c4:56:69:42:76:52:d9:6e:97:3c:d1:11:8b:9e:
         38:a8:a1:30:4f:7f:61:71:5a:b9:68:53:f5:70:ea:4e:86:e9:
         6c:74:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:04:18 2025 by rpki-client