Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35392e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35392e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          UTuHvb98etCFXrFp8nW8dlnrOUwLj1WnSzmJzUUJ0JU=
Subject key identifier:   B2:7F:B2:22:A1:21:AD:09:02:A0:30:3F:02:FE:5B:83:C0:B6:A0:7B
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       35ADD3BDCB1832B6B52A74D9D378B4BC3A167AED
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35392e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:32 +0000
ROA not before:           Fri 12 Sep 2025 14:28:32 +0000
ROA not after:            Fri 11 Sep 2026 14:33:32 +0000
asID:                     28128
IP address blocks:        187.19.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ad:d3:bd:cb:18:32:b6:b5:2a:74:d9:d3:78:b4:bc:3a:16:7a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:32 2025 GMT
            Not After : Sep 11 14:33:32 2026 GMT
        Subject: CN=B27FB222A121AD0902A0303F02FE5B83C0B6A07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:00:81:97:1f:99:ed:69:ca:5c:6b:fc:33:
                    f8:f5:8d:f9:91:4f:8a:4e:9b:7c:78:ec:4a:63:31:
                    23:25:07:a7:42:f3:bb:e9:e2:4f:44:40:33:b4:46:
                    33:4a:05:63:5e:b0:bf:78:42:4b:5a:95:61:e8:78:
                    cf:7a:aa:f4:a9:cb:7a:f4:41:94:b4:29:77:e5:e7:
                    77:81:31:21:2f:ba:42:1e:0f:20:ee:4d:5f:57:61:
                    c9:f5:45:b9:2b:da:11:fd:dd:27:25:0f:68:3a:12:
                    9c:1e:de:f9:a1:40:93:28:df:90:97:2c:e1:d3:72:
                    9b:bb:89:f4:48:34:af:48:84:cf:7e:99:3a:73:43:
                    f7:a2:09:72:a8:ff:46:1c:3b:6a:d6:d0:d5:e0:f3:
                    9f:2e:16:94:e1:be:63:e3:0d:27:aa:05:70:53:f7:
                    ce:72:51:97:6b:88:3b:19:60:a8:4e:92:82:57:07:
                    03:6f:f8:db:18:aa:fa:be:d3:ec:e8:cb:65:b9:d1:
                    6a:18:02:52:b0:e4:51:d9:47:a6:d6:b0:95:38:69:
                    ea:35:8b:e7:c7:b3:87:bc:f6:5c:fb:b0:48:32:69:
                    a8:d5:d1:57:de:af:8c:ab:90:b6:9e:d8:b2:29:c7:
                    c4:73:8d:23:1c:e0:6b:69:30:30:74:af:ac:d3:71:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7F:B2:22:A1:21:AD:09:02:A0:30:3F:02:FE:5B:83:C0:B6:A0:7B
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35392e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:6d:ca:f6:b9:1c:4f:0c:ac:49:24:55:d2:09:fc:a5:38:
         23:57:3f:dc:a2:ed:c0:8b:da:83:12:3c:3d:b3:56:fa:c9:05:
         4a:6f:33:7b:f6:8b:e7:80:a1:bb:30:72:7a:bb:7a:3f:c6:ec:
         7d:cc:a7:7f:bc:ba:48:c6:7b:11:71:ec:de:9a:b0:78:fa:2d:
         fd:2b:a2:6c:5f:e4:6d:33:02:2d:6b:0d:b1:58:99:9b:0d:62:
         29:51:19:4b:bd:10:b1:cc:12:f5:10:bb:e7:25:ba:05:a4:80:
         26:db:6a:44:f6:cc:fb:7e:c4:1e:d4:e7:72:52:94:be:55:20:
         35:52:13:f1:0e:99:42:04:1c:34:f2:5c:cc:ba:07:33:2e:51:
         b2:72:e3:33:b0:0a:98:c3:9b:4d:02:4d:91:b6:e9:0e:3f:6f:
         fb:cc:bd:04:1d:09:aa:d8:d7:37:aa:2f:67:7e:20:2d:7a:f7:
         41:d7:e3:4c:13:c2:1b:50:85:32:4b:93:66:db:11:77:95:c6:
         04:6d:62:b1:b1:35:aa:20:ea:81:c9:0f:2d:09:06:e6:cb:91:
         07:95:f0:5d:22:21:ca:c5:d0:d8:52:ac:03:9c:ee:e8:4b:cc:
         7c:a0:76:6d:61:6b:17:28:77:eb:4c:bf:32:9d:59:88:24:fb:
         44:52:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:38:18 2025 by rpki-client