Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36302e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e36302e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          WC6Z9p8DgwekQPGrf2tBRVW8g4WZqw4qfjMoUV+LPGE=
Subject key identifier:   FD:E1:C2:48:3E:90:84:20:01:E5:CE:B6:AC:62:59:63:F1:8B:85:3B
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       7A7F64AC30B62AF2ADD47DC9E9178747A0A69BE0
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36302e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:34 +0000
ROA not before:           Fri 12 Sep 2025 14:28:34 +0000
ROA not after:            Fri 11 Sep 2026 14:33:34 +0000
asID:                     28128
IP address blocks:        187.19.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7f:64:ac:30:b6:2a:f2:ad:d4:7d:c9:e9:17:87:47:a0:a6:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:34 2025 GMT
            Not After : Sep 11 14:33:34 2026 GMT
        Subject: CN=FDE1C2483E90842001E5CEB6AC625963F18B853B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:9f:53:de:80:41:90:2e:7a:f3:35:e8:02:
                    a4:30:50:bd:7f:a0:55:06:07:75:c5:59:ec:e4:bf:
                    ce:80:6c:c8:1f:40:c9:15:85:82:fd:2e:f1:d2:48:
                    60:a6:77:df:33:31:f6:16:2e:3e:80:8a:e0:78:32:
                    02:41:11:88:84:a1:84:58:c0:21:1d:44:93:45:a5:
                    51:77:8b:71:83:07:0d:0b:d8:eb:97:84:5d:e3:c5:
                    32:a6:fb:9f:84:03:d6:8a:6e:17:a2:42:4c:c3:8b:
                    5f:9b:6d:ad:70:3a:cf:dd:9a:a3:ca:86:65:4e:c7:
                    ae:ef:11:f3:7c:b2:2e:e9:34:db:c3:4a:14:0d:7f:
                    b8:22:e5:bf:06:de:03:ac:4f:18:a4:af:db:9c:a8:
                    d6:13:df:cd:9b:95:95:ae:3a:aa:f2:d7:f7:4f:e6:
                    74:87:19:e0:a3:57:4e:dc:bd:e2:52:e6:80:da:bb:
                    b6:4b:af:52:ec:18:c0:80:eb:9e:72:1c:7f:66:03:
                    b7:bb:0b:6e:52:f6:9f:4c:ee:e0:04:75:b9:cd:7c:
                    84:bc:49:e0:e4:dc:b7:7f:ea:46:8c:17:8f:5e:b3:
                    57:a5:07:98:01:a4:3e:c8:ac:fe:33:3c:d5:07:92:
                    e9:08:b5:1f:5b:ac:8f:de:4e:ab:1f:5f:32:77:df:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:C2:48:3E:90:84:20:01:E5:CE:B6:AC:62:59:63:F1:8B:85:3B
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36302e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:ad:28:c0:6d:0a:d3:4e:ae:07:06:1c:c1:20:5d:62:42:
         5e:a6:af:8d:c0:7a:87:71:9c:e2:df:53:6e:c1:25:f9:89:f3:
         29:a4:de:4a:0a:8f:69:29:c3:62:75:b8:42:ed:d1:d6:99:92:
         57:c4:54:44:71:8c:16:8c:04:78:cb:7c:f9:0a:d4:11:8d:5c:
         13:68:eb:0f:32:f9:86:1a:36:3b:63:22:48:8f:f2:cb:d5:0c:
         88:97:8a:58:4b:fe:6a:42:df:7a:14:3b:e1:53:5a:26:50:69:
         09:da:17:f6:db:63:36:3c:54:62:43:b2:64:9d:04:28:b8:22:
         08:58:2c:c3:ea:a7:aa:50:39:c0:96:ee:61:94:88:5e:08:bf:
         09:e0:38:df:70:a2:62:38:1a:a5:e7:e6:97:87:48:ea:58:28:
         2c:bf:ad:74:72:13:46:43:59:79:05:ac:ef:ac:b2:76:48:04:
         6c:30:60:04:13:29:6a:38:23:3a:fe:14:3a:0b:2c:1a:cd:15:
         0a:b0:66:17:8c:86:6f:44:d8:96:fd:16:42:1d:50:bf:d4:26:
         63:b0:08:b3:94:56:f5:f2:0a:16:7c:1b:ed:d1:9e:38:1c:72:
         67:3c:a5:40:1b:2c:b0:73:3f:ea:5b:48:e2:6f:3c:80:20:d1:
         49:60:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:04:30 2025 by rpki-client