Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e36312e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          ZOD6c18guikPxJeNZ51cNtNINWsn/vBxcPdxARn9M6A=
Subject key identifier:   AB:18:87:03:B6:3A:E3:57:22:22:B2:33:6F:0B:51:90:E4:7E:21:66
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       6A8606E2A8A3A753BC911DF38E971B6E2A39BA23
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:35 +0000
ROA not before:           Fri 12 Sep 2025 14:28:35 +0000
ROA not after:            Fri 11 Sep 2026 14:33:35 +0000
asID:                     28128
IP address blocks:        187.19.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:86:06:e2:a8:a3:a7:53:bc:91:1d:f3:8e:97:1b:6e:2a:39:ba:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:35 2025 GMT
            Not After : Sep 11 14:33:35 2026 GMT
        Subject: CN=AB188703B63AE3572222B2336F0B5190E47E2166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:dc:49:e7:20:28:0f:fe:14:bf:fe:da:2e:
                    84:57:61:9b:d7:c5:b3:45:a1:e3:2f:e4:ad:5f:7e:
                    42:ba:f4:74:a3:ba:65:0e:ec:a2:d8:6d:d4:5b:6a:
                    2c:4d:9f:e3:a0:4b:0e:b1:9e:20:c8:6c:fc:18:29:
                    71:f8:54:df:23:69:a0:a4:46:5e:7b:7c:fc:7d:28:
                    41:75:c6:52:09:e6:35:28:c6:27:9e:f9:a0:7c:e5:
                    ec:6f:de:ba:ae:d2:94:f1:dc:76:b9:2d:88:0a:18:
                    01:4b:f8:25:54:52:7f:8e:b5:e5:8b:c3:b1:8c:0a:
                    39:a0:16:1e:d5:e1:86:9d:87:48:b9:8b:cf:ff:e5:
                    2e:69:2d:5a:e7:2e:2d:d2:e2:11:03:e5:aa:11:9f:
                    20:35:5c:1f:a3:2a:65:f5:30:e6:41:4e:24:3c:69:
                    04:67:4d:ec:bf:6d:14:c8:3c:92:95:f1:c9:8e:31:
                    14:e4:ff:53:e5:3a:09:9e:87:5f:e3:32:ff:dc:5a:
                    cc:a9:64:1e:10:65:47:43:35:25:64:bf:fb:98:ce:
                    a1:4f:ba:cc:ca:9c:65:d3:e5:4d:60:0b:37:d6:9f:
                    6f:19:92:1e:fe:cd:00:63:23:01:90:df:cf:c7:d0:
                    98:30:8c:d6:37:f1:76:84:c7:92:a7:6c:60:85:9a:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:87:03:B6:3A:E3:57:22:22:B2:33:6F:0B:51:90:E4:7E:21:66
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:52:35:a3:88:93:a3:da:d0:07:c0:98:f1:a5:0f:a4:3c:1d:
         09:60:66:b0:e1:f1:31:87:1e:aa:a6:fa:39:61:61:d6:93:1e:
         b8:6c:05:ef:67:2a:b9:7d:d9:f8:84:7b:98:bd:d1:56:49:a6:
         15:b2:9d:fd:5e:0f:58:d0:0c:38:1b:28:de:6e:f3:58:46:79:
         b2:33:bd:59:e7:7f:ea:7c:23:44:4c:f7:6e:15:72:cd:99:fa:
         4c:dd:28:84:72:88:b0:67:a5:4f:ed:f6:b0:99:6e:84:8f:e1:
         d2:2f:3f:f8:0b:d4:e6:04:45:9d:ba:10:00:f6:ba:d2:cf:f9:
         fd:63:aa:28:d0:52:7f:42:1c:ab:df:98:f5:3b:b8:f2:72:a5:
         79:a2:fb:4d:e2:2c:90:f5:a2:9e:58:a8:99:b6:bb:68:ba:77:
         c9:80:a5:7f:7c:35:c0:f6:8c:01:c3:4e:9c:17:13:04:5d:e3:
         35:10:94:06:a9:8b:62:cd:46:43:49:d4:bb:36:b8:14:3a:9d:
         b4:03:33:b8:7b:69:89:45:0b:bc:f1:55:81:05:5b:68:23:82:
         05:12:18:51:6a:77:4e:34:8d:f4:7e:2b:88:81:6e:88:fd:5e:
         60:40:8d:23:9e:87:36:1f:7e:7e:7a:85:9b:49:a5:26:79:ed:
         36:e0:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:37:13 2025 by rpki-client