Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36322e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e36322e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          3FgRsbMw2MbkPUAoTvUHm8EA/OF8MO0n7Bf0wVdNDgo=
Subject key identifier:   6C:40:97:70:06:07:E2:11:51:09:B3:07:92:B9:45:16:2D:99:05:4C
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       755BCAC12E079F41B2146ED86A38694E6F37CE99
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36322e302f32342d3234203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:33:37 +0000
ROA not before:           Fri 12 Sep 2025 14:28:37 +0000
ROA not after:            Fri 11 Sep 2026 14:33:37 +0000
asID:                     28128
IP address blocks:        187.19.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5b:ca:c1:2e:07:9f:41:b2:14:6e:d8:6a:38:69:4e:6f:37:ce:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:28:37 2025 GMT
            Not After : Sep 11 14:33:37 2026 GMT
        Subject: CN=6C4097700607E2115109B30792B945162D99054C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:6c:0f:c0:ce:6d:e8:22:bf:03:81:a8:a0:
                    84:b9:e7:b1:3f:6d:55:66:22:19:d6:b8:18:76:c7:
                    46:ce:2d:bc:59:cf:a6:cd:80:a2:dc:bd:cf:8b:6b:
                    6c:93:4b:ac:9d:f0:8a:73:d6:ee:6a:fa:4b:89:1b:
                    e1:33:63:a6:27:fb:ce:6a:a5:47:7c:83:83:4a:1c:
                    d8:75:a9:38:d0:ad:87:31:66:eb:94:40:29:57:5d:
                    0a:b1:de:bb:db:0d:22:e4:a5:6e:4f:85:ca:47:36:
                    ec:86:1f:c8:7c:40:ee:77:07:14:81:84:2e:e2:2c:
                    5d:eb:b4:88:22:ee:5b:30:0f:f7:87:ef:31:01:c5:
                    27:96:97:a8:fb:e7:32:c0:02:8d:8c:ce:ee:b1:c3:
                    d5:3d:63:fa:ac:90:9e:1c:4c:d1:6e:d4:9a:04:0d:
                    67:56:be:ab:49:bf:af:28:93:f8:37:56:05:c4:0e:
                    ea:f4:e0:f0:0e:88:cc:93:99:10:e4:11:75:e1:85:
                    b4:10:d5:dc:a9:06:9c:4d:84:f8:e7:a9:11:45:a9:
                    79:06:5b:93:0e:a1:83:96:83:d5:9f:77:50:f8:a1:
                    b8:e4:de:12:b0:38:e4:48:67:26:05:fd:44:8b:df:
                    7c:0e:35:ff:c0:42:ed:58:98:7c:d2:d5:d8:f5:73:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:97:70:06:07:E2:11:51:09:B3:07:92:B9:45:16:2D:99:05:4C
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36322e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:57:9f:32:57:56:4e:0a:4c:dc:82:b5:5c:ee:90:63:e0:89:
         25:d6:a7:bb:9a:04:66:20:a5:5c:b4:ad:26:eb:c1:ad:84:5f:
         d5:d4:c3:f5:f6:d3:c3:ba:a0:30:f3:9f:18:b0:ad:13:43:ce:
         39:59:66:82:a4:fb:50:a9:c0:6c:05:9c:87:fa:00:2b:0d:e6:
         7a:04:77:65:f4:4a:af:79:e6:b7:8c:2c:1b:82:90:a9:48:5d:
         a9:4f:6e:69:3f:98:d6:f4:2a:3a:f0:b1:d3:32:76:52:ed:1f:
         e1:a1:77:27:ed:27:2d:47:0d:59:e1:27:7b:67:6a:c1:92:b4:
         4d:45:89:48:57:56:2a:b6:8e:c7:e1:d1:78:92:8b:8d:3b:42:
         b9:6b:15:ab:c9:13:5b:1f:7b:d8:98:58:ba:8d:c0:4e:d0:87:
         5b:37:d9:ed:3c:a7:bf:9c:9e:d0:f6:fb:0f:32:a2:0c:2a:41:
         af:16:11:00:d0:cf:c3:8b:26:2d:f7:26:bc:1f:4c:1c:f0:64:
         f0:00:1e:ae:e2:e1:83:0a:b4:88:dc:a8:04:4b:e6:21:5c:79:
         bc:c3:b6:ff:e6:25:f4:6f:22:01:2b:32:5e:32:db:46:1e:86:
         9c:39:b8:f8:47:18:2d:13:33:e4:55:5a:31:b1:db:46:25:10:
         63:61:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:10:04 2025 by rpki-client