Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3232342e302f32302d3234203d3e203533303837.roa
File:                     3138372e33332e3232342e302f32302d3234203d3e203533303837.roa (raw, json)
Hash identifier:          BQkpwUhNSg6EqtEScdfnS8ZDWSB32RkcbRR4gJ08gfU=
Subject key identifier:   8A:3F:B6:8D:8B:43:B1:7B:6E:B0:08:64:25:D1:98:E4:19:F9:A6:50
Certificate issuer:       /CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
Certificate serial:       31461B8CC0640EB19136372F3749F6B18F6DC7CA
Authority key identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3232342e302f32302d3234203d3e203533303837.roa
Signing time:             Wed 17 Sep 2025 20:25:02 +0000
ROA not before:           Wed 17 Sep 2025 20:20:02 +0000
ROA not after:            Wed 16 Sep 2026 20:25:02 +0000
asID:                     53087
IP address blocks:        187.33.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl
                          rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:46:1b:8c:c0:64:0e:b1:91:36:37:2f:37:49:f6:b1:8f:6d:c7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
        Validity
            Not Before: Sep 17 20:20:02 2025 GMT
            Not After : Sep 16 20:25:02 2026 GMT
        Subject: CN=8A3FB68D8B43B17B6EB0086425D198E419F9A650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:56:9c:ad:4f:1f:89:c5:48:99:22:3c:fa:
                    f6:4b:f2:a2:d7:49:4b:27:e4:ab:8b:8c:7a:93:21:
                    db:b7:85:73:6b:20:63:b0:f3:6f:1f:d6:74:68:fa:
                    58:17:fc:31:ee:3e:ac:96:ae:18:cb:37:d1:06:ea:
                    16:f7:9d:d5:47:91:8f:e7:5a:27:2a:b9:dc:28:6f:
                    da:bd:76:40:ee:33:e8:e8:61:a3:82:d7:74:c6:ca:
                    25:9f:6d:50:19:98:b9:e5:e9:8a:a7:c2:dd:ae:0e:
                    bd:07:b2:8f:68:98:95:c0:13:4e:f9:ae:8e:a2:a5:
                    9d:96:c8:7a:2a:e6:8a:22:e0:75:6d:61:57:1b:e7:
                    b5:ca:f7:a2:bd:03:91:28:a5:1d:b4:e4:78:25:0b:
                    be:6c:9b:bd:f2:4b:53:a6:19:ab:de:c4:72:be:fa:
                    0a:47:82:10:9d:53:c9:28:51:3f:8f:d4:a5:ee:ff:
                    6e:43:cb:e8:0a:c6:aa:e4:79:c5:3b:28:6d:6f:fc:
                    ac:a6:95:99:ad:40:10:c5:6a:bf:5e:3d:57:49:ef:
                    86:dd:ed:a4:c3:fd:95:9d:b1:c6:66:1f:7d:61:d9:
                    19:ea:83:73:a3:ce:7a:7b:4f:80:96:1a:f0:0e:ca:
                    f7:2e:74:51:2f:43:76:0e:de:c5:ed:13:56:3b:16:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3F:B6:8D:8B:43:B1:7B:6E:B0:08:64:25:D1:98:E4:19:F9:A6:50
            X509v3 Authority Key Identifier:
                keyid:E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3232342e302f32302d3234203d3e203533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:f9:ad:da:90:5c:09:5c:54:0b:00:03:bf:b3:81:23:8f:76:
         07:e3:1b:8b:8c:21:a5:7c:ca:b0:b6:8b:9b:b4:91:56:b8:53:
         d3:8b:aa:5c:80:64:10:96:58:2b:f8:f1:93:98:ba:28:67:3a:
         c3:3e:a2:85:9b:f7:14:b0:79:d5:77:aa:2b:71:dd:50:15:5f:
         a8:13:58:27:73:fa:cc:58:16:c3:95:30:27:43:46:94:72:07:
         5d:bc:54:72:94:2c:f9:af:9f:25:ec:db:0f:b1:59:46:ef:45:
         57:ce:7b:d0:06:6d:2f:72:9c:85:c0:d0:43:7d:64:41:ab:07:
         0b:18:05:c5:16:c6:65:90:65:9b:3e:90:2f:3d:ab:bc:23:7c:
         08:16:52:29:34:4f:f5:ce:ab:d8:f3:3b:7a:24:2f:b4:e9:4a:
         e5:a0:d7:b6:28:c4:a4:3b:e6:64:08:cb:0b:ff:04:96:d4:66:
         01:ae:1b:3d:bf:74:30:e7:2b:93:f7:b9:ea:3d:f6:63:18:e5:
         90:9f:e4:67:f8:c1:53:0f:4e:17:59:6f:96:9c:8e:e3:8a:63:
         19:2d:c8:e0:04:ce:99:20:2a:58:d5:d7:fd:73:5a:5a:81:1e:
         34:e7:3d:57:e7:90:15:bd:97:8e:ba:df:6e:24:c1:66:53:83:
         34:3f:e6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:27:10 2025 by rpki-client