Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133302e302f32332d3233203d3e20323633353835.roa
File:                     3137392e3130392e3133302e302f32332d3233203d3e20323633353835.roa (raw, json)
Hash identifier:          EAl3IrsyHKi/Luhwy+b1EptstXCNCd9DX29LrVvy/u8=
Subject key identifier:   13:14:F8:8B:C5:E1:99:7E:DE:F1:B7:89:3C:26:7D:8C:A6:80:BD:39
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       09000F727D2BEE6226B04D32E46C6673D98427F3
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133302e302f32332d3233203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:13:41 +0000
ROA not before:           Fri 07 Aug 2026 00:08:41 +0000
ROA not after:            Fri 06 Aug 2027 00:13:41 +0000
asID:                     263585
IP address blocks:        179.109.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:00:0f:72:7d:2b:ee:62:26:b0:4d:32:e4:6c:66:73:d9:84:27:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:08:41 2026 GMT
            Not After : Aug  6 00:13:41 2027 GMT
        Subject: CN=1314F88BC5E1997EDEF1B7893C267D8CA680BD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fe:a9:1f:23:9a:a0:cb:74:35:7b:4c:52:b4:
                    4c:e0:33:70:d8:ec:da:e6:8b:82:21:c5:cd:57:a9:
                    57:f1:06:35:27:70:99:87:0b:48:48:7c:79:16:2a:
                    e1:f6:0e:b2:0e:11:41:44:49:01:32:41:e9:fd:50:
                    f9:04:9a:7b:99:dd:6c:d2:43:96:58:cc:bd:be:17:
                    a5:94:c2:34:d1:1f:80:0b:25:7f:d4:c0:13:45:1f:
                    e9:09:82:36:68:b5:54:43:58:96:7f:f0:74:70:4d:
                    3e:79:0e:58:ab:43:85:4f:03:a7:a6:64:43:f3:14:
                    58:8f:84:96:9c:fc:0c:41:60:bd:07:57:85:a3:52:
                    35:d8:54:a1:d7:84:3d:cd:57:90:72:46:c1:eb:e2:
                    8f:dd:f6:d9:75:e9:4a:4d:86:2f:f4:47:5c:5c:bf:
                    05:a9:ac:56:b2:62:16:71:7b:59:26:36:81:c4:8d:
                    f5:83:02:39:91:c5:e5:4d:17:80:2b:7c:7c:a0:51:
                    d8:0c:c7:9b:4c:98:f2:60:a6:f9:29:3b:4a:4d:4e:
                    12:e7:bf:86:a4:64:c3:80:c1:71:9a:76:6c:f3:ee:
                    1a:bd:04:b0:05:79:0e:5b:08:cb:17:e5:4f:ca:b5:
                    70:70:25:68:4a:3f:0e:c2:1f:99:cb:21:f1:84:6e:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:F8:8B:C5:E1:99:7E:DE:F1:B7:89:3C:26:7D:8C:A6:80:BD:39
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133302e302f32332d3233203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:a1:ab:f2:2a:1c:d2:74:5e:0b:70:ef:ab:89:a7:46:51:
         04:54:bc:4e:3c:be:f7:4f:cc:d4:4e:27:8b:12:0f:1c:6f:b4:
         c0:3a:5f:bb:ab:a8:0e:65:22:8e:66:ff:75:b8:dd:84:e7:2c:
         1f:a6:81:d4:6b:0a:33:3a:f1:62:32:37:50:9d:6c:e5:c7:0a:
         0b:e7:7d:2b:0c:f2:e8:50:ec:03:ae:03:c9:7a:f3:31:c1:e1:
         b4:a2:09:a4:30:5f:c0:86:55:2f:34:04:7d:fd:91:e6:a8:77:
         87:13:f7:9e:5b:64:d8:19:e6:90:30:5e:d0:8e:75:ae:0d:27:
         91:42:4a:ce:84:42:06:9b:da:69:43:a1:78:8a:eb:e7:62:0e:
         62:b5:74:b8:1a:7f:ec:e0:dc:72:37:26:32:95:72:69:46:86:
         4b:f7:aa:a8:1b:50:9a:ec:03:11:aa:57:cf:17:5f:b4:4b:d7:
         18:84:42:60:d1:51:8d:7b:68:08:13:6e:fa:f4:5f:30:ec:3c:
         f1:28:6a:80:bd:db:47:76:96:49:68:c8:e6:48:38:df:f5:55:
         a1:50:7f:45:63:01:ff:3e:57:59:d5:ac:f9:61:af:dd:bc:67:
         90:7d:b2:4e:33:f0:86:f6:63:02:5f:78:3b:3b:f7:4f:21:29:
         48:23:ad:06
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCQAPcn0r7mImsE0y5Gxmc9mEJ/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyNUUzMjIwQkM4RENBOENDQkVERUY3NDUyQzQzMzIx
RkI1RUU4MzAeFw0yNjA4MDcwMDA4NDFaFw0yNzA4MDYwMDEzNDFaMDMxMTAvBgNV
BAMTKDEzMTRGODhCQzVFMTk5N0VERUYxQjc4OTNDMjY3RDhDQTY4MEJEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/qkfI5qgy3Q1e0xStEzgM3DY
7Nrmi4Ihxc1XqVfxBjUncJmHC0hIfHkWKuH2DrIOEUFESQEyQen9UPkEmnuZ3WzS
Q5ZYzL2+F6WUwjTRH4ALJX/UwBNFH+kJgjZotVRDWJZ/8HRwTT55DlirQ4VPA6em
ZEPzFFiPhJac/AxBYL0HV4WjUjXYVKHXhD3NV5ByRsHr4o/d9tl16UpNhi/0R1xc
vwWprFayYhZxe1kmNoHEjfWDAjmRxeVNF4ArfHygUdgMx5tMmPJgpvkpO0pNThLn
v4akZMOAwXGadmzz7hq9BLAFeQ5bCMsX5U/KtXBwJWhKPw7CH5nLIfGEbkaFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUExT4i8XhmX7e8beJPCZ9jKaAvTkwHwYDVR0j
BBgwFoAUlCXjIgvI3KjMvt73RSxDMh+17oMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFBSUldDV1dqUUxuZFR0aHg3UGVHV2hOOHVlb2J2SnVtRHI5OHBoU2tt
TVQvMC85NDI1RTMyMjBCQzhEQ0E4Q0NCRURFRjc0NTJDNDMzMjFGQjVFRTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0MjVFMzIyMEJDOERDQThD
Q0JFREVGNzQ1MkM0MzMyMUZCNUVFODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhQUlJXQ1dXalFMbmRUdGh4N1BlR1doTjh1ZW9idkp1bURyOThwaFNrbU1ULzAv
MzEzNzM5MmUzMTMwMzkyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM1MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNtgjANBgkqhkiG9w0BAQsFAAOCAQEARsqh
q/IqHNJ0Xgtw76uJp0ZRBFS8Tjy+90/M1E4nixIPHG+0wDpfu6uoDmUijmb/dbjd
hOcsH6aB1GsKMzrxYjI3UJ1s5ccKC+d9Kwzy6FDsA64DyXrzMcHhtKIJpDBfwIZV
LzQEff2R5qh3hxP3nltk2BnmkDBe0I51rg0nkUJKzoRCBpvaaUOheIrr52IOYrV0
uBp/7ODccjcmMpVyaUaGS/eqqBtQmuwDEapXzxdftEvXGIRCYNFRjXtoCBNu+vRf
MOw88ShqgL3bR3aWSWjI5kg43/VVoVB/RWMB/z5XWdWs+WGv3bxnkH2yTjPwhvZj
Al94Ozv3TyEpSCOtBg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:12:58 2026 by rpki-client