Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133312e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3133312e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          mquykiXCDWFlk2yhPXd+VMpr98VrQ9y2TQivuhcEl44=
Subject key identifier:   FB:74:7F:DE:EF:28:F0:25:FD:9C:B1:99:64:66:3D:19:CB:B3:C1:CD
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       48712E19B73B1C7E813E2CA787241ED8BC62F4F8
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133312e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:15:44 +0000
ROA not before:           Fri 07 Aug 2026 00:10:44 +0000
ROA not after:            Fri 06 Aug 2027 00:15:44 +0000
asID:                     263585
IP address blocks:        179.109.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:71:2e:19:b7:3b:1c:7e:81:3e:2c:a7:87:24:1e:d8:bc:62:f4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:10:44 2026 GMT
            Not After : Aug  6 00:15:44 2027 GMT
        Subject: CN=FB747FDEEF28F025FD9CB19964663D19CBB3C1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:71:e9:07:bf:01:34:c7:fe:ab:23:2b:a4:
                    14:b3:d0:24:b4:7e:90:fc:74:0a:0a:8f:78:60:4f:
                    42:26:a9:f8:43:f8:f3:eb:7f:dd:ab:a0:cb:1f:0c:
                    95:fb:fb:26:8a:a2:76:59:c2:ce:7e:c4:8d:d4:85:
                    e6:57:14:95:09:1e:18:0e:69:48:38:c8:e8:e8:28:
                    54:38:51:ba:58:d6:0c:a1:71:83:1f:af:28:3a:2f:
                    97:3a:f7:42:15:76:a8:58:fa:d2:01:d7:ac:68:ce:
                    7f:ff:3e:d0:77:68:4f:c1:12:56:3d:ab:73:9b:50:
                    5a:02:26:7e:1d:fe:6e:7a:9a:22:52:06:30:82:c3:
                    78:41:36:c2:49:6d:9d:57:17:95:9e:14:fe:a2:ef:
                    38:52:74:ac:63:df:2a:05:16:7a:f1:4d:3e:5e:9f:
                    57:ee:43:84:aa:54:67:a2:c7:67:7e:81:d6:ce:18:
                    e2:c5:60:77:c8:a8:d6:8a:49:17:fe:b5:74:ec:31:
                    29:a3:98:58:20:46:54:09:7e:3f:34:24:4b:d5:7c:
                    1c:22:ce:c9:05:b9:ea:cc:0c:bf:bd:e6:1a:eb:53:
                    7e:86:eb:77:e0:cb:e7:25:ae:13:63:d4:4d:53:de:
                    3e:c9:78:8f:38:1a:63:7f:37:2d:6e:c3:bd:09:b8:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:74:7F:DE:EF:28:F0:25:FD:9C:B1:99:64:66:3D:19:CB:B3:C1:CD
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133312e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:97:50:2e:7e:1b:a2:82:c3:6e:f1:c8:8a:55:a8:b7:fa:
         03:28:20:1f:9e:d2:fa:92:9d:ea:f4:e1:65:cd:97:85:1e:7f:
         9d:9a:b4:43:4f:70:32:bb:b3:b2:14:0e:b8:d2:de:a9:fd:ba:
         83:3d:8b:9d:03:a1:5a:a3:0f:18:7a:c8:0a:f1:b5:2d:aa:06:
         05:ad:d6:04:12:18:cd:03:4f:ed:fa:98:b2:ee:6a:1c:c5:87:
         0a:c5:1b:87:94:c3:97:3e:64:3f:d2:fb:2b:dc:82:25:46:76:
         bf:bd:1f:a6:44:37:9f:13:6c:79:4b:c5:b5:ea:ca:49:89:73:
         cc:da:9a:95:c7:6e:8d:ab:5d:d5:44:55:8d:c4:7d:fe:f2:65:
         14:21:6c:21:46:4a:79:47:a3:25:b6:96:65:10:d0:28:50:54:
         87:33:d8:b0:9d:cc:c1:33:94:fa:c5:16:06:6a:c3:6b:0a:39:
         c1:90:5a:a7:52:c3:ce:94:51:17:03:19:9e:d1:d9:12:cf:c1:
         a1:38:0d:8e:8e:26:ee:6f:46:19:83:93:41:ad:7c:13:17:f8:
         f6:48:c0:44:8c:dd:22:92:f9:20:40:2e:d1:c1:a7:3c:a0:5d:
         a9:e0:23:d7:ab:8a:be:40:0d:12:ad:e8:bd:c8:ee:b2:94:94:
         99:5c:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:11:38 2026 by rpki-client