Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133322e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3133322e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          6eS/Pe4kSenKzf9nDtr3wBYD9JI5g1zmIJhFC1UcOA8=
Subject key identifier:   7D:A0:1F:7D:F2:EB:27:F6:32:80:FE:49:EB:FD:7C:95:1F:82:28:17
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       2F4F5B03C96042E78C621A26C3F115874F919817
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133322e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:15:52 +0000
ROA not before:           Fri 07 Aug 2026 00:10:52 +0000
ROA not after:            Fri 06 Aug 2027 00:15:52 +0000
asID:                     263585
IP address blocks:        179.109.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4f:5b:03:c9:60:42:e7:8c:62:1a:26:c3:f1:15:87:4f:91:98:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:10:52 2026 GMT
            Not After : Aug  6 00:15:52 2027 GMT
        Subject: CN=7DA01F7DF2EB27F63280FE49EBFD7C951F822817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:ee:2c:df:1c:ae:f1:02:b6:13:04:0d:f6:
                    ec:96:a7:70:dd:bb:03:74:54:40:2a:68:46:a8:33:
                    42:29:3c:52:da:39:35:72:b3:47:18:fe:84:69:59:
                    30:8b:4d:ec:f9:a3:5d:36:14:0b:26:ff:60:54:3e:
                    13:3a:1e:b9:d9:90:8c:65:58:10:03:d9:49:ff:82:
                    da:90:fe:41:e7:21:02:68:3d:0c:6a:2d:4a:a6:6f:
                    9e:fd:87:56:b2:15:c9:45:4c:a4:00:26:ad:b4:d4:
                    ec:22:44:c6:b7:50:bd:e9:6e:b4:76:f6:3c:d4:10:
                    3c:6f:77:b3:71:d5:47:33:05:0e:bc:4f:17:b6:29:
                    49:db:1f:a1:32:59:65:62:06:f3:5c:c3:82:5d:42:
                    39:46:b2:88:cc:28:43:80:ed:7d:b8:a2:0e:10:4c:
                    c9:ef:01:6e:92:de:76:04:f7:a9:4c:3d:36:56:90:
                    fc:4c:03:54:84:f6:05:32:9c:91:5c:4e:09:0a:30:
                    91:72:4f:94:ec:22:eb:a9:93:31:b3:19:66:4a:cf:
                    af:80:f2:1c:54:88:03:4a:34:9f:b9:49:5f:e9:60:
                    00:66:5a:7e:b9:b5:09:e6:45:1f:f5:3f:49:92:02:
                    f1:b2:9b:3c:24:1f:ac:3a:85:28:ce:15:88:af:12:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A0:1F:7D:F2:EB:27:F6:32:80:FE:49:EB:FD:7C:95:1F:82:28:17
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133322e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:64:73:55:68:fe:91:0d:1b:32:eb:c1:63:af:d8:9e:30:6e:
         73:a8:a4:eb:a0:89:56:6b:7c:cc:7f:84:9c:6f:46:12:42:1e:
         61:aa:26:71:f3:87:68:99:95:31:dd:e0:78:6a:7b:64:28:ac:
         a2:28:77:a2:f9:f2:21:7b:1f:aa:9e:64:dd:a7:4c:fb:5e:71:
         f1:4d:3a:d1:8e:ca:63:e8:0f:1f:60:b3:a3:77:f8:6c:61:0a:
         2a:8e:05:5a:42:d3:d3:0f:1c:2c:15:c4:5f:2e:6f:58:47:e9:
         02:e6:66:93:b2:a1:ff:aa:54:08:3e:4a:66:63:0b:c6:95:80:
         26:14:42:82:a5:91:7e:a3:ac:56:f6:1b:a3:4a:90:38:22:f3:
         04:cb:ee:51:9d:58:13:d8:03:ae:af:af:85:34:16:2a:a4:1b:
         91:80:17:ec:ed:7f:c9:88:8b:25:ad:58:65:ef:6d:f3:6f:7e:
         f6:a2:39:d5:fb:72:31:d7:15:c8:2f:1d:f1:5c:8a:b6:45:de:
         b9:98:ab:45:48:ad:ef:7f:47:3e:98:f2:12:0a:6f:a2:0b:34:
         6c:62:16:dc:b5:74:6d:70:72:c8:f3:4e:4c:1f:8e:52:2f:ba:
         80:bf:ee:4a:a2:c3:6a:c0:39:15:35:02:32:37:b8:39:b2:62:
         22:16:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:43:47 2026 by rpki-client