Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133342e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3133342e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          hPGld0wXS4rL9bWac78Lzrtq6yxk6/+8bu0R3Ne4pRw=
Subject key identifier:   9D:B7:BC:09:1A:A1:BD:0B:36:CB:15:13:57:44:12:84:34:22:92:2D
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       19B52202E61F7B3D1AE2CA55B2712EFAB283416D
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133342e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:16:19 +0000
ROA not before:           Fri 07 Aug 2026 00:11:19 +0000
ROA not after:            Fri 06 Aug 2027 00:16:19 +0000
asID:                     263585
IP address blocks:        179.109.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b5:22:02:e6:1f:7b:3d:1a:e2:ca:55:b2:71:2e:fa:b2:83:41:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:11:19 2026 GMT
            Not After : Aug  6 00:16:19 2027 GMT
        Subject: CN=9DB7BC091AA1BD0B36CB1513574412843422922D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:02:47:22:70:4b:ee:49:72:57:46:b8:e0:
                    dd:e5:a5:a1:77:5c:db:87:bb:91:76:a6:50:ad:67:
                    c4:b4:1a:3d:7b:31:8f:f1:78:b0:41:ec:52:24:81:
                    d9:81:e0:3b:1f:f7:d1:b6:2e:38:e4:9a:34:42:7f:
                    a0:38:01:3d:a0:fc:1c:62:d1:0b:5d:cf:44:50:4e:
                    68:42:8e:60:43:22:e9:f5:74:56:4a:2f:d8:8f:8a:
                    85:f6:74:5c:78:28:bb:28:37:95:e8:d4:fc:8e:4f:
                    bb:58:6d:28:18:d8:39:fb:6a:e7:6c:cd:f4:98:df:
                    c4:4d:85:71:2d:5c:c4:8b:d3:43:69:93:28:e3:14:
                    d3:58:fc:b8:be:4f:ef:1d:de:3b:e6:36:95:3f:71:
                    cf:c5:1d:c0:1a:a9:59:f2:df:35:09:1a:d1:a4:13:
                    2d:2a:9e:d7:d7:6e:c5:c4:14:a3:f5:2c:24:bd:20:
                    4e:30:d8:dd:44:e9:93:c1:67:eb:fd:b0:14:72:bc:
                    09:ad:58:1d:a6:1d:ea:f4:33:d8:43:9a:a9:d6:61:
                    7d:49:17:18:86:e2:fd:4d:ca:5f:5b:09:d9:e9:8c:
                    10:25:87:05:2c:52:b3:69:24:ff:85:9a:b4:bf:54:
                    0b:a3:72:cd:cf:6c:10:30:ee:94:84:e3:07:74:17:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B7:BC:09:1A:A1:BD:0B:36:CB:15:13:57:44:12:84:34:22:92:2D
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133342e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:e0:af:9f:21:3e:f7:4a:63:a2:04:7e:1e:ee:e6:67:7f:
         8d:aa:56:3d:31:03:46:98:04:c4:7f:3d:f9:9d:e3:e8:3c:cd:
         68:81:ce:6e:9b:84:af:57:4b:15:2e:09:20:87:41:f9:64:08:
         a5:41:44:e2:cf:f0:e6:95:0d:ad:44:1b:c7:53:cf:5f:27:60:
         57:32:cb:bc:3d:4c:db:2e:7a:52:ea:8c:07:a2:15:a2:bf:c3:
         21:d7:3f:8f:2b:6e:18:ff:23:e5:44:1f:38:16:4c:98:c7:af:
         87:ef:f2:89:2b:8e:b4:a1:e0:59:63:54:9b:ec:df:a5:a6:70:
         47:26:31:db:d4:a4:bf:cf:59:63:f8:0b:6a:37:fa:d7:1d:6e:
         46:a1:15:96:ee:6d:cb:8c:66:74:c0:f0:2f:d9:14:c6:ce:96:
         5e:a2:dc:5e:dc:bd:64:f5:27:af:ff:79:74:3b:01:a6:34:14:
         55:5a:c8:e6:46:25:85:49:0f:65:cd:bb:25:a9:da:2d:d0:d5:
         7b:f0:3e:21:14:9b:9e:9a:62:a7:aa:6a:d2:91:05:54:06:dd:
         77:c8:a7:65:e5:0a:17:d4:e0:3a:e6:f9:f7:a7:38:75:9f:1e:
         18:57:03:c9:6c:c0:60:44:95:dd:b2:55:3f:95:d9:9f:db:2a:
         19:e0:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:27:32 2026 by rpki-client