Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133382e302f32332d3233203d3e20323633353835.roa
File:                     3137392e3130392e3133382e302f32332d3233203d3e20323633353835.roa (raw, json)
Hash identifier:          tFiriJLvbHFcXXLBF7cEBzvuSN7F8RHod61KG7ByXHw=
Subject key identifier:   C4:56:98:B3:A4:34:49:F5:2F:51:77:8A:CC:E3:5E:D2:E0:E6:C1:EE
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       0DE967A0376752D9BF33EC56B4EBCC5CDB91BB6B
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133382e302f32332d3233203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:13:40 +0000
ROA not before:           Fri 07 Aug 2026 00:08:40 +0000
ROA not after:            Fri 06 Aug 2027 00:13:40 +0000
asID:                     263585
IP address blocks:        179.109.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e9:67:a0:37:67:52:d9:bf:33:ec:56:b4:eb:cc:5c:db:91:bb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:08:40 2026 GMT
            Not After : Aug  6 00:13:40 2027 GMT
        Subject: CN=C45698B3A43449F52F51778ACCE35ED2E0E6C1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:c1:5c:f4:ce:eb:e7:39:f6:f1:15:f4:27:
                    49:6a:62:81:09:fc:dd:ec:4b:73:aa:bb:67:60:fd:
                    7d:13:27:7b:f4:ac:d2:ae:89:c7:a3:18:7a:e3:4b:
                    49:13:a5:6f:2f:1b:b0:bb:ed:aa:6c:99:59:dd:89:
                    f1:69:87:53:26:a4:8c:9b:96:b8:93:6a:a2:57:ea:
                    bd:68:e5:d2:28:e8:a5:47:05:69:fa:66:ed:bb:ce:
                    1b:62:98:4b:65:8b:35:76:06:89:93:79:7c:76:16:
                    7c:54:f7:90:7b:d4:7c:52:52:d1:ff:f7:8f:81:fb:
                    fa:9a:a1:9e:cb:61:c4:11:90:53:9b:01:3f:aa:71:
                    ab:b6:8a:58:f6:84:8b:56:a9:c7:14:7b:ed:34:70:
                    90:9a:33:11:e7:01:1a:0f:82:04:bd:ff:35:ff:40:
                    26:33:bd:8d:9c:11:11:5b:99:1c:35:4c:63:e2:a9:
                    e8:dd:41:b5:64:f6:5f:11:58:db:c6:1d:30:9a:3e:
                    27:c1:48:76:5c:b5:6f:79:38:17:32:f9:bc:72:5c:
                    8d:a7:9b:f6:b7:81:eb:a6:a4:dc:46:4a:a5:9a:e1:
                    79:78:2a:e2:ba:e9:40:f6:9b:48:4f:66:2e:b0:23:
                    0f:40:ad:13:b3:0f:5f:30:0a:4f:8b:bf:2e:b6:1c:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:98:B3:A4:34:49:F5:2F:51:77:8A:CC:E3:5E:D2:E0:E6:C1:EE
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133382e302f32332d3233203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:59:40:f5:eb:47:3f:cf:ac:c3:8f:06:11:22:c4:a8:e6:0e:
         d8:8f:e9:7b:75:ff:cd:0d:76:40:22:ea:49:e6:3a:d2:93:34:
         4c:db:95:f5:ee:c2:ed:4d:36:fc:7a:79:b9:38:44:eb:15:1e:
         9a:92:2e:f5:b8:e2:c3:54:24:03:e5:f2:33:19:37:55:af:26:
         d7:78:f9:f2:ce:44:1b:57:a0:f4:66:71:a3:22:7b:40:3f:f2:
         fe:eb:a0:a0:32:d6:38:40:78:90:ac:22:f7:3b:ac:25:ea:ee:
         12:0f:48:d0:57:37:4e:e5:b8:be:ae:09:ca:38:e6:af:b9:a6:
         35:f3:8a:fe:72:38:c5:e6:5e:0c:ba:9c:72:b1:28:05:7f:e9:
         a0:b6:f4:4a:ed:34:5f:e0:d2:fe:7c:8a:df:5f:f6:a9:99:5b:
         b8:99:7c:b6:f5:73:60:cf:7c:2e:f4:02:6c:6f:1c:fe:ad:fa:
         15:f0:0b:d0:9d:d8:e5:06:95:d5:50:03:f2:e8:8d:e1:a9:1f:
         cd:e1:38:49:73:6e:6f:31:3a:77:28:d2:f8:ff:07:9d:ce:29:
         22:32:bd:e4:b7:7c:46:ff:1d:fc:8d:6d:33:b7:30:a4:ce:ca:
         87:66:c8:e4:bf:7d:84:6f:c8:77:40:a7:20:91:05:a9:ef:57:
         ac:2f:fc:55
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDelnoDdnUtm/M+xWtOvMXNuRu2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyNUUzMjIwQkM4RENBOENDQkVERUY3NDUyQzQzMzIx
RkI1RUU4MzAeFw0yNjA4MDcwMDA4NDBaFw0yNzA4MDYwMDEzNDBaMDMxMTAvBgNV
BAMTKEM0NTY5OEIzQTQzNDQ5RjUyRjUxNzc4QUNDRTM1RUQyRTBFNkMxRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifcFc9M7r5zn28RX0J0lqYoEJ
/N3sS3Oqu2dg/X0TJ3v0rNKuicejGHrjS0kTpW8vG7C77apsmVndifFph1MmpIyb
lriTaqJX6r1o5dIo6KVHBWn6Zu27zhtimEtlizV2BomTeXx2FnxU95B71HxSUtH/
94+B+/qaoZ7LYcQRkFObAT+qcau2ilj2hItWqccUe+00cJCaMxHnARoPggS9/zX/
QCYzvY2cERFbmRw1TGPiqejdQbVk9l8RWNvGHTCaPifBSHZctW95OBcy+bxyXI2n
m/a3geumpNxGSqWa4Xl4KuK66UD2m0hPZi6wIw9ArROzD18wCk+Lvy62HN1jAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxFaYs6Q0SfUvUXeKzONe0uDmwe4wHwYDVR0j
BBgwFoAUlCXjIgvI3KjMvt73RSxDMh+17oMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFBSUldDV1dqUUxuZFR0aHg3UGVHV2hOOHVlb2J2SnVtRHI5OHBoU2tt
TVQvMC85NDI1RTMyMjBCQzhEQ0E4Q0NCRURFRjc0NTJDNDMzMjFGQjVFRTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0MjVFMzIyMEJDOERDQThD
Q0JFREVGNzQ1MkM0MzMyMUZCNUVFODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhQUlJXQ1dXalFMbmRUdGh4N1BlR1doTjh1ZW9idkp1bURyOThwaFNrbU1ULzAv
MzEzNzM5MmUzMTMwMzkyZTMxMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM1MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNtijANBgkqhkiG9w0BAQsFAAOCAQEAoFlA
9etHP8+sw48GESLEqOYO2I/pe3X/zQ12QCLqSeY60pM0TNuV9e7C7U02/Hp5uThE
6xUempIu9bjiw1QkA+XyMxk3Va8m13j58s5EG1eg9GZxoyJ7QD/y/uugoDLWOEB4
kKwi9zusJeruEg9I0Fc3TuW4vq4Jyjjmr7mmNfOK/nI4xeZeDLqccrEoBX/poLb0
Su00X+DS/nyK31/2qZlbuJl8tvVzYM98LvQCbG8c/q36FfAL0J3Y5QaV1VAD8uiN
4akfzeE4SXNubzE6dyjS+P8Hnc4pIjK95Ld8Rv8d/I1tM7cwpM7Kh2bI5L99hG/I
d0CnIJEFqe9XrC/8VQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:59 2026 by rpki-client