Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133382e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3133382e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          r5+/vglw22Lnp3Egi95rq87KQwIMPMJ/DcSNKTY1ljc=
Subject key identifier:   10:BF:BE:28:FA:C7:FC:4A:12:4F:31:65:EA:50:D3:8E:22:7D:18:18
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       626578ACEFE718C16E95E3C5682F501236547024
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133382e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:17:10 +0000
ROA not before:           Fri 07 Aug 2026 00:12:10 +0000
ROA not after:            Fri 06 Aug 2027 00:17:10 +0000
asID:                     263585
IP address blocks:        179.109.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:65:78:ac:ef:e7:18:c1:6e:95:e3:c5:68:2f:50:12:36:54:70:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:12:10 2026 GMT
            Not After : Aug  6 00:17:10 2027 GMT
        Subject: CN=10BFBE28FAC7FC4A124F3165EA50D38E227D1818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:9f:46:46:14:78:0c:07:95:90:0e:5f:77:
                    7b:6f:b9:0b:67:c2:c6:72:68:8d:cf:9f:f3:f3:b4:
                    f8:c2:66:65:b7:58:42:d4:bf:5d:c8:59:87:9f:ee:
                    25:4f:9e:77:b5:cf:6b:6e:1a:5d:a3:65:16:4e:fe:
                    19:be:de:52:86:b2:ea:24:66:d4:0c:e8:40:79:12:
                    3c:bd:7a:6c:74:71:51:7f:4b:01:16:32:88:e8:1c:
                    80:14:54:49:bd:f6:2c:43:71:69:3c:fa:df:59:91:
                    c5:30:85:04:59:85:ea:52:99:1e:dc:b9:a6:f4:c3:
                    86:45:22:de:af:13:11:18:21:49:9a:18:99:a5:52:
                    20:7f:b7:27:4a:c3:f3:60:e3:70:e6:40:88:a6:a7:
                    01:72:b3:35:09:f2:09:c9:9d:b8:9b:76:c5:d1:84:
                    65:a0:eb:63:f3:5e:36:78:6c:c7:40:54:5e:63:4c:
                    99:00:24:66:7e:a9:a5:55:36:24:31:92:00:19:80:
                    13:d0:a5:96:9a:24:19:1e:60:be:ce:f4:b4:b4:b4:
                    20:e2:c1:db:e1:b6:8d:83:aa:e0:b4:df:90:f3:98:
                    bd:ad:54:b7:cc:4c:c5:08:65:60:fb:68:c7:bc:51:
                    65:0f:ea:a0:49:9a:a3:82:80:d6:e0:17:d2:33:db:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BF:BE:28:FA:C7:FC:4A:12:4F:31:65:EA:50:D3:8E:22:7D:18:18
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133382e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:26:f6:6c:7e:52:ad:18:10:eb:d0:7f:8e:a3:61:07:d2:d5:
         e3:de:15:fb:11:14:d3:1e:79:c9:ef:ee:c9:e0:09:ed:93:17:
         17:19:44:de:84:6f:f2:5a:f2:6e:f3:3a:ab:35:43:c4:31:1d:
         1b:10:35:68:ab:0e:74:c4:44:82:7d:63:59:1d:3e:77:83:89:
         9a:49:cb:11:5d:e9:81:12:62:19:ac:ac:35:18:b3:94:02:92:
         64:fc:81:74:59:66:8d:48:8b:2f:dc:15:2c:e6:ee:c2:25:17:
         45:b9:b9:9e:c0:53:f1:a6:31:16:e1:d4:4f:ff:c7:6d:d5:73:
         a2:73:fc:ae:48:9d:b4:89:f9:0a:6e:34:5a:3c:bb:59:b0:65:
         26:9e:f6:69:e2:b0:20:ce:52:81:63:6f:24:41:ad:43:a9:46:
         1f:61:c9:11:65:06:f1:b0:57:fa:05:ae:7d:86:82:70:a5:57:
         b0:0b:a9:03:43:e6:01:dc:55:6d:48:67:c9:c1:11:bf:e0:64:
         f8:f8:6a:73:f9:c0:6a:10:f9:fe:f3:ec:75:05:50:6f:9a:2b:
         73:e4:d8:74:76:3f:13:b3:4d:6c:fe:f9:15:13:94:42:2f:03:
         d3:cc:e1:fc:cb:c4:a3:31:41:51:ae:86:03:91:cf:bd:d1:7f:
         9b:2d:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:27 2026 by rpki-client