Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133392e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3133392e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          OU0rDYK/pkea+DEwLA927+c8nRT8mR7EL7b5l3SX3zU=
Subject key identifier:   4B:9D:C6:7F:20:D6:20:59:B1:17:15:F3:62:8A:F8:BC:96:D0:8C:6E
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       3B8067D847207AFB8B1EB262956F4E1D2D790403
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133392e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:17:34 +0000
ROA not before:           Fri 07 Aug 2026 00:12:34 +0000
ROA not after:            Fri 06 Aug 2027 00:17:34 +0000
asID:                     263585
IP address blocks:        179.109.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:80:67:d8:47:20:7a:fb:8b:1e:b2:62:95:6f:4e:1d:2d:79:04:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:12:34 2026 GMT
            Not After : Aug  6 00:17:34 2027 GMT
        Subject: CN=4B9DC67F20D62059B11715F3628AF8BC96D08C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:fe:a6:4b:f8:4b:30:eb:fe:ed:3a:0b:1a:
                    a7:d2:35:31:ec:49:80:0a:25:31:56:55:9e:95:da:
                    84:9c:be:de:c8:d3:e8:0f:d7:19:86:7b:e3:d3:f0:
                    ea:d3:5a:69:23:54:9b:e7:73:14:c4:ed:b3:b4:cb:
                    38:e0:ee:54:8e:22:dc:e4:0d:42:6b:5a:5c:ae:11:
                    46:20:74:9e:34:45:ba:de:20:94:21:8d:0f:65:4f:
                    4f:ca:a9:db:56:fb:74:aa:8e:0c:c8:a4:d9:17:9d:
                    96:16:87:f7:59:47:09:f1:17:93:af:ab:67:3b:10:
                    f9:cf:ea:83:d2:d7:21:7f:64:0a:8d:c8:eb:74:61:
                    e6:3d:db:6f:d4:43:ef:10:16:f9:01:f2:c8:70:a1:
                    00:9e:d5:ef:a5:e5:87:57:da:45:a3:92:9e:50:0d:
                    21:07:df:5c:bf:6c:e7:ef:16:c5:7c:ff:12:86:3f:
                    1c:06:20:2b:1b:b6:ee:04:e7:2c:3b:ed:bb:df:ba:
                    18:de:bb:ee:3f:cd:5d:1d:8e:40:4e:b4:62:e3:24:
                    c3:cb:0e:b7:26:09:85:cb:3e:d3:27:b8:bf:03:78:
                    8f:12:0d:22:72:c0:3a:c6:ab:9c:f5:d8:20:79:8b:
                    43:24:aa:ab:0a:84:65:e5:3d:da:bd:56:e6:4a:5c:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9D:C6:7F:20:D6:20:59:B1:17:15:F3:62:8A:F8:BC:96:D0:8C:6E
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3133392e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:53:82:3e:88:36:96:08:45:12:21:8c:35:dc:66:d7:e5:7a:
         4f:77:0e:00:23:3f:96:cf:df:9c:b4:9b:6c:41:0a:43:77:60:
         d7:5c:1a:8f:7c:32:ff:f1:e0:20:00:d7:0a:40:20:f7:32:27:
         c6:ee:4f:9e:b5:86:d4:02:25:aa:c4:00:9b:58:04:14:a6:d0:
         52:0e:53:b4:8d:23:34:00:07:fe:a0:a0:8a:af:25:6b:55:43:
         ef:f6:ff:10:e3:a0:ae:f7:88:ba:62:1d:2c:41:6d:42:32:0f:
         82:17:d2:ef:f8:44:1d:9b:52:a2:d9:d5:cd:28:62:72:27:45:
         5e:5d:f3:59:12:48:bb:8e:8e:63:f1:83:46:91:e8:16:dd:5a:
         1a:6d:ab:90:05:40:c5:74:c8:06:01:35:0e:39:56:a9:04:98:
         62:58:b1:c3:9f:92:e8:63:63:78:f2:1c:85:18:54:01:aa:28:
         bd:79:54:bc:af:66:45:b5:a7:4d:cd:3a:ec:1b:ac:a9:6d:d8:
         98:56:5a:8a:3c:66:14:e9:bb:6a:03:28:a8:27:0b:47:81:90:
         64:c9:f7:15:d1:72:0c:a1:be:c5:e8:bb:3f:58:3e:61:02:08:
         69:00:8e:4a:47:9c:65:e3:ae:e4:34:8e:36:d2:c3:eb:e7:06:
         82:d4:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:27 2026 by rpki-client