Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134302e302f32332d3233203d3e20323633353835.roa
File:                     3137392e3130392e3134302e302f32332d3233203d3e20323633353835.roa (raw, json)
Hash identifier:          uyCRel+bZVGd749Ej+hiT389OaqNZAe8gzJSi9oLakI=
Subject key identifier:   BA:E9:A6:20:BB:14:25:62:ED:99:EA:AD:EC:DE:8A:AC:89:05:03:8C
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       5D0DF9F3E7F75D08956740272CCC93D354A6E1
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134302e302f32332d3233203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:13:40 +0000
ROA not before:           Fri 07 Aug 2026 00:08:40 +0000
ROA not after:            Fri 06 Aug 2027 00:13:40 +0000
asID:                     263585
IP address blocks:        179.109.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0d:f9:f3:e7:f7:5d:08:95:67:40:27:2c:cc:93:d3:54:a6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:08:40 2026 GMT
            Not After : Aug  6 00:13:40 2027 GMT
        Subject: CN=BAE9A620BB142562ED99EAADECDE8AAC8905038C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:53:95:99:c0:89:a9:43:49:09:31:fb:78:
                    87:ad:0f:65:5e:e6:91:2a:f2:3b:2b:a9:b1:8e:c3:
                    6b:c8:f5:83:87:0a:43:6f:3e:ae:18:fa:25:9a:b3:
                    54:21:33:d6:09:00:e9:7a:96:b9:7a:0f:16:8a:a9:
                    38:08:81:b8:93:d4:4f:bb:2b:fa:38:4b:56:d5:d9:
                    97:d8:18:75:88:62:34:4a:f7:61:20:49:ff:2d:42:
                    1b:9b:a7:58:47:e5:01:25:92:6f:5b:bc:90:8a:b0:
                    9f:14:24:a3:ac:c2:65:ad:6d:d6:b0:11:19:82:5d:
                    b7:07:4d:71:71:08:31:c1:39:33:9b:00:6e:5d:1b:
                    38:7e:0b:84:47:0a:15:df:31:d3:4e:a1:f3:f3:90:
                    43:d3:27:43:cf:d1:f3:74:ca:53:e5:f4:2a:40:12:
                    ca:a9:16:29:3f:06:1e:ff:7b:b7:fa:92:ad:ee:1c:
                    60:e6:cd:e9:81:e7:22:1b:a6:13:64:2d:f4:9a:12:
                    de:e4:b9:e4:f5:bd:97:9c:0b:62:6f:6e:72:b6:fc:
                    92:06:e2:aa:28:2c:65:68:3b:0e:f5:d9:1e:04:45:
                    ef:02:80:4b:43:e2:e1:7b:a9:a5:9b:75:8f:c5:40:
                    4f:18:87:16:ac:0d:b0:6a:d2:91:39:4c:22:49:4f:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E9:A6:20:BB:14:25:62:ED:99:EA:AD:EC:DE:8A:AC:89:05:03:8C
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134302e302f32332d3233203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:70:5a:17:b5:5f:b3:38:88:23:d4:f0:c7:31:03:40:ab:
         4c:9c:09:50:ca:6b:a2:d6:48:cf:c5:16:3f:5c:d8:21:b1:b2:
         6f:b5:24:43:6e:0b:bb:d2:09:2d:4d:54:08:b7:57:d4:9b:54:
         51:c1:a8:7a:0a:8d:af:b0:91:bf:e8:e4:6b:5a:39:f3:b8:4e:
         f9:46:c7:ec:9a:b4:12:28:73:4b:87:0c:dd:c0:63:98:8d:f2:
         6a:b0:a2:af:69:a3:4f:6f:9f:09:3a:6a:fc:ea:73:18:8a:82:
         0a:97:86:86:84:f5:9f:0a:f3:6b:b3:71:52:f5:14:5c:50:c9:
         87:35:c6:af:0d:d6:45:f1:c9:d9:96:01:32:64:a0:59:95:e4:
         56:d0:6e:07:0d:71:ba:a2:ea:c7:a9:c7:96:02:99:d9:98:60:
         96:3a:d4:cc:0f:d5:ee:ea:65:2b:a9:2f:f1:13:f1:11:8c:07:
         25:dc:74:48:17:f6:ac:38:f4:dd:26:64:a5:6e:79:7f:08:a1:
         f9:8b:ee:3b:55:02:de:be:95:f1:9e:bf:fa:c9:15:cf:c6:40:
         53:dc:e5:26:dd:1d:2f:82:dc:27:92:8e:ee:ad:87:f8:1d:c3:
         b5:1f:48:6b:cd:1a:dd:75:b1:26:95:0b:b1:f2:44:a5:f3:37:
         4a:7b:7b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:01 2026 by rpki-client