Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134312e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3134312e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          Q8Srmrxs0nvsvQVVDhzE2IAxDYk7HkCuWtu10szdgGU=
Subject key identifier:   5C:C0:26:A6:A2:D8:8A:E4:45:8C:93:18:B8:45:99:35:F9:2E:26:E9
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       365237AFD9AA2DCD177E26DB86BFFA92E863F65D
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134312e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:17:53 +0000
ROA not before:           Fri 07 Aug 2026 00:12:53 +0000
ROA not after:            Fri 06 Aug 2027 00:17:53 +0000
asID:                     263585
IP address blocks:        179.109.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:52:37:af:d9:aa:2d:cd:17:7e:26:db:86:bf:fa:92:e8:63:f6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:12:53 2026 GMT
            Not After : Aug  6 00:17:53 2027 GMT
        Subject: CN=5CC026A6A2D88AE4458C9318B8459935F92E26E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:1e:08:73:c0:95:69:bd:ae:3d:ee:6e:7f:
                    d9:4b:21:a7:1b:40:52:e8:dc:04:d6:32:97:29:c5:
                    9c:c1:8e:68:11:3a:4e:a8:3d:f1:14:27:56:b1:11:
                    d6:bd:16:55:83:6f:28:94:a9:72:ac:fd:4d:f2:2b:
                    9e:0d:46:42:dd:20:ed:8f:15:56:6b:0a:9d:bc:44:
                    d4:0a:15:b8:11:06:7d:63:56:c4:43:ff:ab:e0:e3:
                    26:db:b4:76:55:90:4d:15:c2:73:98:f0:e9:9c:c4:
                    74:ca:89:97:88:e1:4f:04:9b:5b:3b:6c:e2:2f:c1:
                    6c:39:ae:7a:5a:86:1e:40:c5:3d:97:e4:8a:0d:07:
                    e5:f2:0b:79:20:e4:83:7f:2e:bb:78:db:18:71:9d:
                    96:a7:59:2f:c3:d2:20:86:db:a0:70:ef:76:f9:2f:
                    25:01:af:50:76:a2:c0:27:dd:2e:a7:eb:15:25:ff:
                    0c:d6:d3:f9:c0:91:5b:01:79:56:c0:d4:38:26:22:
                    79:68:88:9d:6c:e1:9b:cb:4c:a4:34:2a:f7:d4:7a:
                    7a:20:9f:f6:75:fc:e8:87:40:a2:3b:62:4c:e2:09:
                    b3:4a:bc:95:69:c7:ea:e7:23:64:10:31:f2:0f:ea:
                    fe:2d:ec:a7:8e:5c:95:b7:f2:9e:88:85:c0:b9:68:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:26:A6:A2:D8:8A:E4:45:8C:93:18:B8:45:99:35:F9:2E:26:E9
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134312e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:8e:8f:72:46:4e:05:77:5a:85:3c:ef:a7:5d:9d:22:e2:
         7c:75:94:21:4c:be:95:9e:9b:31:0d:c7:09:c7:c3:7c:63:e1:
         4b:ba:42:c9:2f:0c:ec:91:98:9a:d2:8c:66:a0:62:39:68:bb:
         73:58:58:67:59:81:7f:0d:6a:fa:4d:4b:7d:f8:c4:60:47:59:
         0a:4c:71:81:ba:f5:46:a1:5d:55:b2:61:33:e7:84:cc:b4:da:
         7b:cc:92:8b:cc:29:ef:41:9e:99:69:e0:41:ee:71:22:9b:cf:
         e8:a6:4b:88:ac:b9:8d:6e:a8:ed:92:f5:60:93:a8:75:b6:38:
         96:4c:f3:92:95:29:58:00:69:33:a8:ff:f9:42:b8:98:ac:4e:
         8f:04:fd:4e:4c:1f:e7:ab:81:b4:d8:38:cf:cf:30:8e:81:f4:
         87:a6:3a:fc:a7:cd:d7:05:ca:8a:30:c4:6e:21:d7:04:77:54:
         70:25:ff:b3:53:5b:a6:ce:0f:be:28:d3:fa:31:56:d5:e6:f3:
         bd:f8:97:ee:22:73:d5:e3:e8:e6:7b:f8:38:16:1c:39:fb:bd:
         0c:90:4c:86:1e:ef:34:2a:4d:bf:d4:1a:24:e9:07:7f:04:37:
         fc:83:0e:48:c4:cc:b6:d1:56:a3:c2:eb:91:46:b5:28:9c:b9:
         54:e8:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:33 2026 by rpki-client