Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134332e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3134332e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          OhPypJBhQ2V7FMJ33LlCxcwT76PGggHQRrAiRBNodMg=
Subject key identifier:   8E:59:57:47:A0:33:DD:4A:C4:41:7A:3D:E5:4C:87:5B:2B:E7:18:E2
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       275D3B3FB5246400A0D3ACD8393B3F1DC0EEA999
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134332e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:18:16 +0000
ROA not before:           Fri 07 Aug 2026 00:13:16 +0000
ROA not after:            Fri 06 Aug 2027 00:18:16 +0000
asID:                     263585
IP address blocks:        179.109.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5d:3b:3f:b5:24:64:00:a0:d3:ac:d8:39:3b:3f:1d:c0:ee:a9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:13:16 2026 GMT
            Not After : Aug  6 00:18:16 2027 GMT
        Subject: CN=8E595747A033DD4AC4417A3DE54C875B2BE718E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f8:b5:03:42:92:2f:23:23:17:6c:63:c1:47:
                    78:21:c2:b6:ec:4f:9c:77:f2:49:04:27:9f:23:2d:
                    9e:6f:bf:39:69:30:03:19:98:96:e9:18:13:a4:f1:
                    17:2b:78:18:a8:b8:00:55:1b:e3:d3:04:1f:35:2f:
                    19:a9:44:46:c9:aa:42:16:d2:4a:f2:8b:a4:a4:e2:
                    ba:8d:e8:c6:70:6e:a6:b5:18:5a:49:4a:7c:dc:10:
                    fa:60:ab:29:c5:0e:9b:29:31:e6:e4:e9:e5:78:d9:
                    80:51:02:3f:92:c5:6b:2a:d5:49:8b:f4:35:43:6c:
                    18:7a:fd:38:aa:7d:d1:ec:bb:f1:9f:26:ab:b9:2d:
                    f1:3e:61:28:43:f3:3a:ef:e1:e8:da:8f:1a:84:48:
                    5f:67:5a:f7:a0:f4:8c:43:a7:ba:11:a1:de:95:01:
                    e5:33:b6:93:ed:d6:e4:2b:12:6c:cd:99:96:47:97:
                    b6:41:17:62:f5:bf:af:c7:1c:a3:a9:1c:d7:2b:35:
                    69:d8:cb:b6:49:81:00:63:2b:44:9e:84:dd:90:37:
                    67:1f:05:55:b7:b3:8e:e2:4e:56:14:35:2b:91:3e:
                    f8:91:c0:c9:59:b3:e5:9e:52:ca:d0:ca:df:83:f4:
                    c1:60:64:f7:b2:77:e1:65:4b:81:fa:3b:65:21:26:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:57:47:A0:33:DD:4A:C4:41:7A:3D:E5:4C:87:5B:2B:E7:18:E2
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134332e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:46:05:c9:97:b8:39:d3:c3:2f:0b:6f:fd:e1:6f:fb:7f:b7:
         e5:d0:1c:fd:30:9f:64:46:5a:34:c7:a2:f5:01:52:5b:90:6e:
         ab:10:27:75:53:49:3f:57:0d:3e:4b:80:32:53:ee:d3:3d:bf:
         9f:37:02:dc:13:3d:35:28:75:1a:4e:db:fc:71:5b:ef:6a:55:
         d4:d8:75:64:4a:6a:33:b3:8e:0f:a3:e9:c7:1b:2b:5c:5a:cb:
         e3:0b:8b:17:a9:cf:c7:8b:7d:6b:eb:31:f9:9d:49:c4:69:d5:
         57:3d:92:8c:13:b7:ae:09:90:7e:77:44:11:af:c1:5d:b7:25:
         42:39:b8:e4:b1:f7:50:8e:d1:71:2f:f2:c2:a5:3a:35:29:cd:
         f4:ca:11:a7:61:de:98:35:a8:24:01:73:dc:45:3b:a3:32:f1:
         68:b0:fc:75:b5:db:67:67:9c:0e:e8:ac:04:7e:d7:61:d1:a4:
         a9:b7:05:6c:35:64:81:f5:55:48:8a:9d:df:e0:44:0a:0b:be:
         4a:9f:f1:75:99:d5:68:c7:29:d5:e0:df:33:d5:26:ff:96:a1:
         18:e4:99:5a:92:65:87:00:ac:d0:2a:32:73:23:26:d6:43:52:
         05:6b:77:1b:ba:54:5e:de:e3:0e:0e:36:2c:d7:60:71:c1:ef:
         c3:e8:5a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:40:17 2026 by rpki-client