Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134352e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3134352e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          3f+hhgqbfHrtzl8J+q7WVfqb+j/DQsNN1rWPt9Qv6ls=
Subject key identifier:   E9:EF:4A:D1:4F:84:3F:7F:CE:E1:F9:3E:1C:8E:48:84:C6:5F:B5:E7
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       223045B3D78A9489F57748AA93A8A88A2017C81A
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134352e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:18:39 +0000
ROA not before:           Fri 07 Aug 2026 00:13:39 +0000
ROA not after:            Fri 06 Aug 2027 00:18:39 +0000
asID:                     263585
IP address blocks:        179.109.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:30:45:b3:d7:8a:94:89:f5:77:48:aa:93:a8:a8:8a:20:17:c8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:13:39 2026 GMT
            Not After : Aug  6 00:18:39 2027 GMT
        Subject: CN=E9EF4AD14F843F7FCEE1F93E1C8E4884C65FB5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:ba:2e:00:5e:72:1b:06:f7:bd:de:c6:74:
                    b5:d5:25:68:5e:b5:96:0d:21:59:b8:1f:41:7f:89:
                    eb:7d:2b:d3:b3:3a:4b:c4:24:03:20:a7:fb:04:68:
                    32:5c:56:a3:d6:9d:1c:e5:19:4f:94:09:97:7a:06:
                    f3:8a:0b:a2:5f:6d:05:11:61:1b:3f:16:93:68:c7:
                    f0:c3:d2:ae:e8:22:8d:ae:b7:0a:1e:ab:7c:50:0e:
                    a2:83:5d:71:1c:cb:2d:1d:de:13:dd:75:dc:d9:a1:
                    e5:d2:5e:23:3c:ec:05:66:7f:db:1b:65:2a:50:09:
                    29:4a:93:5f:63:b3:35:3e:49:59:4e:df:5c:0f:68:
                    20:7d:62:64:5c:b0:ce:ea:04:1c:63:f2:8d:d0:48:
                    ba:a3:24:3f:7a:40:88:ce:ed:73:61:a8:7d:24:d4:
                    a8:da:1e:6f:ff:ad:d1:81:5e:8c:b6:47:f8:5c:81:
                    1b:56:23:93:19:fe:22:47:68:6f:28:8b:38:57:dc:
                    33:b9:bf:cd:1c:c9:dc:0d:c6:fc:7f:cc:38:5c:27:
                    e9:ef:fe:c4:54:66:41:0d:f0:2e:4e:9d:15:c9:df:
                    4c:fe:ed:1f:e6:c0:63:3a:03:d0:4b:d7:08:90:08:
                    e3:2c:32:6f:78:a3:6c:41:25:e1:30:4c:7b:79:b4:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:4A:D1:4F:84:3F:7F:CE:E1:F9:3E:1C:8E:48:84:C6:5F:B5:E7
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134352e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:e4:49:25:5a:e3:8d:a2:cd:c8:44:18:1a:1b:f7:f4:0e:
         c0:58:97:fa:ce:0f:17:04:62:f7:60:0b:f0:ff:15:c8:4c:4f:
         9a:7c:b3:68:de:1c:d7:ff:ec:2f:d9:46:e2:aa:4a:0f:34:09:
         fb:26:f2:60:af:a2:15:1a:64:33:67:48:30:a8:7b:eb:27:4f:
         0b:51:5c:06:82:f2:fd:72:78:c4:9d:bd:2d:4c:b2:4c:5c:f0:
         3f:0c:30:2b:15:b5:ee:73:6f:bf:7e:df:70:54:33:c4:e9:0b:
         4a:10:aa:49:b9:99:ef:fa:0d:75:f7:54:f2:7d:07:e2:49:ed:
         38:72:82:e9:af:f8:2c:17:3a:20:ac:ff:fd:52:9f:2c:c1:1b:
         cb:12:4f:82:6f:b3:72:87:3e:f3:99:ea:3f:fc:e4:4f:5f:a3:
         a8:0a:de:94:b9:68:28:3d:02:af:ee:a4:2e:18:6a:e5:a7:c8:
         22:4a:b8:a3:c7:af:bc:c7:72:5d:38:62:08:5d:f3:a9:ff:e5:
         ac:56:18:4b:b8:9b:80:43:2f:9b:51:33:c9:6d:85:86:e2:a5:
         a4:20:01:19:bf:7a:9d:05:bb:8b:f9:98:0e:ce:9b:af:5c:34:
         27:aa:1f:81:05:23:fb:e0:b4:fd:7f:fa:b8:bb:87:f3:52:60:
         aa:43:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:22:29 2026 by rpki-client