Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134362e302f32332d3233203d3e20323633353835.roa
File:                     3137392e3130392e3134362e302f32332d3233203d3e20323633353835.roa (raw, json)
Hash identifier:          y3HFqJeb0Z+mD7RevFAt+TiCth6vNAiWe/coqsTJ3bo=
Subject key identifier:   59:D5:1A:75:A8:BF:E5:1F:66:25:5C:2E:42:3A:B6:A5:DF:DC:29:21
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       18C2113C9412723AD7DF457739772A071788A7F4
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134362e302f32332d3233203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:13:40 +0000
ROA not before:           Fri 07 Aug 2026 00:08:40 +0000
ROA not after:            Fri 06 Aug 2027 00:13:40 +0000
asID:                     263585
IP address blocks:        179.109.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c2:11:3c:94:12:72:3a:d7:df:45:77:39:77:2a:07:17:88:a7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:08:40 2026 GMT
            Not After : Aug  6 00:13:40 2027 GMT
        Subject: CN=59D51A75A8BFE51F66255C2E423AB6A5DFDC2921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:33:9e:e4:df:af:3b:13:6d:7f:fc:2a:a7:
                    55:6f:d7:76:8d:c1:9e:6a:03:1a:32:7e:5d:f0:97:
                    f4:de:75:92:ba:61:2c:34:52:a8:2e:db:24:15:6f:
                    52:83:c3:50:c9:4f:3f:6c:b7:e7:2f:1b:b2:08:99:
                    83:a8:85:a9:c5:f1:e3:b2:b1:6e:37:20:30:48:c8:
                    f6:a3:5c:79:c4:63:93:fc:3b:90:7e:b3:5c:61:90:
                    62:51:55:1a:af:fd:99:ba:b0:a7:d5:62:59:e1:b2:
                    fd:0d:5e:9e:00:92:21:a2:c2:3b:e6:09:66:ba:d4:
                    a7:62:ad:0d:17:7d:c7:e1:f0:31:82:a2:6a:b4:15:
                    a4:6f:f4:3b:b2:17:ae:7c:2a:bb:8b:5d:d5:66:47:
                    6c:30:67:8e:47:8c:d3:97:a8:ec:ba:94:d4:bd:70:
                    16:46:b0:bf:ec:35:d9:91:e1:c1:a5:4f:94:6c:13:
                    77:43:37:8d:22:b1:d6:6b:2d:ed:b6:26:ca:4d:88:
                    7e:22:6f:67:f5:5c:6e:9a:f5:28:cd:5a:f1:da:dc:
                    1c:8a:cd:57:58:a9:0b:4a:a3:1c:2f:e8:7c:bd:56:
                    d2:6a:ed:f5:0d:a0:34:d0:b5:e7:ec:92:1a:79:35:
                    6f:22:29:b2:7c:ee:b5:d8:63:3f:2f:2e:f2:e6:20:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D5:1A:75:A8:BF:E5:1F:66:25:5C:2E:42:3A:B6:A5:DF:DC:29:21
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134362e302f32332d3233203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:53:96:a4:cf:38:23:28:58:96:43:63:aa:0c:d0:63:09:
         d1:86:92:e0:1a:f1:be:56:c3:a8:64:2c:16:f5:22:d2:c5:6f:
         f0:e3:34:4d:da:63:78:a8:d2:49:25:2a:a0:f9:90:48:fc:2c:
         80:5a:f9:79:1c:29:da:1d:98:d6:d3:93:fc:3b:0b:03:06:04:
         8a:4b:4b:f5:d1:60:96:e3:79:1c:52:60:93:2a:2d:be:5d:a5:
         d5:49:a6:ed:bf:03:37:4f:d7:4f:ba:84:fd:96:32:07:35:c0:
         c7:9b:78:9d:2b:a2:7c:70:03:23:58:36:65:73:20:55:33:e9:
         2e:0e:2b:9f:3d:47:4b:7a:57:cb:c0:37:9d:b9:97:93:89:7c:
         de:b4:30:26:47:60:7a:54:95:a9:67:ec:3b:c2:d2:6e:d6:65:
         a4:a8:ce:f0:7d:09:1b:da:bc:2e:4e:42:4a:76:fb:8e:1b:6e:
         ae:63:e5:7d:c0:b7:11:2c:43:fc:b5:48:ea:de:6a:bd:89:10:
         9b:f2:fe:fc:6f:79:02:b7:a8:c8:b5:aa:6d:f6:4b:c4:13:76:
         14:f8:f8:d0:88:31:0a:88:d4:4d:b4:50:9b:0f:8c:78:e2:8e:
         42:40:ca:ad:8a:44:04:2c:d2:49:e8:27:f9:89:4e:64:b7:66:
         50:ef:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:12:54 2026 by rpki-client