Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134362e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3134362e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          U6YXEasOvIR1fP44y1+4Jst2IqSCeaxXlKuqasLT3oo=
Subject key identifier:   17:38:E4:3A:3F:7C:A6:60:E9:F5:35:0C:D9:EC:72:E1:3D:0F:27:54
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       3759379B55064935D9DA355153017A004969C3DC
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134362e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:18:51 +0000
ROA not before:           Fri 07 Aug 2026 00:13:51 +0000
ROA not after:            Fri 06 Aug 2027 00:18:51 +0000
asID:                     263585
IP address blocks:        179.109.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:59:37:9b:55:06:49:35:d9:da:35:51:53:01:7a:00:49:69:c3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:13:51 2026 GMT
            Not After : Aug  6 00:18:51 2027 GMT
        Subject: CN=1738E43A3F7CA660E9F5350CD9EC72E13D0F2754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:9d:8d:10:38:bf:9e:84:b9:bb:13:09:bb:
                    3e:6a:35:b9:af:b2:f3:5c:a2:25:32:e3:25:55:b4:
                    ac:d6:64:41:1b:4f:92:07:be:59:2d:2a:45:bb:0e:
                    ea:48:5d:e9:47:19:22:27:e4:b1:27:f9:7a:75:87:
                    19:60:59:72:d0:da:05:8d:88:ee:79:cb:0e:da:aa:
                    6f:6a:f1:0a:62:36:6c:25:a6:1c:01:e5:9c:bc:64:
                    80:f3:41:64:9b:26:cf:72:f4:06:cf:e2:16:cd:4f:
                    e1:23:0f:6b:2e:44:37:41:17:c4:bb:bf:ff:de:3a:
                    a9:b6:c5:7f:34:0a:b7:33:c7:d6:73:3a:b8:af:ad:
                    8e:0f:d1:17:bb:57:57:8a:b1:4b:c2:a1:79:14:28:
                    92:be:bf:79:41:ef:a6:89:bf:0f:3e:e5:f3:ff:54:
                    35:6a:f5:b3:d4:58:e3:35:cb:79:1a:9b:06:a6:f9:
                    b5:5e:ae:e9:3a:cc:83:02:f0:4e:6b:67:47:54:7c:
                    bc:90:db:43:b5:c0:bf:ae:43:6b:32:d6:97:69:1d:
                    95:6e:46:07:f9:1e:0b:9e:12:c3:cf:a8:7f:fb:a2:
                    2b:5f:a4:9b:80:4f:c5:28:fa:a8:1d:b7:70:a2:43:
                    c8:e3:8e:59:59:73:25:a6:5d:da:fd:69:e8:f4:b7:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:38:E4:3A:3F:7C:A6:60:E9:F5:35:0C:D9:EC:72:E1:3D:0F:27:54
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134362e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:d7:40:30:97:b0:b5:76:71:23:bd:3e:b7:7b:7d:83:df:
         3e:ad:a2:d1:b2:ec:0b:b6:72:8d:6b:af:0c:c7:9b:b8:71:c7:
         89:b6:2d:f4:9d:10:57:45:24:a9:b1:dd:84:75:e0:f0:1a:95:
         07:a6:1d:de:4c:5b:49:96:4c:1f:ee:ad:bc:f0:eb:3b:1f:25:
         ff:b3:b5:74:c7:00:59:32:44:e5:62:fa:67:96:1c:ff:0d:dc:
         fe:0c:c5:ee:d1:d9:62:79:eb:7f:91:d6:a2:aa:d2:aa:de:dc:
         87:3f:37:75:8f:98:8c:2d:71:36:38:7c:49:c6:71:24:a7:1c:
         d6:da:b2:7d:8b:ef:ab:bd:e1:41:78:1b:39:b8:2c:9b:59:10:
         f9:08:37:7b:b0:cf:90:03:ef:55:f0:3d:fe:be:89:a8:cf:ad:
         88:5b:30:26:48:cc:2b:36:71:c3:a8:2d:5a:ce:36:83:c9:23:
         5a:86:72:a8:b5:56:77:d6:12:42:2c:76:99:79:f9:ed:73:ed:
         eb:f3:8a:dc:c4:e6:2e:04:61:c9:3b:e8:46:44:0d:5d:e6:9a:
         e5:83:31:6a:da:08:24:97:45:fc:57:b8:cf:fe:4d:14:5d:dd:
         c2:da:ed:5a:01:dd:53:6b:44:04:36:5c:ee:70:fe:07:df:15:
         5d:79:0c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:39:53 2026 by rpki-client