Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134372e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3134372e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          lq8Ecqmg3Ox2xMtgo0QkHoEciXniydLlNlev0+s82c0=
Subject key identifier:   C7:6F:51:C1:42:4D:DF:A2:5F:EE:4A:AC:41:39:E5:0B:28:D4:D2:5D
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       4949CC0A965B3A75E17237EF19D1585F4606E279
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134372e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:18:59 +0000
ROA not before:           Fri 07 Aug 2026 00:13:59 +0000
ROA not after:            Fri 06 Aug 2027 00:18:59 +0000
asID:                     263585
IP address blocks:        179.109.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:49:cc:0a:96:5b:3a:75:e1:72:37:ef:19:d1:58:5f:46:06:e2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:13:59 2026 GMT
            Not After : Aug  6 00:18:59 2027 GMT
        Subject: CN=C76F51C1424DDFA25FEE4AAC4139E50B28D4D25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:6e:3b:bc:68:8c:21:8a:8c:e4:7a:24:c6:
                    fd:dc:df:eb:2f:14:95:c9:96:af:a7:59:75:f9:c5:
                    26:07:da:2b:55:80:49:9a:cf:6d:3b:2f:61:46:12:
                    7b:27:5a:6d:fb:93:1d:8a:86:ed:4d:cb:6a:34:b7:
                    2c:9c:37:f4:bd:f4:1e:5e:1a:bc:a3:4a:c8:62:c0:
                    29:d6:48:89:f3:e1:b2:78:b1:c5:bd:87:68:31:be:
                    bf:a7:ba:16:48:5f:0c:ec:4c:ea:c5:eb:6c:e1:a3:
                    b5:ab:da:c0:b0:5c:c5:11:78:f9:af:46:d9:50:09:
                    12:b7:8b:36:fd:fe:50:a9:54:81:9d:53:d5:08:14:
                    4a:ae:11:56:34:e8:a1:ff:96:f6:c6:7f:69:19:e5:
                    89:e0:6c:49:52:bb:72:87:7b:02:aa:18:60:96:81:
                    fc:45:5d:fa:56:aa:9c:2c:41:ea:7f:14:aa:f4:c6:
                    e5:05:23:59:8b:1f:90:6f:41:2f:69:85:1b:52:70:
                    fb:2e:aa:06:2a:19:c2:a4:d1:8d:37:a3:58:91:45:
                    47:7b:2c:a5:22:22:65:80:cc:b9:3d:f2:10:17:cb:
                    9c:cf:15:f6:1a:0d:ec:90:f2:b0:c5:86:d1:8b:0d:
                    37:a5:a1:57:c9:67:57:15:e6:d9:f7:73:6d:b9:f5:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6F:51:C1:42:4D:DF:A2:5F:EE:4A:AC:41:39:E5:0B:28:D4:D2:5D
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3134372e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:df:c5:a3:14:9a:0b:54:16:a6:4f:17:bc:3a:3e:13:11:ba:
         c0:b6:10:f9:bb:d4:33:71:7f:68:c5:1a:b3:49:78:0b:23:63:
         7d:5e:46:8e:ab:e4:2a:18:01:12:ba:bc:e3:bb:e0:e3:96:2d:
         55:44:c8:8b:8d:c8:53:46:b7:76:18:10:9f:c5:e3:23:df:93:
         74:60:60:02:66:7b:70:2b:3a:d6:55:e5:84:7b:5a:18:78:5b:
         10:7f:cd:50:fb:42:23:f5:0e:13:50:b7:a4:71:9f:68:58:58:
         bd:85:86:01:c2:ef:d9:84:78:d4:d9:8f:a9:94:12:e4:83:e9:
         3b:fd:5e:1b:09:a7:76:b4:16:d1:dc:47:34:fc:ba:ba:07:09:
         cd:0c:89:d1:42:c7:d0:a5:fe:85:b4:a2:7b:93:74:9a:93:11:
         bd:e8:a3:94:83:0e:27:68:21:a1:d3:28:7d:0d:cd:e1:ee:cb:
         d0:81:fc:bc:ed:24:ce:b6:a0:11:9a:aa:f1:01:ac:ba:62:97:
         5f:65:a5:61:c5:d2:9c:65:9e:39:57:cb:cb:d0:e0:b2:a6:b5:
         84:70:38:cc:c8:4c:53:38:f3:20:e3:a7:06:c1:22:8d:48:e5:
         f0:4a:be:ce:b2:a7:cf:3d:b6:20:fd:d1:71:6a:70:7d:5d:1d:
         9a:70:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:11 2026 by rpki-client