Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135312e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3135312e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          c8I9CYi6+9zVMmnsMpzoQQ57F6kZKUBBTKOyrTQZbtY=
Subject key identifier:   19:18:25:84:E7:B4:53:86:33:D6:57:0C:D3:D6:30:A7:EC:6B:0C:52
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       7DC7D9F0D178FC57B2510CF09C79C3987D4F8B5A
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135312e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:19:35 +0000
ROA not before:           Fri 07 Aug 2026 00:14:35 +0000
ROA not after:            Fri 06 Aug 2027 00:19:35 +0000
asID:                     263585
IP address blocks:        179.109.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c7:d9:f0:d1:78:fc:57:b2:51:0c:f0:9c:79:c3:98:7d:4f:8b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:14:35 2026 GMT
            Not After : Aug  6 00:19:35 2027 GMT
        Subject: CN=19182584E7B4538633D6570CD3D630A7EC6B0C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:02:b9:3c:d5:ed:77:50:b7:6f:b2:c3:05:
                    5a:f0:52:a8:09:b0:db:df:73:e7:b8:ca:9b:61:61:
                    7f:b9:83:30:f4:ce:be:c4:40:5b:27:02:c5:0e:cb:
                    04:f2:79:b9:e0:dd:47:13:ad:55:42:95:71:fd:b1:
                    07:09:81:e9:b6:36:e5:d7:3d:b4:e7:87:4c:fd:0d:
                    9a:14:91:1b:26:3b:26:52:40:80:d5:88:4d:a7:ca:
                    b2:b1:9a:85:70:8e:13:1a:2f:67:5c:0a:02:b5:f9:
                    aa:dc:f7:85:92:bb:b2:4d:a9:00:54:47:21:c9:cf:
                    0f:cd:df:88:e4:ed:e6:2c:23:19:a6:42:e7:2d:7b:
                    90:ff:55:09:c6:35:e7:78:2c:83:61:18:39:90:73:
                    2f:5c:53:53:6e:a3:8f:5e:9a:5d:6b:7b:c2:73:60:
                    f5:b6:69:a6:1d:8e:b8:79:e1:12:dd:27:db:c2:c9:
                    84:d9:49:28:be:bb:27:92:7d:11:26:0f:a0:44:6d:
                    a1:b1:b2:c8:9c:e4:a0:bb:0a:ce:ea:50:8a:b2:50:
                    a2:1a:5a:cf:d1:26:a4:f7:fc:48:6c:e4:19:73:7d:
                    9c:14:c8:f3:49:83:dc:7c:ce:cf:17:41:69:e3:7e:
                    23:d6:00:bc:92:23:fa:95:55:9d:94:13:1d:2f:ea:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:25:84:E7:B4:53:86:33:D6:57:0C:D3:D6:30:A7:EC:6B:0C:52
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135312e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c9:58:67:67:2a:20:13:af:40:bc:c3:2f:f9:91:d1:01:00:
         3c:05:e4:8f:8d:03:57:ec:29:16:af:52:87:64:6d:18:de:71:
         46:12:cd:6d:f9:24:3e:e4:41:40:e9:70:75:a9:9d:bc:71:a9:
         d2:39:4a:47:86:48:03:f4:1c:9e:a2:77:8f:f9:4a:0b:f1:cf:
         68:99:c0:98:34:9b:a1:fa:97:ad:7e:68:5e:51:61:c6:e3:82:
         32:46:e8:09:3a:4c:d0:e6:08:d4:65:71:7b:df:b0:15:ea:47:
         9e:e7:3a:97:2e:b9:92:be:d3:31:9e:fa:e2:5b:87:ca:b5:3d:
         4c:18:a6:5a:f6:87:d2:47:6c:83:15:a7:8d:4f:ed:65:c9:c1:
         3f:80:97:d7:e4:5d:97:b0:3f:cb:6d:aa:fc:88:38:ac:c7:30:
         9e:38:64:2f:03:35:49:76:ef:ea:43:fc:11:ab:b6:42:df:f3:
         0d:05:80:b2:f5:f8:7b:ad:cf:54:ab:99:83:2b:91:16:f6:20:
         98:a0:70:f8:c7:31:5a:09:25:d0:93:5f:d7:69:ef:3a:22:db:
         35:7d:65:fe:12:6f:7b:82:01:3d:53:7f:ef:4b:a3:b9:95:77:
         4f:80:25:11:90:c1:4b:b8:e6:75:e0:02:1b:78:2f:84:97:61:
         18:63:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:28 2026 by rpki-client