Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135342e302f32332d3233203d3e20323633353835.roa
File:                     3137392e3130392e3135342e302f32332d3233203d3e20323633353835.roa (raw, json)
Hash identifier:          oBSHELPc1zMUgCy8HS0ZQrbYPmaF9BpmL8M1l57WtXw=
Subject key identifier:   B7:2F:C1:B5:EA:DE:14:3E:D8:5D:D5:E6:1C:D9:60:AF:44:7A:60:36
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       3F6137751B27333148481CE2B94A6F751CC7FCE4
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135342e302f32332d3233203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:13:40 +0000
ROA not before:           Fri 07 Aug 2026 00:08:40 +0000
ROA not after:            Fri 06 Aug 2027 00:13:40 +0000
asID:                     263585
IP address blocks:        179.109.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:61:37:75:1b:27:33:31:48:48:1c:e2:b9:4a:6f:75:1c:c7:fc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:08:40 2026 GMT
            Not After : Aug  6 00:13:40 2027 GMT
        Subject: CN=B72FC1B5EADE143ED85DD5E61CD960AF447A6036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:e6:e4:74:d0:0d:c7:e3:d3:02:ad:31:b4:
                    a6:3f:14:17:fe:2f:d4:eb:2f:9f:e4:c3:95:4d:ae:
                    71:f6:91:99:57:5c:0c:04:05:19:3b:f0:09:a8:9e:
                    d0:c0:4e:0e:5d:70:13:cc:64:26:e9:93:a2:99:94:
                    e8:85:f5:d3:4e:37:af:38:7d:8e:96:28:04:20:7e:
                    02:a9:aa:d1:bf:f2:ff:ad:6d:c5:ae:37:79:0a:da:
                    11:b1:49:40:f8:65:9d:d9:84:57:dc:5f:a8:d1:a0:
                    03:5c:65:6a:7c:43:03:00:10:7e:8d:89:1c:87:f2:
                    44:0c:dc:1e:fa:83:fa:16:b9:e3:aa:e9:1d:be:f6:
                    13:98:67:79:2d:5d:e3:69:85:44:3a:e6:7c:c0:5c:
                    20:6b:9d:1c:19:c6:e1:17:8e:62:78:b9:5b:e3:86:
                    a8:7b:3b:f9:23:c0:b9:05:4c:99:fd:ee:92:90:87:
                    23:61:73:63:0c:91:7d:39:69:6a:6e:0d:74:c8:ec:
                    c0:32:8f:f6:76:63:ff:ad:61:96:43:25:11:19:6a:
                    d5:89:bd:2b:e3:86:82:93:5a:58:ba:04:79:11:81:
                    81:41:bb:c2:d2:e9:8a:00:d0:8e:9f:90:d0:6a:c7:
                    00:ea:02:32:24:0e:c7:cc:e8:2a:cb:f2:4e:6b:ab:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2F:C1:B5:EA:DE:14:3E:D8:5D:D5:E6:1C:D9:60:AF:44:7A:60:36
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135342e302f32332d3233203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:bd:76:bd:95:e3:57:ca:ce:70:39:08:e8:e9:2e:85:f5:8a:
         ff:5a:8f:4c:06:95:49:86:70:68:89:37:f6:39:3b:fb:5f:d0:
         bf:b9:a0:83:c0:d7:22:71:53:3e:6f:95:40:9e:52:06:c8:32:
         e5:14:5d:bc:16:c2:9a:6e:c2:15:f1:55:fb:a6:07:8f:9b:99:
         15:eb:c2:7c:0e:e0:1c:dc:bb:8e:44:47:69:cb:cd:22:6f:85:
         48:ca:71:4b:8c:53:72:d7:99:78:b4:41:d2:c7:1d:0c:f4:59:
         ac:86:9f:18:92:d7:4b:91:7e:30:6f:e0:0c:98:1b:c5:96:5a:
         f0:c7:bb:5a:95:a8:49:50:45:bc:d1:1b:13:49:37:35:2b:4c:
         27:66:48:d7:4f:36:f2:71:79:49:25:0c:cf:a3:42:20:5a:9e:
         c1:d9:ac:0c:0c:f0:a3:73:32:60:e8:ea:b8:28:06:68:b6:85:
         82:23:6d:8d:95:07:84:a8:59:73:ad:53:b6:f3:40:9a:72:3e:
         09:c0:7e:83:47:7a:99:07:a5:e3:3e:09:80:e4:e5:72:10:65:
         c1:4b:15:82:81:b1:20:b0:0d:3c:50:25:91:7a:93:03:ab:1c:
         a9:92:79:d0:49:0c:f6:40:32:00:39:da:09:24:85:e6:79:e6:
         97:b5:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:12:57 2026 by rpki-client