Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135342e302f32342d3234203d3e20323633353835.roa
File:                     3137392e3130392e3135342e302f32342d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          6pPofnGeL2tFAgIZ7WpTNy/IbFzgS8wNPVyD6OFH0W4=
Subject key identifier:   F4:BF:A7:3E:45:FE:66:37:6E:F6:70:EC:7E:53:18:6A:B9:D1:D3:2B
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       7AB07E33B2EA1F085CE1CEFC68D6CC94457130EC
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135342e302f32342d3234203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:20:01 +0000
ROA not before:           Fri 07 Aug 2026 00:15:01 +0000
ROA not after:            Fri 06 Aug 2027 00:20:01 +0000
asID:                     263585
IP address blocks:        179.109.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b0:7e:33:b2:ea:1f:08:5c:e1:ce:fc:68:d6:cc:94:45:71:30:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:15:01 2026 GMT
            Not After : Aug  6 00:20:01 2027 GMT
        Subject: CN=F4BFA73E45FE66376EF670EC7E53186AB9D1D32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:8b:3b:3b:5d:0c:a9:3d:ee:37:53:6d:c1:
                    09:7a:5c:23:d0:04:91:d5:59:71:6c:a6:1c:c3:90:
                    19:ac:6a:8c:71:f0:11:a9:ec:97:7c:73:01:bb:a8:
                    dc:5c:d7:c2:ec:b8:64:d9:d8:40:23:32:ab:67:0f:
                    34:b0:de:01:b9:db:ee:f1:45:65:3f:0e:41:d7:b0:
                    78:af:ce:26:ca:13:76:85:a0:8e:4f:36:57:71:a5:
                    c2:6f:7b:d1:e6:c2:de:59:80:9f:41:9e:9f:d7:06:
                    a1:6a:19:67:ff:40:ec:d5:ba:52:26:fd:d8:01:b6:
                    59:52:f2:f1:fd:ce:e2:15:c6:cc:07:4b:af:5e:ef:
                    72:84:8f:2b:f5:1b:4e:dc:2f:be:81:ff:bb:0b:2d:
                    df:c6:a7:84:25:2c:41:9c:b5:63:a6:0a:63:8b:26:
                    50:9b:07:09:d5:9c:63:a5:d4:79:d8:75:ec:41:6a:
                    8d:99:d3:b7:cb:5f:3c:d9:99:6d:57:6d:45:7a:bd:
                    6f:8a:6f:4a:2b:ea:ed:09:c4:9c:25:11:c8:42:88:
                    97:76:2d:40:3b:00:21:3b:e8:9d:69:db:2e:f5:4c:
                    19:ad:33:f0:1b:7e:95:c2:35:30:a2:71:a6:24:ac:
                    82:c8:97:34:ed:7d:a1:1e:86:16:22:10:4e:cc:52:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BF:A7:3E:45:FE:66:37:6E:F6:70:EC:7E:53:18:6A:B9:D1:D3:2B
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3135342e302f32342d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:00:10:e3:74:f8:c6:0e:c3:99:a0:dc:dc:3a:92:0a:66:f0:
         73:b7:ff:ae:cf:9c:2c:c8:0d:9f:54:28:ad:67:f7:bc:05:bb:
         54:2f:2d:7f:7f:2e:61:28:2b:44:1a:50:dc:77:d6:25:0e:7e:
         39:eb:d2:39:1b:72:a6:b3:65:de:26:09:0e:47:a0:d7:11:69:
         b4:f2:5b:fa:9c:33:07:4c:14:ed:d5:39:c8:c1:90:4f:c5:91:
         4a:cc:50:9d:18:79:6d:8a:26:55:f3:2a:97:07:b1:8d:1a:94:
         b3:72:ce:e4:36:5b:37:83:d4:04:fa:4b:77:d8:96:75:1e:3d:
         a8:fa:db:0f:f6:ed:e6:ff:1f:c7:4a:1e:0c:f0:6f:cf:46:15:
         90:75:23:e6:29:17:07:4a:c0:b6:ba:37:96:38:60:8b:56:f1:
         68:71:14:f5:e3:bf:4e:68:46:2d:80:d0:7a:9e:cf:48:f4:02:
         43:14:97:47:68:c3:9e:aa:4e:46:79:ca:b8:a2:87:84:54:01:
         c7:f4:35:f7:6b:c7:a8:27:5e:0d:12:1e:0e:3c:ec:05:27:82:
         ad:94:47:35:0a:02:89:00:5b:39:55:37:e4:8a:51:a0:ab:89:
         03:dd:a4:c2:d0:95:13:51:e5:79:a6:ca:cb:fb:de:81:69:61:
         97:fa:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:40:04 2026 by rpki-client