Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3133312e3130382e3138342e302f32322d3332203d3e203232333831.roa
File:                     3133312e3130382e3138342e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          Oyr3oAYIrqAFQkVd3nRnz9RtiJVh/B8we92dR1L4qAE=
Subject key identifier:   75:88:60:21:34:B0:F1:5B:F5:AB:E8:55:93:CA:08:F8:47:A0:B2:05
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       6F7C71AB69D4AE45A2910AA8AAE682DA43AAACF2
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3133312e3130382e3138342e302f32322d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:23 +0000
ROA not before:           Thu 28 Aug 2025 14:50:23 +0000
ROA not after:            Thu 27 Aug 2026 14:55:23 +0000
asID:                     22381
IP address blocks:        131.108.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7c:71:ab:69:d4:ae:45:a2:91:0a:a8:aa:e6:82:da:43:aa:ac:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:23 2025 GMT
            Not After : Aug 27 14:55:23 2026 GMT
        Subject: CN=7588602134B0F15BF5ABE85593CA08F847A0B205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:cd:87:80:1a:09:4d:be:a0:37:7d:22:d6:
                    46:20:7a:2b:7a:1a:bd:75:dd:c8:90:65:89:a1:09:
                    22:a8:f0:4e:14:92:ed:99:a2:3e:9a:55:53:24:ac:
                    13:35:e0:8e:27:1a:a0:44:31:17:f4:90:16:6a:4b:
                    5e:2a:4c:3a:21:a3:d9:4b:05:f9:30:25:cd:56:ff:
                    3d:c3:a4:e7:67:1b:73:0c:44:2d:e9:ce:25:6a:b5:
                    d5:a5:63:ef:d8:1a:66:94:c5:b1:a8:12:ad:4f:df:
                    fb:27:8f:b3:dc:17:57:1c:35:50:80:7c:6e:6e:ea:
                    35:e7:4b:7a:60:b0:83:89:52:58:d7:5c:66:64:42:
                    33:0b:d8:ac:1e:8b:6c:ad:2b:95:60:b5:bd:6a:56:
                    36:4d:71:70:3a:f0:ae:8f:cc:94:c9:02:a8:79:dd:
                    a3:50:b7:4c:aa:87:0e:92:48:d1:2a:31:b3:83:c3:
                    32:2c:4e:9c:2b:47:59:1a:21:9c:63:7f:3b:0b:41:
                    79:d6:09:36:b0:ed:0c:0c:36:5f:42:0e:b9:78:80:
                    e8:8f:20:4f:0d:5f:36:ce:5e:c2:a1:3a:8c:3b:9e:
                    27:d1:4a:be:0b:ac:d0:cd:08:30:99:e8:b7:3a:49:
                    ce:48:ca:01:41:49:9a:71:f4:04:5e:dc:e0:f3:f3:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:88:60:21:34:B0:F1:5B:F5:AB:E8:55:93:CA:08:F8:47:A0:B2:05
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3133312e3130382e3138342e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:fc:06:75:ae:02:52:21:a1:55:0e:2a:41:6d:1c:ff:d4:
         86:14:d9:2d:99:59:23:62:e8:ac:49:87:8a:86:21:e9:01:1c:
         6d:23:bb:dc:4e:cb:46:09:dc:c4:96:e6:73:9d:ee:11:cf:3f:
         b8:cc:4b:0e:70:80:ae:60:19:49:76:29:08:b6:a8:0c:31:0b:
         5a:f5:53:18:e4:ba:e0:8a:49:ab:42:c2:48:7d:45:6e:63:4b:
         a7:c1:22:78:b0:23:6e:94:d1:ed:ec:f6:7f:23:5d:42:82:49:
         d9:eb:63:40:68:39:57:e2:21:b5:55:f2:7e:82:c0:07:38:f8:
         71:2f:6f:80:e7:cf:84:c8:a4:66:d3:4c:72:28:e7:8d:af:73:
         ff:bc:c0:96:81:6d:1a:ac:46:cf:05:8a:7b:d6:08:3a:d7:e1:
         da:a9:68:d4:ab:fe:4a:90:f5:6f:d0:ad:c6:54:2f:a1:f6:98:
         06:ad:70:45:2c:a8:7f:5d:fb:05:ff:2d:78:ac:b0:65:38:1a:
         9d:a9:61:d3:4d:a1:80:e1:13:c9:0f:11:dc:1b:1d:2b:89:96:
         a5:b2:75:50:8e:c4:98:95:9d:df:b7:7d:fa:45:b5:ed:ba:c4:
         b1:2d:d9:10:fa:21:c0:3d:97:40:90:05:aa:b8:6a:e8:9f:86:
         2d:d6:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:44 2025 by rpki-client