Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e302e302f32342d3332203d3e203232333831.roa
File:                     3137372e3132362e302e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          ZqDxKv3+A38JAbZO4TW1mTiOH3ZqSnrDowI+6oKvJns=
Subject key identifier:   F0:F0:BA:7B:8B:54:C6:93:75:3C:00:24:62:A2:A4:B2:84:54:46:5F
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       10AA209D9045281644DBBAF22716A7336B1D14C7
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e302e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:23 +0000
ROA not before:           Thu 28 Aug 2025 14:50:23 +0000
ROA not after:            Thu 27 Aug 2026 14:55:23 +0000
asID:                     22381
IP address blocks:        177.126.0.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:aa:20:9d:90:45:28:16:44:db:ba:f2:27:16:a7:33:6b:1d:14:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:23 2025 GMT
            Not After : Aug 27 14:55:23 2026 GMT
        Subject: CN=F0F0BA7B8B54C693753C002462A2A4B28454465F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:94:1a:1d:c6:75:fd:55:08:19:de:87:6a:
                    c2:f8:31:a1:a5:90:1f:80:92:11:19:89:2c:b5:da:
                    9b:4c:a5:bb:43:7b:3d:e9:f4:10:b6:18:40:4e:db:
                    c8:ab:f1:e5:4e:21:5b:9c:98:04:2e:90:9a:27:6a:
                    22:cb:f4:a8:53:3f:f4:33:a6:79:8d:b0:c0:af:ee:
                    86:20:e9:45:ac:91:d0:32:74:b6:c6:a6:76:80:ea:
                    cb:6b:35:6c:ff:d5:a2:5c:06:29:25:6e:7c:b2:65:
                    0c:74:84:9f:4b:cc:50:61:5f:3c:ec:d8:e2:93:59:
                    5f:72:bf:3c:ae:b4:51:6f:6f:c0:bf:90:38:d7:e8:
                    56:74:84:b2:b3:a9:8e:02:45:bb:22:e5:b6:d2:af:
                    a1:b9:91:3e:62:af:fc:2a:33:22:89:39:fc:cb:fd:
                    34:da:6c:08:52:7a:af:8c:3b:c0:9a:36:49:3f:85:
                    a1:4e:8e:cb:67:d6:dd:f8:62:01:b0:b1:7e:4b:82:
                    d3:04:9c:57:b2:a2:05:10:46:b6:99:01:e3:fc:21:
                    c3:b9:a0:d9:05:46:29:d2:d3:72:07:4a:df:6a:f8:
                    9a:17:72:a5:6c:3d:bd:87:37:66:00:a9:11:af:9f:
                    64:64:2a:5d:e3:f3:e9:e0:85:aa:4a:45:92:a0:b4:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:BA:7B:8B:54:C6:93:75:3C:00:24:62:A2:A4:B2:84:54:46:5F
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e302e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:83:72:aa:c8:a5:28:37:16:db:09:ff:c4:a2:61:be:db:2b:
         60:8a:b9:51:0f:9b:66:75:29:6b:79:01:7d:ef:4f:99:b1:65:
         2b:3d:2c:b1:6e:33:73:4e:89:71:90:b0:e0:48:d7:71:e9:12:
         b4:86:06:f0:3b:26:18:2a:a5:08:e1:00:92:57:f1:be:f2:89:
         66:f1:c2:91:de:a2:73:58:0d:75:e9:de:e1:e7:31:a5:b1:31:
         e6:b2:82:a6:b4:d9:cd:40:70:ff:b0:55:5d:bd:3e:40:0c:0c:
         ae:e2:47:20:7e:fa:4d:26:08:63:c6:dc:7e:56:c6:e7:35:3b:
         d4:ea:c3:31:8b:4c:9e:a5:46:02:d9:85:22:73:31:ae:37:2a:
         a0:64:88:64:03:e6:e7:1f:16:58:1b:b1:9b:b0:1c:8f:5e:64:
         cf:f2:21:55:ea:66:12:75:71:c2:ef:c0:2c:68:50:d7:16:d0:
         67:c4:b0:a6:e6:64:a8:5e:3b:71:20:f0:9d:6f:66:41:04:e6:
         32:c6:0e:09:0e:60:c7:16:26:1c:9e:cf:0c:d5:58:f1:fa:6c:
         e9:8d:59:e9:36:7e:4d:71:98:bc:23:f7:31:cb:ea:dc:44:0a:
         74:97:24:3f:60:b5:f6:73:2f:16:15:63:f5:7f:d5:48:60:90:
         52:a3:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:13:43 2025 by rpki-client