Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e31342e302f32342d3332203d3e203232333831.roa
File:                     3137372e3132362e31342e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          EplHDBVbsbcPE1cE6hfCCMKbmr/IE7OlC4b9a5CeaLg=
Subject key identifier:   66:73:06:2E:08:5F:FC:5C:2E:11:60:33:C1:2E:93:CA:5B:00:D1:C2
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       32857289D27EF943E165807BAC2E4578DEDA6DAE
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e31342e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:20 +0000
ROA not before:           Thu 28 Aug 2025 14:50:20 +0000
ROA not after:            Thu 27 Aug 2026 14:55:20 +0000
asID:                     22381
IP address blocks:        177.126.14.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:85:72:89:d2:7e:f9:43:e1:65:80:7b:ac:2e:45:78:de:da:6d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:20 2025 GMT
            Not After : Aug 27 14:55:20 2026 GMT
        Subject: CN=6673062E085FFC5C2E116033C12E93CA5B00D1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:4a:c8:68:af:e1:4b:4d:52:77:7f:15:3f:
                    7b:7e:25:0b:1f:b2:14:b2:44:b0:bb:b7:9d:c4:79:
                    27:ac:d0:f7:bf:fc:2a:bc:89:95:c0:55:ff:9b:ef:
                    b8:38:5e:17:73:1a:bd:f6:ad:5a:b1:ac:16:54:3d:
                    b5:0b:38:9c:82:08:6d:19:c6:2b:e8:dd:98:1d:07:
                    3c:97:75:a1:90:e1:76:c2:54:b1:f4:60:89:33:46:
                    d1:42:a0:61:86:db:71:c1:32:d4:b8:8d:78:c3:1b:
                    88:33:8a:5c:19:e0:4d:9f:f6:2a:2f:57:ce:19:65:
                    7c:23:45:aa:98:7e:21:19:83:72:bb:12:a9:c5:4d:
                    5d:0b:5f:6b:c1:12:5b:d9:04:65:4a:21:4f:4c:98:
                    4d:a9:df:28:b7:3a:cd:0e:df:7b:0f:1a:f6:ca:a8:
                    f6:21:a3:44:27:a9:2c:ed:b7:97:7d:ed:52:6a:aa:
                    40:df:73:61:ab:f8:02:05:42:d2:cc:a7:76:ff:d3:
                    54:83:b6:de:ce:31:51:bc:cf:13:5a:ad:e1:8f:6f:
                    ac:62:ba:f5:7e:80:bd:97:6e:b2:4c:56:d1:78:ef:
                    66:9d:9c:cd:d3:25:98:aa:4c:b6:15:6b:e9:43:ff:
                    3f:c2:f4:d5:3a:e9:29:49:e1:8e:28:d9:b0:b5:82:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:73:06:2E:08:5F:FC:5C:2E:11:60:33:C1:2E:93:CA:5B:00:D1:C2
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e31342e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:b4:f1:6d:e9:7b:4c:91:8f:a4:f3:6e:7b:d8:3d:3a:49:
         8f:ca:27:03:a1:1c:1b:df:c7:44:c2:c7:73:58:67:1a:9d:8f:
         32:0e:71:af:86:05:96:85:d3:25:91:bd:74:2b:79:16:f1:a5:
         e7:ec:08:18:03:fb:9f:2b:db:66:ee:3c:0e:37:88:41:78:58:
         67:74:c5:f3:74:6e:5b:40:f0:0a:06:74:1c:72:a9:c3:c0:c5:
         1c:d6:ef:1e:63:66:7c:2d:d3:b0:7b:5b:e7:66:1d:80:4d:ac:
         54:28:55:b9:e8:c8:5b:a5:8d:92:a8:83:b0:84:74:7d:80:e1:
         bf:aa:89:4d:7c:d8:9d:ac:18:08:25:1d:3b:82:0b:1e:87:c2:
         de:a8:3b:9a:16:bb:60:16:22:d6:50:9c:fc:85:65:7f:e9:31:
         15:ac:16:79:2f:34:a9:b2:9a:33:6e:44:5d:9f:95:cc:18:f9:
         62:69:0f:49:10:7e:b6:e8:5c:50:f3:9e:eb:aa:1b:3a:14:c5:
         45:99:6f:4f:65:45:ad:ca:58:fc:4a:ea:e1:49:41:08:e1:1b:
         2a:98:27:79:58:61:61:dc:f9:9a:b7:5c:5c:b8:30:bf:b5:f1:
         41:78:fd:d0:ea:ae:e7:6b:16:59:8d:c9:a0:aa:1a:d1:be:8c:
         38:16:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:12:10 2025 by rpki-client