Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e31342e302f32342d3332203d3e20323632353839.roa
File:                     3137372e3132362e31342e302f32342d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          b59JuYgp/noxV9dtwUvfID/F63CMx3lICUSbhy+cOXI=
Subject key identifier:   B9:1B:56:1B:3B:54:C1:F6:AA:54:55:D1:DC:77:6A:6B:5A:69:14:4F
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       2040DD934F1E4888024E56F0AA541210DB173447
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e31342e302f32342d3332203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:55:24 +0000
ROA not before:           Thu 28 Aug 2025 14:50:24 +0000
ROA not after:            Thu 27 Aug 2026 14:55:24 +0000
asID:                     262589
IP address blocks:        177.126.14.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 20:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:40:dd:93:4f:1e:48:88:02:4e:56:f0:aa:54:12:10:db:17:34:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:24 2025 GMT
            Not After : Aug 27 14:55:24 2026 GMT
        Subject: CN=B91B561B3B54C1F6AA5455D1DC776A6B5A69144F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:09:91:e0:06:ec:93:4c:5c:b8:f9:4f:cd:
                    a0:73:6c:37:36:5b:a8:5f:50:d3:4a:50:e6:64:1a:
                    86:64:66:33:2c:a1:c7:66:d5:db:2b:c7:c3:5f:b4:
                    ff:01:42:20:d0:7c:31:e3:12:4e:47:c9:4d:87:12:
                    f9:a8:e0:23:78:40:70:d0:ef:de:9d:7e:ee:f2:65:
                    50:0c:36:86:34:ca:45:2b:ad:14:93:73:01:7c:1a:
                    0a:9d:e4:4e:14:ec:83:91:4b:25:75:e8:dc:41:18:
                    72:17:2b:52:12:7b:fb:48:6c:b1:ed:ff:c9:02:fd:
                    1b:5f:41:17:19:8c:b4:59:e8:2c:ea:e6:71:85:d9:
                    00:fc:7a:5a:8b:be:91:65:03:b7:e0:29:dd:86:c4:
                    a1:5b:3e:25:0f:60:d7:4a:7b:38:42:a2:ce:76:0d:
                    b3:6f:4b:3d:1a:17:9a:5b:c2:d8:bb:0b:19:ee:2e:
                    dd:e7:e0:34:a2:ca:51:fe:1a:da:35:e5:8f:ec:46:
                    1a:98:42:7b:f1:7c:62:32:df:99:f0:4e:b6:d2:8a:
                    55:c3:4a:35:d4:7c:e7:fc:b6:69:8c:05:f3:af:b1:
                    a9:0f:10:f2:1e:60:7c:c7:a4:c5:0e:01:4e:4a:f6:
                    67:83:ad:fd:14:0c:ab:ca:cb:bf:07:7d:17:e1:f6:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1B:56:1B:3B:54:C1:F6:AA:54:55:D1:DC:77:6A:6B:5A:69:14:4F
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e31342e302f32342d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:db:f7:e1:f2:4f:20:79:58:45:42:42:a1:35:b4:31:ce:
         b0:64:5b:52:e4:b2:75:0e:c4:28:7a:6a:76:d1:82:c3:13:c7:
         ec:af:22:61:2e:ce:39:a2:17:e7:fe:11:2d:1c:a4:25:75:44:
         4f:fd:52:f2:e7:f4:76:49:d2:a2:40:29:fe:39:ed:70:67:13:
         03:27:96:1c:cf:2d:71:35:c4:3c:4c:c2:d6:ea:62:2a:57:7f:
         23:5e:38:ae:00:b3:f0:6e:ad:8e:e0:4c:ab:85:c3:37:4a:72:
         55:c8:b5:3b:bc:e0:a2:88:c6:94:96:be:b7:27:68:39:55:78:
         8c:2e:c4:74:ee:d0:94:5d:ac:7d:31:66:fc:be:09:4b:2c:0a:
         44:02:16:bb:43:66:15:bf:f1:f0:49:60:e5:13:df:72:ee:53:
         e8:c1:06:22:5c:55:00:fb:78:54:1a:f3:5b:8b:a5:d1:42:78:
         90:7a:68:94:22:92:b0:2a:1f:e3:ba:37:02:a0:18:cc:f2:d2:
         6c:36:3b:ee:a6:e2:81:54:db:c1:f1:2c:f9:ac:b8:1a:12:ff:
         8b:e2:e9:be:4c:d8:5f:79:7a:75:10:93:3e:e1:c9:65:11:b7:
         f8:ef:ce:6c:8b:34:9c:28:fa:a8:a4:55:ac:24:69:f2:f3:d4:
         3d:3e:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:42:11 2025 by rpki-client