Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e322e302f32332d3332203d3e203232333831.roa
File:                     3137372e3132362e322e302f32332d3332203d3e203232333831.roa (raw, json)
Hash identifier:          cNAxlYj/mL+caWlSZO8gthul/kkXJkfBPnMj3iAJbOM=
Subject key identifier:   81:7D:A8:8A:6A:C2:8C:B7:76:F0:72:F3:B5:9E:3C:CA:09:C1:2D:5B
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       0DE4A5DEF3C01B266846424EEEF5EADE541EC6DB
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e322e302f32332d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:22 +0000
ROA not before:           Thu 28 Aug 2025 14:50:22 +0000
ROA not after:            Thu 27 Aug 2026 14:55:22 +0000
asID:                     22381
IP address blocks:        177.126.2.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e4:a5:de:f3:c0:1b:26:68:46:42:4e:ee:f5:ea:de:54:1e:c6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:22 2025 GMT
            Not After : Aug 27 14:55:22 2026 GMT
        Subject: CN=817DA88A6AC28CB776F072F3B59E3CCA09C12D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:b8:72:29:3f:9a:d8:78:2a:71:4b:da:9c:
                    b5:2d:b5:9f:7b:de:76:cb:55:9b:09:62:0a:25:2f:
                    10:45:78:62:8f:ae:84:24:ff:18:df:68:6b:67:e9:
                    c3:de:c1:c3:c7:e7:12:83:1d:de:1c:69:90:f0:bb:
                    9e:be:c8:38:28:79:1a:8c:f8:53:e1:8d:71:f3:05:
                    be:8a:5e:cf:6d:7a:64:74:e2:e0:ff:3c:36:f1:43:
                    18:27:82:0e:d7:76:74:da:cd:5f:42:1f:9b:f3:b9:
                    bf:ef:60:98:ea:4d:6e:dc:3b:03:60:c6:49:7a:14:
                    a0:f4:63:f5:25:48:6c:41:03:8b:e2:bb:e8:da:d0:
                    9f:99:8e:21:7b:93:f0:87:61:16:85:20:bc:de:76:
                    89:56:12:e0:8a:29:f9:a1:c9:54:55:2a:61:b1:92:
                    68:35:2d:f5:a1:85:79:ce:84:1b:77:36:91:3b:96:
                    d5:c0:c0:4c:09:c4:59:47:b5:35:c4:35:02:8c:df:
                    e5:4c:05:26:b1:6e:d7:b8:a5:1d:d1:26:b6:82:ab:
                    f0:ee:b5:30:bf:03:6b:4f:0d:bc:30:71:3e:87:b0:
                    25:bc:91:7f:24:ba:75:79:e1:d1:8c:89:4f:c7:4e:
                    9d:38:b0:74:37:a2:35:ef:0f:18:9a:1b:85:f9:aa:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7D:A8:8A:6A:C2:8C:B7:76:F0:72:F3:B5:9E:3C:CA:09:C1:2D:5B
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e322e302f32332d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:11:a9:10:e2:df:ba:4f:7d:a1:40:31:5e:3a:71:cd:10:
         37:8b:fc:af:01:b5:c9:db:74:8d:3c:d8:ea:c5:54:d3:67:49:
         6f:1b:a9:80:58:55:d4:71:55:2f:9e:26:17:ed:72:58:ec:2e:
         61:68:d6:a2:0d:a9:45:e4:1b:54:0c:b7:f6:4a:ac:82:08:a6:
         7c:6f:e7:16:69:c0:af:59:cc:53:ae:32:67:aa:bf:fa:c6:08:
         57:ce:d8:d0:b1:61:28:b2:b3:90:52:55:a5:86:79:cf:44:84:
         a3:84:80:da:76:6e:1e:43:fd:73:60:33:49:63:d8:9c:26:1d:
         a6:fe:2f:61:3b:46:a8:e5:51:0f:ba:09:e7:ec:7e:39:1a:15:
         9a:dd:3b:4f:12:17:e5:52:2a:fc:af:e3:8b:86:8a:9d:86:16:
         9a:2a:94:ca:46:aa:94:24:45:78:ec:15:0b:af:77:75:51:c6:
         3a:47:8b:e8:f5:bc:47:40:a0:e2:27:d0:57:f9:32:d0:10:cc:
         74:80:53:db:26:78:bd:cb:ff:92:73:16:6d:9d:47:ec:29:91:
         ec:73:29:87:5f:50:3d:b8:7d:09:c2:54:f3:62:21:4b:44:12:
         66:41:a2:bd:ba:8c:0a:16:c2:3b:db:e9:c1:a8:7c:3c:07:a2:
         03:c0:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:12:16 2025 by rpki-client