Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e372e302f32342d3332203d3e203232333831.roa
File:                     3137372e3132362e372e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          i7bY4JZBEfgRfztmC9q1dg0TGf/dWpmJ9B1w/30n5Lo=
Subject key identifier:   E3:5D:3F:6C:70:17:38:86:19:C6:6F:47:48:24:12:F5:29:95:DA:CC
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       373D53C8FFB8140A380C58F5407872F9206CAEC8
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e372e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:23 +0000
ROA not before:           Thu 28 Aug 2025 14:50:23 +0000
ROA not after:            Thu 27 Aug 2026 14:55:23 +0000
asID:                     22381
IP address blocks:        177.126.7.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3d:53:c8:ff:b8:14:0a:38:0c:58:f5:40:78:72:f9:20:6c:ae:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:23 2025 GMT
            Not After : Aug 27 14:55:23 2026 GMT
        Subject: CN=E35D3F6C7017388619C66F47482412F52995DACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:e8:b4:16:de:f8:eb:be:74:e5:8d:52:db:
                    de:83:31:da:1f:df:a2:80:2b:c1:a1:63:63:29:a9:
                    63:51:68:75:5a:e8:02:ca:a4:87:7c:ad:fb:ad:c1:
                    20:37:47:f3:27:1b:6b:94:58:f0:11:33:50:3b:dd:
                    f5:dc:2e:7f:ce:78:38:65:ae:ef:aa:ef:46:1b:86:
                    aa:58:75:4a:c9:a5:7b:af:74:e6:0f:f0:da:58:b1:
                    6b:45:8d:29:4c:e2:fc:1d:d6:db:64:eb:d7:f8:4e:
                    e8:14:3e:cf:aa:d1:c0:63:92:8d:8e:52:88:ce:a4:
                    ab:ff:ce:44:3c:34:5c:93:c3:2c:61:db:f0:6b:b6:
                    f5:1b:d7:00:28:01:af:72:9f:c8:4b:c5:86:39:51:
                    62:cf:07:69:3e:14:ec:fa:8f:53:db:ca:dd:08:71:
                    75:f7:35:d1:08:a6:3e:3b:52:77:d6:ec:d4:a8:ee:
                    26:90:9a:34:89:96:ca:d7:f3:33:1a:b5:ce:97:ce:
                    70:1f:74:c2:92:65:08:2f:e9:2e:82:73:98:f6:f5:
                    7d:f2:9c:72:a7:cb:a8:40:1a:04:99:91:1f:79:b8:
                    61:56:e7:14:34:e6:09:09:d6:d8:62:9b:8f:bb:43:
                    68:4a:57:a7:5d:4e:e7:3e:e6:fc:41:c8:66:6f:91:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5D:3F:6C:70:17:38:86:19:C6:6F:47:48:24:12:F5:29:95:DA:CC
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3132362e372e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:8f:db:06:7e:ed:04:a6:50:6e:fd:39:e0:f6:92:09:73:
         a4:de:1c:47:75:48:34:93:d6:4a:ef:73:19:9d:d5:e3:ee:7d:
         7f:d1:4b:35:81:9b:cd:3f:cb:25:ad:75:a1:54:17:5c:1d:62:
         1e:b9:5f:1c:2f:a6:9b:ca:f5:07:48:03:dc:58:b0:57:7a:4f:
         65:58:72:f2:f2:3f:09:f6:02:aa:de:a6:d7:20:f1:a6:8b:de:
         f6:3c:f6:50:23:4e:84:0a:41:a8:8e:36:1c:ad:24:fc:54:7a:
         1a:90:e1:e9:48:71:37:52:3a:ce:3d:6c:fd:f0:5a:5c:05:67:
         d2:7e:16:42:ec:c4:48:4c:75:de:1b:03:06:97:01:64:b2:56:
         84:b8:53:84:27:54:75:94:c6:f7:14:f9:ce:e5:9e:eb:66:95:
         57:d3:e5:20:31:1e:92:60:a0:45:7a:cf:7c:bf:fe:7f:ac:e7:
         71:89:be:a8:1f:54:ea:28:8a:24:9e:80:0b:40:b9:eb:87:d7:
         b4:0a:84:81:78:ef:22:2b:c7:90:4c:a9:b2:90:dc:5c:7a:14:
         84:e3:1a:d3:30:8c:8f:df:97:8f:41:2f:84:73:db:d0:d1:6b:
         02:76:79:0d:e7:71:6d:d8:2a:be:a4:ac:33:79:8d:fb:1e:66:
         80:01:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:12:18 2025 by rpki-client