Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137392e39362e302e302f31372d3332203d3e203238333239.roa
File:                     3137392e39362e302e302f31372d3332203d3e203238333239.roa (raw, json)
Hash identifier:          4HAggbmltuuIftxaCtXJnWky1rKSRVi78RzQU7pXF4o=
Subject key identifier:   D1:DC:A0:96:6C:33:3A:30:02:0B:FC:FF:6B:B7:43:44:F7:C9:30:A3
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       118A768785866ABAE1FB42E57E1F4AE14834BB2C
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137392e39362e302e302f31372d3332203d3e203238333239.roa
Signing time:             Thu 28 Aug 2025 14:55:19 +0000
ROA not before:           Thu 28 Aug 2025 14:50:19 +0000
ROA not after:            Thu 27 Aug 2026 14:55:19 +0000
asID:                     28329
IP address blocks:        179.96.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8a:76:87:85:86:6a:ba:e1:fb:42:e5:7e:1f:4a:e1:48:34:bb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:19 2025 GMT
            Not After : Aug 27 14:55:19 2026 GMT
        Subject: CN=D1DCA0966C333A30020BFCFF6BB74344F7C930A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8c:89:8a:55:1e:ed:ea:f5:fb:39:72:5b:ce:
                    95:bd:c9:27:d2:65:67:5a:ad:c6:ce:8d:f9:36:72:
                    92:a8:63:ae:57:c4:3f:ef:ed:20:9a:13:69:ee:9b:
                    96:cd:3c:21:28:57:70:c1:d8:4c:2b:2a:81:8b:08:
                    be:3f:c7:af:60:e9:41:66:a4:7b:d1:98:78:62:5a:
                    65:2a:f5:17:69:2e:6c:f9:16:3d:e4:5d:93:9e:0e:
                    79:97:75:d8:0e:6c:cd:3a:71:8e:88:04:e5:cb:09:
                    6f:da:4f:da:c8:52:cc:8b:1e:92:14:89:8e:27:78:
                    21:94:e3:16:3b:55:13:54:9a:bc:ea:da:c7:16:21:
                    f6:14:6a:fb:6b:3a:4b:a2:d5:37:5d:b2:ad:c2:78:
                    d4:50:65:02:8d:68:99:55:44:78:42:c7:2b:54:28:
                    74:93:f4:e6:47:64:e0:21:2b:63:59:a7:d0:b1:de:
                    6c:e3:61:57:00:61:df:30:89:5f:61:3e:37:64:29:
                    72:b3:ba:f4:61:63:d6:fe:6c:aa:37:11:dd:60:da:
                    65:a8:c7:70:9d:99:c5:1f:bd:6f:dd:29:8b:3c:07:
                    c1:42:b8:86:dc:b1:43:3a:e8:61:f2:0c:8c:58:4e:
                    47:bf:26:d6:3f:84:b1:be:88:91:0b:f9:0a:3f:4f:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DC:A0:96:6C:33:3A:30:02:0B:FC:FF:6B:B7:43:44:F7:C9:30:A3
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137392e39362e302e302f31372d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         93:70:50:54:01:9a:50:65:a3:3a:5b:73:79:1b:92:80:24:6c:
         57:29:0a:2d:c9:8c:2d:ef:bc:4b:a3:60:e1:6b:b6:91:5f:2f:
         d5:d5:ac:af:e6:bc:e1:ab:ca:ee:89:6b:75:67:1a:b3:3b:02:
         19:8d:d2:d5:47:fa:e9:2b:b2:1c:f6:7b:c2:44:c9:0a:14:66:
         84:b4:6e:20:0b:7d:7e:51:44:58:0c:38:34:35:d8:c5:3d:02:
         2b:11:f7:29:e1:a9:81:b2:2b:c2:18:6a:3a:2f:5b:64:47:0c:
         ab:2e:63:fb:0c:50:17:9d:89:01:e8:6f:87:60:c5:d0:9a:50:
         bb:f6:18:85:d7:b3:46:b6:32:31:70:62:00:07:f4:9a:5c:80:
         87:37:ab:57:a0:2c:fd:8a:26:9a:08:53:57:8d:9e:42:56:1d:
         7b:1e:be:7d:3b:bd:00:7c:82:ed:d6:9a:a8:7b:ea:6b:5b:20:
         1d:0b:22:3f:44:e5:f9:6f:9e:e0:51:01:10:b8:f3:12:3c:05:
         c6:47:4c:d2:b9:3e:af:ea:58:aa:16:23:0e:c5:09:45:8b:16:
         72:56:f2:3d:94:bd:b0:d3:37:74:31:8d:74:13:2a:dc:45:bb:
         0b:9a:52:72:57:7f:04:92:33:06:d5:72:88:d5:6a:f4:f4:29:
         55:b5:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:12:19 2025 by rpki-client