Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138362e3232362e38302e302f32302d3332203d3e203238333239.roa
File:                     3138362e3232362e38302e302f32302d3332203d3e203238333239.roa (raw, json)
Hash identifier:          nU0K+Tw57MnywQyTmh6s+POVoYnCklC2T4WG2WSivZw=
Subject key identifier:   E6:FF:FB:80:5E:B0:C9:29:7A:AA:7D:0F:EA:51:D9:4B:00:D2:0B:68
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       36FA69794193890F769C6D2D44417D0EB235D64D
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138362e3232362e38302e302f32302d3332203d3e203238333239.roa
Signing time:             Thu 28 Aug 2025 14:55:19 +0000
ROA not before:           Thu 28 Aug 2025 14:50:19 +0000
ROA not after:            Thu 27 Aug 2026 14:55:19 +0000
asID:                     28329
IP address blocks:        186.226.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fa:69:79:41:93:89:0f:76:9c:6d:2d:44:41:7d:0e:b2:35:d6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:19 2025 GMT
            Not After : Aug 27 14:55:19 2026 GMT
        Subject: CN=E6FFFB805EB0C9297AAA7D0FEA51D94B00D20B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:cc:17:a1:69:b2:a5:48:7b:c1:32:88:ba:
                    2f:93:d8:18:bf:66:ed:f9:75:5e:5b:50:97:b5:f7:
                    55:a1:d2:71:dd:89:c5:e5:20:67:c8:43:06:80:2e:
                    43:09:ef:42:61:a8:5f:0d:77:52:e7:7f:3d:b2:81:
                    61:24:52:84:28:ef:36:c8:1d:ec:df:aa:cd:9d:83:
                    0d:92:0c:9d:ca:6e:a8:b8:42:72:48:f2:62:30:ee:
                    e6:1b:88:8d:46:12:f2:b0:81:6b:d1:13:84:4c:fb:
                    d9:bb:ec:ee:76:da:21:a9:b4:91:6b:67:32:10:e5:
                    5f:bd:d5:e9:ec:2f:9d:bf:f4:d6:18:9e:15:63:2f:
                    56:e5:93:48:40:7f:66:73:ca:90:f7:90:e2:fe:c0:
                    ff:df:33:c3:cc:af:25:f2:fb:a1:31:87:9b:a8:e1:
                    1c:24:be:59:34:b3:28:ab:05:8a:49:99:f7:5f:eb:
                    e1:1a:f0:80:0f:41:84:ab:a1:7c:fe:55:94:44:22:
                    c4:9f:50:d5:dc:36:65:58:64:4b:58:94:dd:79:c1:
                    13:e4:fa:94:6c:0a:67:70:7b:99:58:b2:0c:52:a7:
                    b8:fb:d6:bb:f4:5d:f0:bf:47:e9:a1:b4:b9:7d:e5:
                    4d:80:e1:b7:5c:25:ac:81:69:14:68:f6:f9:67:5b:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FF:FB:80:5E:B0:C9:29:7A:AA:7D:0F:EA:51:D9:4B:00:D2:0B:68
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138362e3232362e38302e302f32302d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:54:4a:f4:b5:3d:ac:ee:07:9c:3b:2b:e3:fc:ca:88:85:35:
         9f:c0:80:91:36:40:c3:0d:b0:d3:4f:2f:d5:f8:ba:9b:4c:5d:
         12:3b:29:83:08:cf:74:24:93:91:e4:d3:ff:cc:51:70:5d:03:
         67:76:06:bb:b6:0e:a5:91:be:57:d6:20:a0:4b:80:96:19:7f:
         c9:f9:6c:29:42:db:17:da:97:63:64:6a:ac:62:ae:1f:be:a2:
         7a:27:dc:be:e8:fb:0d:03:e4:f6:db:e1:80:91:21:db:65:c3:
         8b:42:9e:5c:73:01:d3:f8:3e:3a:35:d6:6d:72:e4:ce:32:6e:
         de:e6:b0:1f:54:15:8d:63:1a:0e:79:9d:34:1c:c1:7f:ea:33:
         f8:3d:fa:2c:d4:2d:4e:be:7f:8d:48:a6:27:b2:bc:1b:24:99:
         72:06:c5:d0:01:31:f3:ab:15:a5:08:9a:d2:34:41:57:d0:34:
         76:49:ad:01:36:5c:5a:0c:74:2b:2d:a9:54:ff:7c:10:42:d6:
         58:4a:b8:6c:76:86:fc:0e:59:bb:a6:48:85:f6:14:5a:95:86:
         17:02:d9:d5:59:b8:e1:4e:41:be:b9:4a:96:af:cf:69:bd:1f:
         d3:91:56:f5:74:51:b1:71:ab:e2:81:70:23:a4:9f:cf:20:fd:
         9f:d0:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:13:47 2025 by rpki-client