Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa
File:                     3138372e3132302e31342e302f32332d3332203d3e203232333831.roa (raw, json)
Hash identifier:          RZ9Im1EOlycuxDlwAgKxkcqBO9FWipiH8y/A1BFiJKs=
Subject key identifier:   82:63:37:45:7C:3D:C7:9E:15:72:19:C1:9E:01:C3:93:F0:F4:80:58
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       522DDB13620A48CADF5893B51C56EC1778D9AAF3
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:19 +0000
ROA not before:           Thu 28 Aug 2025 14:50:19 +0000
ROA not after:            Thu 27 Aug 2026 14:55:19 +0000
asID:                     22381
IP address blocks:        187.120.14.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2d:db:13:62:0a:48:ca:df:58:93:b5:1c:56:ec:17:78:d9:aa:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:19 2025 GMT
            Not After : Aug 27 14:55:19 2026 GMT
        Subject: CN=826337457C3DC79E157219C19E01C393F0F48058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:65:08:e2:21:07:e4:e9:59:6b:38:b6:13:
                    0e:80:0b:24:da:cd:ee:a4:c7:9f:e7:32:a8:cc:90:
                    ab:9a:a2:1f:28:c7:8f:9d:55:b0:44:51:a9:35:0c:
                    82:98:42:88:28:41:fe:7c:e3:76:21:2c:4c:fa:35:
                    d2:c3:79:7c:2a:38:6a:55:b5:f4:f2:97:29:1b:1d:
                    26:11:02:fb:fc:6f:44:08:90:e3:a8:16:70:7d:80:
                    bd:cc:aa:8a:74:8e:f8:3c:6d:98:f5:47:89:9c:4f:
                    95:9b:6d:cc:99:bb:d1:49:1f:d3:53:61:52:f0:f1:
                    92:3f:94:a7:7e:a1:8d:43:68:69:2f:86:3b:c2:f9:
                    69:11:51:bc:2f:43:9f:4a:4c:09:6d:1b:82:d3:ed:
                    85:7e:bd:bf:77:a4:0e:98:23:27:35:cc:03:b3:b3:
                    78:ff:32:ad:94:41:4a:fb:dc:00:a5:1b:cf:1f:0d:
                    35:b7:4f:e4:b7:96:02:de:f9:fe:d7:34:05:fe:6e:
                    61:78:bb:1f:04:80:d7:d6:b1:34:ed:ac:0f:c6:e5:
                    76:60:7f:3a:87:b8:29:3b:f6:56:c1:c6:ed:f1:1b:
                    d8:90:44:fa:4c:2e:6d:47:bb:eb:d1:1c:bb:a4:69:
                    c3:ee:ac:f5:ce:04:ca:88:4b:85:de:fc:40:d8:7b:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:63:37:45:7C:3D:C7:9E:15:72:19:C1:9E:01:C3:93:F0:F4:80:58
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138372e3132302e31342e302f32332d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:43:3c:b4:f6:22:67:77:59:d1:b6:bf:e3:1e:d6:72:52:
         29:65:5f:df:e6:2e:77:e5:08:47:23:c6:87:91:d9:51:c5:f4:
         19:4a:af:53:42:d2:44:2c:20:35:09:33:ea:15:aa:31:68:14:
         73:c5:8c:7e:d4:cc:75:d9:e1:e6:8b:87:cc:e8:dd:4a:a0:16:
         7f:77:f0:a9:92:69:57:23:37:08:e4:44:62:84:c7:e4:45:06:
         62:73:db:bb:f4:dd:93:bf:98:b1:89:82:54:b0:d3:85:a3:e0:
         86:dc:41:25:f2:f2:b9:f8:51:44:86:69:9c:f0:3e:b8:16:16:
         d9:a0:5d:fa:8b:e1:bb:11:ef:f9:34:2b:6a:64:49:e8:fe:87:
         6f:f5:30:41:44:5d:6f:3c:15:3e:70:3e:b9:be:fc:9c:fc:42:
         d5:0f:f9:54:23:29:fd:0e:4d:8f:60:da:b8:d7:e4:ac:44:cb:
         fc:45:2d:75:56:07:f6:01:d1:cd:82:50:23:d6:8c:dd:3b:54:
         d4:c6:54:7a:8b:e3:6e:59:71:19:41:25:23:f6:72:47:4c:ef:
         e8:86:61:41:d2:c6:c6:d8:94:67:5b:a7:5f:40:2b:f8:27:cf:
         17:57:9a:d2:f6:6f:d1:f5:7b:9d:99:74:07:e7:5e:11:eb:38:
         d3:1c:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:13:37 2025 by rpki-client