Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa
File:                     3138392e35302e3131322e302f32302d3332203d3e203238333239.roa (raw, json)
Hash identifier:          WsDP+fdMye6cCGqsswxI4mEFCiVF4pAVv1JBHQwsxMg=
Subject key identifier:   C7:5C:EB:16:55:31:EE:1F:CE:61:8F:0A:88:80:E5:E1:5C:E0:9C:DD
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       7828A7A1D8C1DC82EF29E85C7CF0E6940F013368
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa
Signing time:             Thu 28 Aug 2025 14:55:26 +0000
ROA not before:           Thu 28 Aug 2025 14:50:26 +0000
ROA not after:            Thu 27 Aug 2026 14:55:26 +0000
asID:                     28329
IP address blocks:        189.50.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:28:a7:a1:d8:c1:dc:82:ef:29:e8:5c:7c:f0:e6:94:0f:01:33:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:26 2025 GMT
            Not After : Aug 27 14:55:26 2026 GMT
        Subject: CN=C75CEB165531EE1FCE618F0A8880E5E15CE09CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:1e:08:fe:c4:8c:38:c4:62:67:d1:c2:e9:
                    3d:53:34:ef:0e:95:cc:7c:4d:bb:1c:2b:6f:b9:b5:
                    54:59:25:4c:d7:f2:ab:be:93:f1:db:c8:0e:19:8a:
                    e2:9a:bb:6b:eb:30:db:93:8e:33:bf:22:8e:59:ff:
                    97:f8:70:fa:6f:05:5a:a1:df:68:6c:27:4b:10:2f:
                    04:bd:c4:aa:03:d6:bc:5a:6d:4d:1e:49:c2:cc:07:
                    01:e7:4d:98:48:15:ed:cc:ab:cd:c5:56:47:2d:35:
                    8e:d3:b6:ed:3a:dd:72:92:d4:cb:2a:89:49:c1:0d:
                    c6:d0:70:5b:83:de:28:4b:6d:dc:87:68:f0:a6:3f:
                    9b:33:db:68:d8:ee:14:71:c5:d2:b0:6f:85:40:ac:
                    dd:39:81:f0:8a:08:0f:1e:0a:e4:7c:0c:6b:f4:b0:
                    c6:3f:ea:5b:9c:87:98:57:c4:00:c7:22:e9:51:bd:
                    32:b7:80:68:b8:e0:36:43:97:b2:44:04:c2:8d:0e:
                    ce:f5:02:25:fc:4b:01:60:1c:06:b4:ea:c3:ae:97:
                    3c:fc:5f:84:5f:8b:0e:37:2c:c2:33:ff:8b:4c:8f:
                    33:73:97:a3:70:04:b5:44:06:ae:1b:3d:a9:08:5d:
                    46:a6:ca:14:06:52:e1:77:bc:30:fb:14:81:fd:18:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5C:EB:16:55:31:EE:1F:CE:61:8F:0A:88:80:E5:E1:5C:E0:9C:DD
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3138392e35302e3131322e302f32302d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:94:32:74:24:8a:70:b2:c7:f6:c0:11:19:5f:06:45:01:
         c5:54:09:88:9d:a4:ac:4b:e8:86:d5:04:fb:10:96:47:07:7c:
         98:05:84:36:fb:6e:38:c4:f1:ad:5d:95:f8:65:2d:dc:70:ae:
         48:c7:05:fc:64:8b:ee:a0:d9:7b:57:7d:2a:6e:83:4f:bd:4a:
         76:02:31:7d:2e:24:b7:65:f6:43:4c:b3:0c:00:ec:40:86:04:
         31:60:04:6d:4c:3a:d3:2a:bb:48:8c:f0:8a:de:f3:d7:a8:87:
         0f:1e:c3:00:bc:60:81:30:ba:3e:a0:4e:8a:5a:21:0f:fa:bf:
         2d:dd:54:bc:14:9b:be:1f:58:1c:2a:ff:c1:6e:ac:d0:da:ab:
         f2:dc:c0:bf:f0:73:59:dd:fb:d8:d3:21:fe:62:30:eb:cb:7d:
         22:1d:a3:27:1b:96:e0:66:18:81:37:98:68:36:06:da:01:cb:
         de:05:d1:f7:72:02:a4:f8:7e:1e:be:94:52:8c:e5:66:7f:6f:
         76:0f:2b:70:ec:0a:1f:05:bd:20:43:7b:94:21:e3:11:e0:1e:
         1b:10:32:f6:ea:f7:26:6a:be:a5:38:7f:66:34:12:dc:f6:56:
         12:de:70:f3:f5:2c:e9:5b:69:c0:ae:80:74:4e:3d:6e:1d:be:
         f3:03:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:11 2025 by rpki-client