Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3132392e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3132392e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          qF6JyDGcDlqZ/4FrfL6dKYLV6NxQZjzjqsyc9vuKy1I=
Subject key identifier:   0F:DC:B7:78:3F:9A:1F:3E:C1:F7:48:9F:14:01:4D:E1:D1:C1:32:A4
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       0913D2151917D0995CF562D1B76ABBF99030CC3F
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3132392e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:29 +0000
ROA not before:           Thu 28 Aug 2025 14:50:29 +0000
ROA not after:            Thu 27 Aug 2026 14:55:29 +0000
asID:                     22381
IP address blocks:        201.87.129.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:13:d2:15:19:17:d0:99:5c:f5:62:d1:b7:6a:bb:f9:90:30:cc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:29 2025 GMT
            Not After : Aug 27 14:55:29 2026 GMT
        Subject: CN=0FDCB7783F9A1F3EC1F7489F14014DE1D1C132A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:bb:b6:d4:1e:03:6b:6d:c1:de:53:28:1e:42:
                    28:80:9c:d7:c3:74:e4:14:ff:05:6a:28:0e:9e:b4:
                    44:77:50:b3:38:fc:bd:43:89:00:df:3e:77:21:c9:
                    f8:b4:03:2a:d2:41:94:e1:b6:d9:45:73:49:40:69:
                    8c:20:0b:4f:e5:14:fc:88:2b:c9:b1:5e:8d:d2:0e:
                    b9:d3:46:a5:64:da:6a:20:83:93:9a:d4:6a:7a:be:
                    da:2b:34:e9:e5:61:b9:7f:19:96:82:98:9f:00:00:
                    b4:3e:d1:12:68:d0:f9:5b:7b:68:71:15:29:2e:0a:
                    18:30:80:42:37:56:7b:13:5c:68:f9:9e:c4:25:b8:
                    75:ca:4f:34:28:13:a4:65:fd:bb:92:3e:96:94:43:
                    53:05:18:0e:b6:d4:ef:36:3c:c7:87:f9:75:ff:3a:
                    d2:62:0d:cb:9c:5f:d0:5b:f7:4e:b3:7f:98:88:4c:
                    9a:ab:f5:9e:a1:b8:d1:fe:a0:76:37:ad:03:ef:6b:
                    93:03:d5:b1:4e:f6:30:84:13:31:25:23:b2:25:4a:
                    d9:cc:b9:1e:67:50:2a:f1:b5:f5:fc:f4:36:e8:a0:
                    c1:5e:66:fb:85:bb:c4:31:5c:15:33:16:8f:2b:9a:
                    24:fd:27:7c:5e:1f:c4:9e:e1:dd:fe:32:05:34:ea:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DC:B7:78:3F:9A:1F:3E:C1:F7:48:9F:14:01:4D:E1:D1:C1:32:A4
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3132392e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:57:3e:ea:e4:fe:11:db:f1:2b:28:20:fa:b2:ee:d7:86:d8:
         4d:30:e6:bc:b3:4a:a3:77:28:4e:a9:44:db:52:b0:2f:a2:8a:
         a0:7f:7d:9e:59:14:df:ae:ca:83:63:7b:1a:f5:1b:69:81:5b:
         80:e5:7b:50:6b:da:c9:fa:eb:58:df:99:38:4c:82:9b:4f:cc:
         5d:d4:ae:b0:0d:8e:c9:53:06:3d:89:a0:5e:ff:94:d9:30:91:
         9f:4e:2d:cd:47:9c:0e:da:51:7e:94:50:f6:61:ab:0c:c4:f4:
         6a:5c:47:a5:a9:b8:5f:20:0d:25:3a:d7:6c:63:5a:c4:f3:d1:
         d5:31:c1:70:bc:09:dc:66:3c:b6:94:6a:37:a0:73:46:33:11:
         56:61:ce:06:01:d3:53:08:e5:d5:f2:ab:3f:83:66:95:3b:64:
         cd:b3:e1:f6:0d:d5:c9:ce:36:7e:da:66:15:8d:d5:c1:b7:03:
         7a:9b:e5:db:93:03:c6:3c:18:4d:f2:73:47:4e:43:7e:0b:61:
         1f:12:6e:0e:17:29:b1:03:f0:5a:d0:ca:a8:2b:1d:bb:86:6a:
         36:36:ef:67:44:12:b7:84:65:99:a4:34:07:ab:71:f1:52:61:
         4c:ce:18:a9:5a:d6:b5:bc:e5:4d:c1:10:c7:72:8b:e1:38:e8:
         b5:9d:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:13:42 2025 by rpki-client