Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3133302e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3133302e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          qjy91sPGmY+f+itpRbpDAIomQJm/Br8qPp9f9LspadY=
Subject key identifier:   54:24:07:20:0B:B3:EF:D6:33:54:95:66:5E:D4:4A:A5:84:39:31:91
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       1B12FA4E39FD2F48855953916C5BB4ACE92B182C
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3133302e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:25 +0000
ROA not before:           Thu 28 Aug 2025 14:50:25 +0000
ROA not after:            Thu 27 Aug 2026 14:55:25 +0000
asID:                     22381
IP address blocks:        201.87.130.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:12:fa:4e:39:fd:2f:48:85:59:53:91:6c:5b:b4:ac:e9:2b:18:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:25 2025 GMT
            Not After : Aug 27 14:55:25 2026 GMT
        Subject: CN=542407200BB3EFD6335495665ED44AA584393191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:5b:a6:ee:36:8f:77:ac:e5:24:1f:94:4e:
                    15:59:d9:07:4e:28:a3:d4:31:86:2d:81:24:7b:91:
                    03:67:f9:1c:0e:c4:9d:3d:5c:80:57:72:97:dd:6f:
                    6d:8d:47:12:3d:3e:4a:82:ee:d4:fd:1a:2a:1a:f2:
                    6f:fb:da:86:17:f8:e9:7b:0f:87:f8:95:c9:b3:2d:
                    ad:92:00:5c:e4:f5:bd:4b:2d:a0:e2:4a:24:79:2b:
                    14:ce:5e:86:ad:0e:4f:89:53:47:70:d1:ca:f0:63:
                    fb:42:b9:df:bc:0d:69:84:be:a6:3a:d2:5b:03:1f:
                    75:ee:e4:b8:ee:34:79:88:8f:05:e6:2c:a0:f5:07:
                    a0:1e:7c:dd:15:5d:5d:a2:9f:b7:42:ae:5d:1d:d5:
                    32:5a:0e:99:3f:9f:eb:51:c3:24:a6:d3:06:4a:74:
                    ff:7e:3b:3f:05:b0:ce:6a:d6:b5:6a:78:71:5c:40:
                    ff:53:95:47:0b:80:fa:62:b1:97:28:00:f2:e1:81:
                    d8:14:1a:cc:e6:6d:97:c1:94:31:29:84:83:53:73:
                    8e:08:db:a9:b2:d5:82:f3:9b:2f:a3:b2:37:96:1d:
                    ef:d7:00:6a:06:dc:a3:00:38:c3:00:84:39:76:63:
                    56:22:34:73:7b:03:15:58:d1:9c:e8:40:39:02:f8:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:24:07:20:0B:B3:EF:D6:33:54:95:66:5E:D4:4A:A5:84:39:31:91
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3133302e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:3c:57:29:31:b0:ad:ef:91:7a:8b:8a:54:4c:ff:21:ae:57:
         91:2d:fa:7b:3a:19:75:33:a1:ae:a1:6a:83:5a:c8:5c:09:8a:
         b6:c2:9e:b7:89:e4:db:9c:b9:fd:95:0c:67:75:1a:e2:e8:19:
         58:ce:8c:39:90:f6:79:f2:c9:70:d9:5f:87:02:70:40:f9:84:
         f7:04:b5:68:9d:41:08:62:9b:f7:fa:c0:a3:f8:21:6d:88:96:
         e8:e4:20:ca:47:48:1f:2c:c5:45:7a:fd:d2:f9:37:17:d8:de:
         15:17:6d:16:35:78:03:6e:5c:1e:85:05:50:2e:b9:34:83:c6:
         fe:2c:03:90:8c:6a:d1:33:61:68:57:de:a9:d5:7e:7c:10:bc:
         21:4c:77:7b:6f:d6:b5:7d:83:c8:d1:2c:ba:9f:54:56:99:dd:
         fd:49:76:01:ec:f1:10:af:08:90:6f:dd:c0:a1:ee:ba:a7:00:
         07:74:bb:2c:6f:71:6c:1f:76:36:4b:e4:10:0f:94:cf:d4:1f:
         2b:dc:1c:0b:b1:ab:41:cc:fd:45:60:4c:84:34:27:45:8d:fe:
         33:26:ff:ce:98:45:63:fd:9f:7d:cc:ee:46:04:6a:3a:89:f1:
         9a:f5:50:c6:c2:69:39:d4:da:12:d1:57:9a:bb:67:86:23:a9:
         1b:8c:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:04 2025 by rpki-client