Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3133382e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3133382e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          vbL9vAcJzAVq+yz/ldwMwHiL7R8AY4JI9QElhtuUXy4=
Subject key identifier:   21:58:24:CF:AA:C2:6C:8D:9A:21:08:E8:1B:D3:F7:4D:74:80:27:CC
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       64ADCBBA3EFC3EE180BC2EE855AEB75FE86D4873
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3133382e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:23 +0000
ROA not before:           Thu 28 Aug 2025 14:50:23 +0000
ROA not after:            Thu 27 Aug 2026 14:55:23 +0000
asID:                     22381
IP address blocks:        201.87.138.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ad:cb:ba:3e:fc:3e:e1:80:bc:2e:e8:55:ae:b7:5f:e8:6d:48:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:23 2025 GMT
            Not After : Aug 27 14:55:23 2026 GMT
        Subject: CN=215824CFAAC26C8D9A2108E81BD3F74D748027CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:0b:c8:71:d8:25:50:f7:4a:c7:22:0a:78:
                    69:0a:6c:91:37:47:36:19:7e:db:c6:55:e1:dd:6a:
                    60:29:87:8a:71:b2:0d:68:d9:5c:fe:ef:1c:aa:46:
                    1e:8f:96:b7:f3:c5:92:5d:4e:d8:0b:8d:d1:25:38:
                    75:5b:65:d1:fd:75:1a:a2:22:e2:4a:b8:7c:74:15:
                    23:8a:97:35:fa:2d:31:05:a3:cd:25:5e:82:f0:8e:
                    75:d7:99:25:b1:6c:46:a3:8c:0d:14:40:d2:ab:c9:
                    4b:6b:b7:80:ca:6b:20:c1:dd:fa:98:52:61:4a:83:
                    f1:5d:23:73:17:c5:37:27:76:72:e6:87:fc:1b:e7:
                    e8:dc:e0:ad:7c:b4:3f:44:72:7f:dd:d0:30:65:10:
                    72:87:af:62:0e:27:8b:49:08:07:83:ec:23:5c:28:
                    72:aa:cc:3e:fd:b5:bd:3b:93:e2:0d:90:da:fb:ae:
                    c3:02:67:d1:ac:ec:7a:63:c6:d4:29:09:fe:9d:96:
                    1b:d8:b8:76:0d:bf:cf:fe:1d:f6:b0:c1:51:b8:ea:
                    c9:f4:0a:89:9a:1d:93:19:4c:61:bf:c3:ba:5b:13:
                    d1:80:96:f5:86:1e:cd:72:3c:7e:bd:86:cb:96:1d:
                    e2:e5:8b:ea:47:4e:32:aa:8e:c2:f4:c0:d9:3a:09:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:58:24:CF:AA:C2:6C:8D:9A:21:08:E8:1B:D3:F7:4D:74:80:27:CC
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3133382e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:bc:8d:64:a0:13:a7:d5:48:bb:20:40:df:9c:6b:44:4a:b5:
         6d:5b:78:cd:54:a6:f4:fa:ab:14:96:d9:92:5b:72:66:3e:ab:
         aa:ea:f5:39:4c:b7:61:97:c2:3d:9b:84:81:aa:71:db:29:d0:
         e9:db:a1:e5:a0:63:cd:79:b5:ec:0e:ee:57:29:5e:fd:6c:64:
         2e:db:b2:24:6a:12:66:84:8e:ea:80:fb:78:eb:a2:88:1a:79:
         4e:81:4c:59:c6:d3:ef:45:80:2a:49:6f:3b:19:2f:02:5c:3b:
         1a:2d:ef:77:02:21:3e:61:22:52:97:a3:c1:86:23:b5:f7:d6:
         25:e2:fb:1e:c7:ee:b3:4b:1b:3a:b4:58:e8:bd:18:fd:86:bf:
         29:b7:06:59:2a:0d:2d:60:16:32:f9:97:56:4f:1b:a7:2a:23:
         d1:d9:d5:cc:4b:68:1a:f3:ce:8c:69:2c:e7:3d:ff:4a:01:26:
         60:a2:69:d3:d5:7a:44:93:3c:72:de:8b:5b:c7:71:41:2b:e2:
         4c:7c:3e:9a:c0:c8:91:47:d9:ce:c9:01:a9:08:70:fc:cb:c1:
         2c:8b:27:45:40:d4:18:2a:85:bb:ec:00:4e:b0:1b:41:9f:90:
         39:af:e6:a4:d9:f2:9c:aa:e6:6c:ae:0f:c0:bc:c8:bd:ae:8d:
         eb:83:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:02 2025 by rpki-client