Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3134332e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          cT1J9880LAQ4NXVU7qjkuKKqTNE/S29b70fxMgVqbWM=
Subject key identifier:   11:F0:F1:10:20:0C:D6:10:93:B6:18:2D:7A:DC:C8:A9:AC:90:72:80
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       741F034896F795B52E1BA861E0BA966B629C1389
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:19 +0000
ROA not before:           Thu 28 Aug 2025 14:50:19 +0000
ROA not after:            Thu 27 Aug 2026 14:55:19 +0000
asID:                     22381
IP address blocks:        201.87.143.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1f:03:48:96:f7:95:b5:2e:1b:a8:61:e0:ba:96:6b:62:9c:13:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:19 2025 GMT
            Not After : Aug 27 14:55:19 2026 GMT
        Subject: CN=11F0F110200CD61093B6182D7ADCC8A9AC907280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:0b:87:fe:21:4b:fa:76:ac:b8:f3:f2:3e:
                    d7:30:f7:3c:f5:47:29:00:59:f5:fd:34:30:5d:99:
                    b1:d0:c4:b2:eb:3f:99:48:78:18:47:8b:d9:46:02:
                    19:8a:81:92:94:c8:82:e9:fa:04:40:1b:01:ca:36:
                    45:5e:06:fc:79:7f:1d:a6:e1:41:fe:60:cc:c1:8a:
                    37:54:d0:db:65:8a:d6:33:b8:37:8e:2e:42:60:cb:
                    09:44:08:5b:8d:35:10:8b:8c:18:5a:6c:9f:64:36:
                    28:97:23:f3:77:08:89:4f:f5:40:e5:28:bd:74:e5:
                    fa:d8:c8:f9:62:a2:68:f2:81:bf:02:b6:ea:d5:e5:
                    5c:d0:98:d0:87:ed:32:82:52:e1:03:0b:8c:2e:57:
                    16:0f:c7:31:c1:72:12:44:6c:73:c9:c4:6d:22:e8:
                    dd:db:56:d8:dc:bd:a7:7f:22:40:fa:ad:8f:aa:70:
                    91:2f:e4:b7:e4:5d:20:d8:78:3d:27:47:f0:6a:11:
                    35:10:bf:25:d9:7e:cf:6e:62:b0:4d:9d:b6:f9:1e:
                    fa:2c:53:7a:1e:1a:96:b1:a7:da:f6:58:95:f8:bd:
                    aa:99:18:4c:da:c3:de:78:f3:b6:97:6c:10:c0:08:
                    5f:ca:3d:5b:44:4b:c6:58:9e:ec:21:9b:e4:20:e2:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F0:F1:10:20:0C:D6:10:93:B6:18:2D:7A:DC:C8:A9:AC:90:72:80
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3134332e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:75:c6:0a:58:57:b5:d9:a6:0d:ed:74:77:34:2d:1d:76:b7:
         44:55:4f:ac:26:f3:5c:fa:f4:38:d9:30:97:8e:c7:ab:0c:a8:
         d8:bc:5a:63:4b:1a:3c:91:6b:91:7a:4e:b1:59:9a:8c:d7:c0:
         0f:b9:39:28:ac:e3:bc:c8:05:98:a7:c7:28:0c:41:80:d2:ed:
         67:fa:b4:84:e1:01:bc:34:ae:8a:14:c4:98:fd:f6:c1:e7:d4:
         7f:0c:56:29:c7:9d:75:35:41:d6:34:2c:f5:db:f0:f0:d9:4e:
         90:33:9b:96:69:ec:03:88:03:19:bd:ae:68:10:55:0f:5b:48:
         8d:dc:30:bc:5d:c5:b9:00:bf:f1:ed:55:4c:51:c8:f2:ed:5f:
         b4:bc:2e:86:62:b2:e8:3a:63:ec:e2:a3:5e:71:02:cd:aa:c4:
         52:92:46:70:fc:93:d1:f6:b4:41:d6:d4:cd:e3:45:bc:b3:20:
         74:cc:77:d7:f6:ab:18:73:dc:3e:5c:82:62:64:3a:6a:8f:0a:
         e4:5f:fe:aa:f6:88:f5:de:b6:98:7d:a8:0b:00:9a:20:50:22:
         fe:12:46:bf:9f:f1:be:5d:fb:3e:86:a9:90:0c:d6:5d:a2:08:
         5d:08:81:2c:ad:f2:72:15:ef:cd:de:66:b5:32:b0:25:d1:79:
         c4:99:0f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:46 2025 by rpki-client