Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3135312e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3135312e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          wqZ0hVNdZGoZaFJhbWjvEI4TUWFmEJRCugtyCoHvV50=
Subject key identifier:   5B:79:B1:50:AE:3A:FD:5C:FE:88:39:EC:DB:75:33:89:1E:3B:86:22
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       77130498ACFF06E5505B0993F07CE704694F55EA
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3135312e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:26 +0000
ROA not before:           Thu 28 Aug 2025 14:50:26 +0000
ROA not after:            Thu 27 Aug 2026 14:55:26 +0000
asID:                     22381
IP address blocks:        201.87.151.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:13:04:98:ac:ff:06:e5:50:5b:09:93:f0:7c:e7:04:69:4f:55:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:26 2025 GMT
            Not After : Aug 27 14:55:26 2026 GMT
        Subject: CN=5B79B150AE3AFD5CFE8839ECDB7533891E3B8622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:44:81:3a:91:44:87:6a:bd:c5:e6:92:12:
                    43:cf:25:53:3a:df:66:50:60:54:a4:9a:b7:ad:a1:
                    bb:61:de:3d:bd:0b:43:cb:7e:25:7f:54:da:28:c4:
                    8d:61:be:70:88:df:46:15:32:b5:9d:43:74:11:51:
                    a3:5c:56:7d:c8:25:08:70:0f:c9:85:67:7b:aa:8e:
                    51:ad:3f:a6:60:de:3c:b5:04:d5:2d:c6:35:a4:57:
                    a2:5e:41:8f:1d:13:0d:0f:b1:81:59:4b:97:55:e8:
                    4a:a6:53:a8:0e:ef:04:99:7e:1e:2b:86:d1:c4:a0:
                    9f:55:21:d7:e0:4c:92:90:33:e2:01:01:c8:e3:17:
                    60:bb:e9:6b:90:08:a5:37:d4:a9:fc:d2:d7:a7:e2:
                    c3:55:7d:23:b2:07:6c:7c:f0:e1:aa:ab:01:ea:c8:
                    5c:90:c9:6c:e0:58:95:b2:79:8e:6f:a7:d4:15:81:
                    21:90:a7:67:2f:7e:fb:bd:07:64:83:96:f4:16:de:
                    8b:89:3a:46:0e:60:18:bc:f7:14:e1:04:ef:76:65:
                    41:31:78:25:e3:95:ca:05:df:be:8d:99:13:32:ff:
                    f5:30:48:d4:98:79:46:50:c8:1e:df:9e:dc:0e:fa:
                    36:08:bb:77:b6:dc:ce:a4:f0:73:a2:23:ad:9f:7f:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:79:B1:50:AE:3A:FD:5C:FE:88:39:EC:DB:75:33:89:1E:3B:86:22
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3135312e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:aa:f1:15:9f:c9:74:5b:4b:43:2f:3a:15:5a:29:22:a7:49:
         23:ba:c8:ec:b7:ae:a7:f5:29:01:a1:ed:ac:cd:50:4b:85:88:
         94:26:ce:e9:9f:27:85:8a:f8:fd:ce:6a:1c:2c:ce:a7:92:41:
         c5:96:8f:f0:65:ae:05:3c:a2:ca:d7:b6:31:f8:b4:4f:16:13:
         3c:60:6e:9a:25:6c:17:79:29:8c:33:f4:db:76:06:9c:dd:07:
         3e:20:2d:c9:eb:dd:61:f7:72:2d:de:d3:a8:28:25:63:b6:ab:
         b0:69:04:18:07:66:27:fc:3b:e5:57:c2:1a:c3:aa:84:61:f6:
         25:0f:59:f4:b6:4d:a9:38:c2:24:6e:e5:ad:e7:2c:4b:83:5d:
         9b:98:07:3d:fa:e1:21:23:ee:42:08:98:48:08:19:76:3a:90:
         cf:a4:23:32:de:1c:ac:ea:47:f6:52:32:70:f9:83:fd:34:43:
         f0:1a:df:29:b2:a5:ac:b8:34:7b:9d:62:d3:82:78:b4:c9:bf:
         4d:ae:b5:50:43:78:53:c1:fe:08:18:6f:da:a6:40:98:31:90:
         98:02:d5:36:f5:6d:2b:73:4f:15:cc:8f:85:6b:d0:15:67:67:
         a4:f5:ae:c7:b0:75:e2:30:f7:2e:1c:14:ec:71:f5:9e:a7:d5:
         73:00:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:13:37 2025 by rpki-client