Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3135382e302f32332d3332203d3e203232333831.roa
File:                     3230312e38372e3135382e302f32332d3332203d3e203232333831.roa (raw, json)
Hash identifier:          dTMPiBdEFATqkq+N7/V+XpW2G4RiEqoG9ky3X1RYf+Q=
Subject key identifier:   70:AB:79:DE:45:34:92:E5:AD:15:31:2A:F7:A5:B0:7E:AF:86:D7:31
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       31E115F845B7219BA3999FE1718C9860C80F8229
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3135382e302f32332d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:20 +0000
ROA not before:           Thu 28 Aug 2025 14:50:20 +0000
ROA not after:            Thu 27 Aug 2026 14:55:20 +0000
asID:                     22381
IP address blocks:        201.87.158.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:15:f8:45:b7:21:9b:a3:99:9f:e1:71:8c:98:60:c8:0f:82:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:20 2025 GMT
            Not After : Aug 27 14:55:20 2026 GMT
        Subject: CN=70AB79DE453492E5AD15312AF7A5B07EAF86D731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:16:0f:81:de:ea:78:9a:f5:6b:26:cb:fa:
                    23:88:bf:d3:fa:09:75:3b:e8:40:02:b3:e6:cd:15:
                    52:b9:d3:12:e2:17:73:02:f4:00:b5:f8:6f:a4:2d:
                    b2:8d:bc:71:ca:ae:96:5f:b5:d6:b6:76:ee:2e:2f:
                    8f:5a:3d:e8:92:31:76:ba:d6:4b:2f:a0:a5:77:a9:
                    f3:2d:7e:77:3a:06:26:5f:e7:93:76:aa:4d:f4:85:
                    9b:ec:71:f6:18:ed:1f:6b:50:1a:bb:8c:0e:ac:a4:
                    76:66:19:84:15:89:b5:7f:b1:7d:a0:42:67:55:a7:
                    44:86:34:65:ce:c5:dc:b8:67:a2:57:89:9a:e9:d1:
                    da:93:90:65:4e:37:80:66:b5:d0:37:e5:d1:15:f6:
                    20:d5:c2:3e:cd:4e:ef:11:dc:99:9e:30:e4:dd:b6:
                    02:1a:47:07:9f:6c:6b:42:e4:6b:03:af:5b:50:c4:
                    01:d8:11:bb:7b:ce:bc:49:4d:bb:b0:70:21:9e:3a:
                    aa:de:8a:b4:72:2d:a3:e3:77:a9:ac:5b:1e:68:5e:
                    2d:f2:8e:dc:50:bb:f5:d0:b4:d9:00:9c:cc:3a:9d:
                    aa:59:84:c5:06:ab:74:71:a4:07:43:4a:14:1d:66:
                    3b:ec:41:2c:f5:dd:94:dd:b8:c0:06:e1:f3:3b:83:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AB:79:DE:45:34:92:E5:AD:15:31:2A:F7:A5:B0:7E:AF:86:D7:31
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230312e38372e3135382e302f32332d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:da:71:24:7c:a7:97:fc:89:9f:a3:21:6e:f5:f7:4c:52:fc:
         ad:a3:00:9f:26:a7:b3:5f:69:74:64:87:f8:8b:f9:ce:f0:72:
         fe:49:4e:10:09:75:0a:71:c7:45:2a:3a:5c:e1:08:e0:85:42:
         3e:2e:0d:dc:60:6f:65:2b:66:5c:45:fd:be:70:41:75:fe:69:
         c8:34:65:62:4f:53:c4:2e:ca:53:21:b2:0a:af:37:4c:c5:2b:
         a8:9d:8e:87:2e:19:9f:65:67:09:f6:a7:40:ee:c3:f8:22:e6:
         b7:ef:3a:6c:ed:6b:e3:4f:3b:96:3c:b9:40:57:f2:1a:0a:8a:
         55:b7:99:67:53:71:f4:25:59:d4:6a:1b:6d:6e:93:6e:55:12:
         43:78:4c:74:85:37:00:72:06:f5:21:96:fd:8d:e0:ef:f5:fa:
         9c:77:92:8e:76:4a:a2:e4:45:0d:a1:61:f4:cf:ab:e3:ae:9b:
         36:ae:ce:ca:8e:33:db:58:23:08:5b:be:81:5d:4d:00:c5:e8:
         c2:bb:f0:42:8f:7e:0d:42:70:0c:27:35:97:26:5b:5c:72:29:
         cf:e7:bb:b8:ae:3a:6e:00:bd:a3:9b:b7:0e:da:9e:b0:9b:68:
         4c:2d:70:3e:a9:34:b3:a2:ac:96:93:d3:be:a6:5d:89:15:8c:
         2e:75:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:42 2025 by rpki-client