Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32332d3233203d3e20323731373337.roa
File:                     3137392e3132352e31322e302f32332d3233203d3e20323731373337.roa (raw, json)
Hash identifier:          p7ld3ZFuopNq1thXxHfHH3Ll7n3fPGGgcNQbgfYXl/E=
Subject key identifier:   EB:68:DA:3C:46:7A:4B:2E:D7:DE:92:B4:74:9E:86:41:E5:29:7A:1A
Certificate issuer:       /CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
Certificate serial:       4CEA325AC055A869B139D0823F7378EC7BC4420F
Authority key identifier: 92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32332d3233203d3e20323731373337.roa
Signing time:             Wed 22 Jul 2026 23:36:07 +0000
ROA not before:           Wed 22 Jul 2026 23:31:07 +0000
ROA not after:            Wed 21 Jul 2027 23:36:07 +0000
asID:                     271737
IP address blocks:        179.125.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl
                          rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ea:32:5a:c0:55:a8:69:b1:39:d0:82:3f:73:78:ec:7b:c4:42:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
        Validity
            Not Before: Jul 22 23:31:07 2026 GMT
            Not After : Jul 21 23:36:07 2027 GMT
        Subject: CN=EB68DA3C467A4B2ED7DE92B4749E8641E5297A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:59:13:01:8b:8a:ff:06:0d:bf:ce:f8:b2:
                    c7:36:36:a0:b8:46:10:26:5e:14:8a:de:55:b3:71:
                    e0:3a:97:c1:ea:87:51:2d:64:da:58:d9:fb:be:39:
                    47:53:ab:94:aa:d1:f0:64:27:2a:8c:31:87:30:6a:
                    9d:23:09:49:36:35:f7:2f:ff:89:00:77:57:e4:8b:
                    fe:f0:4b:ab:07:91:a3:53:94:da:b3:8b:52:86:c5:
                    c6:36:e4:65:f4:79:2a:f8:b2:64:ee:5e:59:86:8c:
                    08:8f:31:2a:ad:94:a2:81:36:40:30:77:8b:6c:25:
                    00:dc:f3:25:b4:e4:c0:79:c4:7e:e1:01:d8:f4:bf:
                    44:2e:9a:5a:46:02:d0:65:18:58:9e:a0:dc:ac:78:
                    47:64:b9:ee:fd:9d:2a:8b:31:2d:13:bc:62:58:56:
                    7e:a5:12:9d:25:4e:b4:a3:d0:62:7e:83:3a:fc:39:
                    1f:36:c6:f4:51:3d:f6:ba:c8:1f:98:dc:d8:2d:ef:
                    3f:7d:dd:56:b8:7d:12:82:ae:d9:ee:67:16:37:71:
                    50:11:75:4a:80:78:e7:c1:60:29:80:c0:18:a1:71:
                    5b:e5:46:94:3c:8c:96:7e:bc:53:34:c2:e9:4c:41:
                    d4:7b:de:d1:9d:ec:52:a7:de:49:ec:9a:ad:74:09:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:DA:3C:46:7A:4B:2E:D7:DE:92:B4:74:9E:86:41:E5:29:7A:1A
            X509v3 Authority Key Identifier:
                keyid:92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32332d3233203d3e20323731373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:1e:9d:ff:a5:8a:e4:10:64:22:43:ff:57:f6:41:a3:27:7a:
         e1:8a:09:22:32:96:50:6d:ec:29:e1:3e:a0:d3:81:0a:56:bb:
         05:76:34:28:7e:5a:eb:f5:fa:27:97:25:10:20:e5:25:f9:7e:
         8c:b0:3c:7e:a4:28:bb:30:97:74:d6:bb:f8:d1:0b:72:de:d0:
         7e:27:62:09:84:ed:c3:69:97:8a:e0:ac:2d:1b:f2:7d:7d:4f:
         6b:5a:18:89:c3:ef:a6:ad:69:1f:b2:c8:9e:ad:db:65:0b:b0:
         c8:22:0a:32:d7:b1:f1:d6:08:87:61:94:46:70:e6:2d:fb:5f:
         b1:10:0c:8d:07:ef:9e:96:f9:27:3e:f2:87:dd:68:41:2b:a0:
         5d:7f:73:12:ba:15:b0:31:84:16:8d:f4:04:85:8e:08:18:84:
         2c:39:06:41:62:d1:6d:22:a9:1d:56:c7:e4:56:02:6d:16:00:
         e4:6a:67:38:9c:7e:88:96:23:57:d0:47:56:93:d2:9b:35:48:
         d2:7f:c2:c9:b2:02:9c:0f:de:b2:c5:ea:f6:f2:76:9f:d0:28:
         54:99:66:1e:4a:c4:96:89:4e:28:74:b9:d5:29:96:ed:63:68:
         8b:2d:a6:99:38:07:48:eb:9e:68:5d:59:05:9b:8a:e8:85:32:
         58:8a:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:32:44 2026 by rpki-client