Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa
File:                     3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa (raw, json)
Hash identifier:          7B5HkzdmCqnYjp1sz15O19ZaoYrrvTx3FP5n9KbNz8k=
Subject key identifier:   BA:66:BA:40:61:66:98:37:E2:1B:5E:11:2E:76:E5:10:7F:3C:7A:C3
Certificate issuer:       /CN=70283050DD72A7A70DA44A0C786C2D36C246420E
Certificate serial:       427F58CAA81D857DB937E49E731BE5EE9A2FCE6A
Authority key identifier: 70:28:30:50:DD:72:A7:A7:0D:A4:4A:0C:78:6C:2D:36:C2:46:42:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa
Signing time:             Mon 05 Oct 2026 01:28:41 +0000
ROA not before:           Mon 05 Oct 2026 01:23:41 +0000
ROA not after:            Mon 04 Oct 2027 01:28:41 +0000
asID:                     271215
IP address blocks:        179.48.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.crl
                          rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 19:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7f:58:ca:a8:1d:85:7d:b9:37:e4:9e:73:1b:e5:ee:9a:2f:ce:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70283050DD72A7A70DA44A0C786C2D36C246420E
        Validity
            Not Before: Oct  5 01:23:41 2026 GMT
            Not After : Oct  4 01:28:41 2027 GMT
        Subject: CN=BA66BA4061669837E21B5E112E76E5107F3C7AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:0f:75:24:7b:c4:8e:24:79:34:56:d4:7f:
                    81:73:c4:25:1a:fd:1c:3f:2f:18:0d:15:63:93:72:
                    5d:44:f0:cb:e9:f8:3a:95:31:f0:e1:bf:39:af:ca:
                    fc:c5:bd:58:d9:a8:de:5d:5d:3a:15:bd:84:a9:e1:
                    a0:d4:c9:c6:ea:d5:32:58:60:3b:cc:5d:46:09:3a:
                    06:00:81:8c:33:90:b9:a8:42:84:28:a1:3f:d8:e6:
                    f8:ad:94:86:46:58:fa:59:82:09:9e:17:19:1f:51:
                    4b:94:25:2e:70:cc:d5:2b:a6:79:9b:a9:43:65:2e:
                    31:1c:de:9d:8c:c4:4a:e9:6a:c9:b1:8c:17:e6:9d:
                    72:d7:e1:0f:e3:93:79:01:61:7f:86:21:60:39:19:
                    da:21:7d:35:83:2b:a0:6e:0d:1a:64:74:26:a4:7c:
                    b7:1c:da:20:82:98:a1:f3:51:ac:30:17:b4:aa:2e:
                    23:29:e1:91:9e:6b:e0:29:b5:d1:ec:88:b1:81:50:
                    45:e3:cf:45:40:2c:c8:fc:99:64:67:a4:4f:ba:84:
                    3f:64:21:b1:77:4c:f6:ce:90:5f:10:a1:36:1e:2f:
                    d4:af:c1:64:7f:70:d5:0f:66:1c:7f:cc:a6:a7:90:
                    64:07:f8:18:d7:e1:49:cf:2b:a7:c1:2a:7b:e6:21:
                    12:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:66:BA:40:61:66:98:37:E2:1B:5E:11:2E:76:E5:10:7F:3C:7A:C3
            X509v3 Authority Key Identifier:
                keyid:70:28:30:50:DD:72:A7:A7:0D:A4:4A:0C:78:6C:2D:36:C2:46:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:0b:39:7e:85:90:cb:d7:9b:44:cd:97:d5:19:71:c4:7a:3e:
         8f:3d:e6:20:fb:15:07:ba:74:2b:63:27:86:68:9c:9f:4f:98:
         61:fe:12:b2:70:c1:50:c8:72:9c:5f:40:d9:ee:ca:8f:26:b5:
         ec:09:8c:b2:da:fa:c7:c9:ec:e0:80:cc:70:1c:c2:d0:7d:56:
         56:93:7f:cb:3f:50:2c:0b:c7:ff:4c:45:0d:cd:ca:1d:77:c6:
         d2:b0:37:f2:3b:ac:35:7f:52:e6:ac:5c:ba:fd:90:cc:a3:4b:
         98:f8:2d:5b:3d:da:15:93:d0:ad:9c:b2:96:37:cb:f5:17:99:
         37:b7:34:85:f9:5e:34:27:a8:fc:89:26:63:45:47:d6:df:82:
         4d:36:15:ec:6b:f1:07:07:5a:43:00:cf:b6:a5:b6:72:8a:fe:
         19:01:6d:ee:9f:d1:1b:a2:bc:f7:33:e8:9b:cd:8e:a2:49:b4:
         b8:15:fe:2f:5d:db:94:7d:06:8f:99:d2:09:a2:02:23:7c:c2:
         87:0d:8c:18:d7:9e:7a:37:01:2d:c6:11:c6:b7:40:4f:2b:c4:
         27:28:9a:f9:1c:d5:67:71:87:c4:8c:b6:d0:c8:0a:29:34:3b:
         0d:f6:58:0d:a2:e6:6d:95:e4:90:23:6d:76:e9:13:09:db:a1:
         14:1f:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:55:11 2026 by rpki-client