Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
File:                     3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa (raw, json)
Hash identifier:          EwvXTVnsz9YFihXAb9fBUixRVdxcgCpW7BLTODhcHok=
Subject key identifier:   E2:C7:9F:C9:34:0A:AB:4F:CC:86:EE:FE:B1:00:D4:15:AF:D7:1E:4C
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       16AEEDB5683285EB70E2C4C9E4169730F3D90243
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
Signing time:             Sat 18 Oct 2025 23:01:02 +0000
ROA not before:           Sat 18 Oct 2025 22:56:02 +0000
ROA not after:            Sat 17 Oct 2026 23:01:02 +0000
asID:                     28270
IP address blocks:        179.191.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ae:ed:b5:68:32:85:eb:70:e2:c4:c9:e4:16:97:30:f3:d9:02:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:02 2025 GMT
            Not After : Oct 17 23:01:02 2026 GMT
        Subject: CN=E2C79FC9340AAB4FCC86EEFEB100D415AFD71E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:f1:ba:72:6e:05:59:a7:a5:78:f6:8c:41:
                    b0:e5:23:b2:b0:8e:9a:3c:b3:27:aa:6f:26:ec:9f:
                    de:b5:cb:28:94:1f:c4:0d:7e:41:33:7f:6b:9a:ce:
                    62:e5:b8:02:53:8c:54:db:0f:95:8a:54:e0:1a:93:
                    e7:29:35:7a:03:5e:ef:33:0d:17:2f:1a:3d:8c:72:
                    c6:11:ce:36:f0:6e:5d:e6:ab:14:ce:d4:78:b3:a8:
                    ce:14:11:89:d8:e3:25:d7:9a:e4:82:3b:9a:72:ce:
                    58:d0:15:df:5d:52:63:d1:1a:58:9a:49:94:fd:6d:
                    f1:14:78:95:92:d5:55:cd:36:86:5e:cb:ea:8a:4f:
                    2f:69:05:fc:b5:13:09:bc:64:51:0d:f2:88:62:5b:
                    63:33:4e:13:80:ad:d3:27:a5:f7:7c:dc:77:24:1b:
                    58:ae:26:d1:c9:84:46:06:69:ad:91:b4:33:dc:53:
                    81:91:fc:c8:60:ff:a2:83:08:f6:a5:87:16:8b:7c:
                    59:2e:20:0b:22:56:a4:d7:87:f8:a5:c2:4c:d7:b2:
                    36:ca:87:1a:0e:ee:3e:9f:74:8f:96:d5:2b:28:f7:
                    77:94:26:06:59:1e:ce:2d:3e:fd:44:0b:46:f1:33:
                    fe:66:17:01:a3:c2:88:0f:b4:6a:4c:78:3d:3b:a3:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C7:9F:C9:34:0A:AB:4F:CC:86:EE:FE:B1:00:D4:15:AF:D7:1E:4C
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:bc:f0:a0:ea:c5:1a:9a:32:83:9e:ed:61:02:11:09:a3:
         d5:0f:80:42:50:26:4d:be:84:09:2d:bb:a5:bc:be:e2:5b:d5:
         c5:af:03:7e:79:e8:a4:1c:44:02:6e:3e:fd:a7:49:7b:35:cc:
         cf:69:ce:fa:00:89:a7:c1:ec:5f:ac:8a:4f:4e:a0:86:4a:fd:
         f0:2c:17:4e:5d:6c:07:de:db:85:22:53:60:25:93:ac:4e:8c:
         61:76:00:a5:00:c2:89:b4:5f:e5:6a:70:c5:2e:37:0b:37:4d:
         54:af:3f:1f:91:46:8f:8e:ac:34:07:3b:c2:67:9a:35:f0:17:
         c9:17:ff:c4:30:7a:b7:c8:95:44:a1:a0:2a:9c:94:c6:fe:4a:
         7c:82:3a:68:23:52:91:6f:b7:a4:06:28:7e:94:ac:2d:8d:fe:
         81:9f:bd:2c:9a:cb:6e:4c:38:65:b8:9e:3f:8c:b2:39:55:c6:
         52:33:93:42:b3:a2:b6:bd:80:37:ad:13:6c:dd:e4:31:89:45:
         3f:2b:91:a3:f4:21:a5:92:9e:2a:81:fc:a3:6b:0c:70:30:e0:
         62:43:27:0d:16:ae:c0:c2:fe:a0:c0:f2:a5:6a:54:7e:a7:56:
         39:91:9d:a7:5d:ac:c2:51:f0:5a:72:91:b4:ae:31:b5:6a:79:
         50:08:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:20 2025 by rpki-client