Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32322d3232203d3e20323731323430.roa
File:                     3137392e34382e34382e302f32322d3232203d3e20323731323430.roa (raw, json)
Hash identifier:          SWQ45OCRobZkexJDKLkDZ4gp2+ZDq7BI/nv0C4SgyZo=
Subject key identifier:   B3:43:05:81:91:CE:49:78:73:CF:86:63:CA:0A:AD:5C:7B:C0:0A:84
Certificate issuer:       /CN=FAA40B03A41A50E038CADE96AD798F2AFB27B32A
Certificate serial:       7658417C8371BF9C1CCC5C6DB414C27F1E853B6D
Authority key identifier: FA:A4:0B:03:A4:1A:50:E0:38:CA:DE:96:AD:79:8F:2A:FB:27:B3:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32322d3232203d3e20323731323430.roa
Signing time:             Mon 23 Mar 2026 14:02:25 +0000
ROA not before:           Mon 23 Mar 2026 13:57:25 +0000
ROA not after:            Mon 22 Mar 2027 14:02:25 +0000
asID:                     271240
IP address blocks:        179.48.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.crl
                          rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 20:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:58:41:7c:83:71:bf:9c:1c:cc:5c:6d:b4:14:c2:7f:1e:85:3b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA40B03A41A50E038CADE96AD798F2AFB27B32A
        Validity
            Not Before: Mar 23 13:57:25 2026 GMT
            Not After : Mar 22 14:02:25 2027 GMT
        Subject: CN=B343058191CE497873CF8663CA0AAD5C7BC00A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:09:23:7c:6d:c9:50:93:4a:9a:d4:26:94:
                    22:fb:b9:e2:6e:f5:7e:ee:49:9b:1e:a9:96:d3:58:
                    14:14:08:67:eb:d6:5c:36:bb:7b:2b:4f:b6:41:46:
                    6b:ff:0c:c5:91:75:cc:75:fd:9d:86:be:d9:f8:70:
                    15:47:f0:8b:4b:5c:d8:e8:65:df:f6:90:ca:d2:b0:
                    69:16:d4:a2:01:a1:98:a2:82:ba:a6:b7:67:21:33:
                    e4:52:0a:f2:52:e9:24:85:ad:06:43:79:68:30:91:
                    06:b9:93:ef:44:23:7d:35:24:79:28:03:21:d6:5f:
                    29:90:92:af:76:d4:9c:95:02:3c:83:12:c0:87:76:
                    65:50:ca:43:53:a2:d8:46:d1:5c:47:f4:d8:ec:96:
                    9b:b6:33:04:cc:48:91:56:dc:04:1c:ba:c3:cc:b7:
                    5a:73:95:d2:5a:0d:60:b9:b2:2d:9e:ea:00:53:25:
                    22:41:d5:0d:8c:2e:b3:30:63:16:8a:22:7b:32:b7:
                    27:60:f9:34:d0:6a:98:01:8b:eb:c2:3c:43:57:76:
                    32:b0:9c:2c:75:f5:38:30:71:d7:d7:2e:d7:ea:a0:
                    3b:ec:e7:2a:93:01:21:b6:53:0f:5a:fc:2c:76:9e:
                    4e:bb:da:01:6b:68:30:8b:da:c5:a8:5a:01:09:4a:
                    bb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:43:05:81:91:CE:49:78:73:CF:86:63:CA:0A:AD:5C:7B:C0:0A:84
            X509v3 Authority Key Identifier:
                keyid:FA:A4:0B:03:A4:1A:50:E0:38:CA:DE:96:AD:79:8F:2A:FB:27:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32322d3232203d3e20323731323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:57:a0:74:ca:84:ba:73:9f:80:2a:b1:a6:48:96:15:45:
         69:38:2c:e2:44:6b:01:38:55:20:4b:c7:26:79:88:21:9c:1b:
         7d:34:f4:8e:e9:e8:3b:59:a9:7b:02:8f:31:17:b4:69:39:58:
         01:95:66:1a:5f:60:58:ea:b4:13:1e:80:a5:56:2f:6e:48:d9:
         e3:60:06:f5:73:33:66:8a:f1:da:8c:72:22:2a:a9:8c:ac:ae:
         53:86:bd:2b:70:8b:b4:93:d4:0f:c8:dc:5a:8b:0c:26:f0:c5:
         24:bc:fc:d7:c2:85:ec:0c:a7:9d:a5:26:52:38:e7:ff:d0:0f:
         aa:9c:66:f7:e7:0c:9e:81:95:cb:96:79:e3:ba:25:3c:98:b2:
         fc:a6:9b:d0:2a:49:67:55:05:fd:96:d2:af:a2:56:06:f1:8d:
         d2:46:92:cb:a9:36:b4:67:3f:98:23:18:ab:36:a0:66:ec:12:
         14:b4:5e:3c:2d:60:fb:3e:23:48:fe:52:50:43:ba:c1:09:f3:
         8c:7e:59:6b:6f:53:e4:e1:62:91:38:de:8c:60:af:b3:c0:90:
         be:89:22:b2:50:cc:e3:df:fc:cf:4c:2b:f2:42:b1:10:e6:18:
         9f:54:3c:44:6f:7b:93:ed:03:07:c2:34:45:4e:0b:e2:9b:7c:
         fd:2b:29:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdlhBfINxv5wczFxttBTCfx6FO20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFBNDBCMDNBNDFBNTBFMDM4Q0FERTk2QUQ3OThGMkFG
QjI3QjMyQTAeFw0yNjAzMjMxMzU3MjVaFw0yNzAzMjIxNDAyMjVaMDMxMTAvBgNV
BAMTKEIzNDMwNTgxOTFDRTQ5Nzg3M0NGODY2M0NBMEFBRDVDN0JDMDBBODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CQkjfG3JUJNKmtQmlCL7ueJu
9X7uSZseqZbTWBQUCGfr1lw2u3srT7ZBRmv/DMWRdcx1/Z2Gvtn4cBVH8ItLXNjo
Zd/2kMrSsGkW1KIBoZiigrqmt2chM+RSCvJS6SSFrQZDeWgwkQa5k+9EI301JHko
AyHWXymQkq921JyVAjyDEsCHdmVQykNTothG0VxH9Njslpu2MwTMSJFW3AQcusPM
t1pzldJaDWC5si2e6gBTJSJB1Q2MLrMwYxaKInsytydg+TTQapgBi+vCPENXdjKw
nCx19TgwcdfXLtfqoDvs5yqTASG2Uw9a/Cx2nk672gFraDCL2sWoWgEJSrtTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs0MFgZHOSXhzz4ZjygqtXHvACoQwHwYDVR0j
BBgwFoAU+qQLA6QaUOA4yt6WrXmPKvsnsyowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZMQ1hyaUdvSDUzcHZTWjQ4RkxQMmtlUnhocGdVb1k1Q3VaVjNEVTho
b1QvMC9GQUE0MEIwM0E0MUE1MEUwMzhDQURFOTZBRDc5OEYyQUZCMjdCMzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQTQwQjAzQTQxQTUwRTAz
OENBREU5NkFENzk4RjJBRkIyN0IzMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRmTENYcmlHb0g1M3B2U1o0OEZMUDJrZVJ4aHBnVW9ZNUN1WlYzRFU4aG9ULzAv
MzEzNzM5MmUzNDM4MmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMx
MzIzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszAwMA0GCSqGSIb3DQEBCwUAA4IBAQByKlegdMqE
unOfgCqxpkiWFUVpOCziRGsBOFUgS8cmeYghnBt9NPSO6eg7Wal7Ao8xF7RpOVgB
lWYaX2BY6rQTHoClVi9uSNnjYAb1czNmivHajHIiKqmMrK5Thr0rcIu0k9QPyNxa
iwwm8MUkvPzXwoXsDKedpSZSOOf/0A+qnGb35wyegZXLlnnjuiU8mLL8ppvQKkln
VQX9ltKvolYG8Y3SRpLLqTa0Zz+YIxirNqBm7BIUtF48LWD7PiNI/lJQQ7rBCfOM
fllrb1Pk4WKRON6MYK+zwJC+iSKyUMzj3/zPTCvyQrEQ5hifVDxEb3uT7QMHwjRF
Tgvim3z9KymW
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:26 2026 by rpki-client