Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32322d3233203d3e20323730353131.roa
File:                     3138372e34392e3138302e302f32322d3233203d3e20323730353131.roa (raw, json)
Hash identifier:          LHb3yyXj/mphjMv5nD+zO1kUEVNS8Sg7L5VPKrjcixI=
Subject key identifier:   62:C0:30:A4:52:C1:58:1E:50:5B:00:A3:72:A5:8C:22:29:17:8D:65
Certificate issuer:       /CN=9CFD748EA2A4CC27224EFD0917AED265979FC2CF
Certificate serial:       2912CA1971691BCAFD7ECE99FEE747A82761FD7D
Authority key identifier: 9C:FD:74:8E:A2:A4:CC:27:22:4E:FD:09:17:AE:D2:65:97:9F:C2:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32322d3233203d3e20323730353131.roa
Signing time:             Fri 17 Oct 2025 19:57:47 +0000
ROA not before:           Fri 17 Oct 2025 19:52:47 +0000
ROA not after:            Fri 16 Oct 2026 19:57:47 +0000
asID:                     270511
IP address blocks:        187.49.180.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.crl
                          rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:12:ca:19:71:69:1b:ca:fd:7e:ce:99:fe:e7:47:a8:27:61:fd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFD748EA2A4CC27224EFD0917AED265979FC2CF
        Validity
            Not Before: Oct 17 19:52:47 2025 GMT
            Not After : Oct 16 19:57:47 2026 GMT
        Subject: CN=62C030A452C1581E505B00A372A58C2229178D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:40:06:a1:07:f6:a2:c2:28:06:d6:bf:9e:
                    b0:ff:b4:56:ac:b7:d2:87:d8:e4:51:f6:b1:f4:0f:
                    10:2f:4e:7f:48:46:d4:65:1b:24:61:b9:33:d7:dd:
                    d9:e1:34:80:ad:a1:ce:68:bf:79:60:12:a3:45:19:
                    31:e2:05:cb:34:88:73:29:9e:60:b3:b3:0d:d7:f0:
                    9c:29:c1:95:3d:f0:f2:2d:0d:f9:c7:8c:c9:b1:8c:
                    5d:99:35:f1:81:c1:64:8e:3b:fa:ba:2e:be:5c:88:
                    c3:84:73:b2:81:65:b2:69:5b:43:e0:5e:be:ce:54:
                    d7:83:7d:e2:71:64:5a:7e:8b:20:f0:9f:40:7b:a4:
                    0e:4d:c3:5f:9b:c0:6b:27:97:c8:7f:35:8e:f3:c2:
                    22:c4:e5:13:1f:3a:78:43:9c:80:fc:cd:0c:b1:58:
                    2c:84:7c:74:7d:da:89:06:55:63:ed:3f:08:52:63:
                    55:a7:c4:1a:03:62:9c:76:7a:4e:d3:1a:f6:17:4a:
                    18:ae:9a:94:97:62:75:ea:41:ad:c4:19:cc:df:94:
                    2b:9c:cb:43:13:96:40:5f:c8:11:b7:b5:68:5a:06:
                    7a:d5:a0:30:db:65:8e:0c:cd:07:75:5f:77:73:98:
                    35:3d:b3:cb:2a:7e:81:29:a4:a0:8e:e9:d8:a4:65:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C0:30:A4:52:C1:58:1E:50:5B:00:A3:72:A5:8C:22:29:17:8D:65
            X509v3 Authority Key Identifier:
                keyid:9C:FD:74:8E:A2:A4:CC:27:22:4E:FD:09:17:AE:D2:65:97:9F:C2:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32322d3233203d3e20323730353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:09:04:b1:7b:24:b7:14:7b:98:71:8c:92:c7:fa:b1:6a:
         3c:14:38:87:33:60:42:53:a7:41:a6:f3:1d:48:7c:c8:13:78:
         cb:5b:8e:05:4d:a5:e2:4f:30:62:03:74:e9:5f:bc:2b:4b:37:
         74:84:66:75:b2:cb:62:16:a5:af:6a:38:33:74:2b:f4:85:c7:
         bf:b2:a9:19:a4:ba:40:a0:5a:ba:39:df:6d:bb:7a:92:0a:8d:
         e8:2b:d0:02:b1:79:9c:28:7e:ca:f1:db:d0:f7:a5:c8:73:f0:
         27:be:49:2b:87:92:20:f9:27:2d:5d:b1:af:74:5a:68:3f:bb:
         99:31:24:a4:48:9c:87:b6:45:7a:ef:f8:c0:6e:6c:75:3a:8d:
         05:e2:cb:ed:22:60:e4:a9:46:41:01:d9:07:d7:e6:a3:97:f2:
         2c:0b:80:61:45:cd:aa:66:63:fb:15:89:66:95:9f:06:40:90:
         89:0b:92:2b:99:12:51:44:9f:fc:8c:1f:1a:2d:13:f8:06:01:
         6d:d7:82:27:76:67:93:6b:88:3b:1b:76:9b:2c:ee:03:b0:6f:
         f7:90:18:6f:8b:41:25:db:47:27:57:63:94:67:63:9d:1f:9c:
         06:41:5c:a5:5a:39:77:5b:a7:13:ce:29:27:94:53:83:8c:d0:
         4e:91:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:47 2025 by rpki-client