Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32332d3234203d3e20323730353131.roa
File:                     3138372e34392e3138302e302f32332d3234203d3e20323730353131.roa (raw, json)
Hash identifier:          vfy+AE5iYu6UR4+P3n60ktu0WuDOEYD2HmhqSJB1i7g=
Subject key identifier:   62:03:D4:D4:92:91:EB:1A:5D:12:14:8C:C0:11:A1:30:EA:51:74:CB
Certificate issuer:       /CN=9CFD748EA2A4CC27224EFD0917AED265979FC2CF
Certificate serial:       45056A17E3F31446523F5FFB54BF0EDD60634717
Authority key identifier: 9C:FD:74:8E:A2:A4:CC:27:22:4E:FD:09:17:AE:D2:65:97:9F:C2:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32332d3234203d3e20323730353131.roa
Signing time:             Fri 17 Oct 2025 19:55:51 +0000
ROA not before:           Fri 17 Oct 2025 19:50:51 +0000
ROA not after:            Fri 16 Oct 2026 19:55:51 +0000
asID:                     270511
IP address blocks:        187.49.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.crl
                          rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:05:6a:17:e3:f3:14:46:52:3f:5f:fb:54:bf:0e:dd:60:63:47:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFD748EA2A4CC27224EFD0917AED265979FC2CF
        Validity
            Not Before: Oct 17 19:50:51 2025 GMT
            Not After : Oct 16 19:55:51 2026 GMT
        Subject: CN=6203D4D49291EB1A5D12148CC011A130EA5174CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:d3:5d:8e:0e:93:88:61:f2:03:43:59:94:
                    b5:0c:ce:84:96:98:d9:02:bb:3d:92:9a:a0:31:f0:
                    b4:d3:5f:70:f0:a4:e3:b3:f9:8a:e3:2c:b8:ca:90:
                    dd:a1:45:0b:d1:a5:8b:9e:7b:7c:27:b6:16:4f:b2:
                    2e:1a:39:e1:fa:e5:f7:0d:0c:c8:14:ff:58:3e:35:
                    7d:b3:b7:9f:15:15:08:cb:d0:d4:ba:0e:cf:ae:48:
                    6b:19:ca:9b:0c:26:ff:98:f4:d9:b8:4b:6d:a1:03:
                    a9:32:07:df:cf:34:df:3b:61:74:17:8e:e8:30:82:
                    50:26:94:b8:d4:34:8a:d4:c6:9a:d3:c6:bb:c1:04:
                    b1:ed:b9:56:56:a5:2c:f9:b2:7c:b3:1e:ce:e0:dd:
                    67:f9:73:da:dd:9c:0e:12:51:fd:f7:61:fc:84:b0:
                    6a:f9:98:f8:1c:d1:38:8c:76:24:1a:9b:25:da:54:
                    a9:81:b6:f8:60:50:20:77:9b:50:5b:00:61:8e:fd:
                    1f:46:68:87:3a:43:06:e8:61:26:66:08:54:f0:8e:
                    7b:37:75:2a:70:35:8a:a3:bc:95:1b:c9:4c:0c:e9:
                    b5:ff:da:2a:8f:16:78:91:e1:e9:df:67:ea:5f:51:
                    7f:4b:5c:50:51:f5:19:38:ae:79:23:39:54:a1:3e:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:03:D4:D4:92:91:EB:1A:5D:12:14:8C:C0:11:A1:30:EA:51:74:CB
            X509v3 Authority Key Identifier:
                keyid:9C:FD:74:8E:A2:A4:CC:27:22:4E:FD:09:17:AE:D2:65:97:9F:C2:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138302e302f32332d3234203d3e20323730353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:31:94:7e:65:3e:67:de:28:ea:15:e6:e5:84:d3:f9:87:22:
         22:8a:f1:61:b2:48:82:ae:fe:60:ec:06:a6:d0:e0:f8:df:08:
         a2:0e:38:7e:33:76:62:94:05:df:94:cf:41:71:fe:b7:3e:b6:
         b9:52:56:0c:6b:f4:40:24:6f:a2:b4:62:6c:1b:33:9a:08:4d:
         c5:e5:2f:9a:6d:11:5e:0e:80:1a:da:8b:54:f6:0f:dc:8b:8c:
         7a:c2:00:ca:63:de:43:3a:7b:05:f6:43:31:25:4b:3c:d1:58:
         71:da:30:d8:91:3b:02:9f:7d:0a:eb:a7:5b:99:d6:37:a3:73:
         b1:c8:85:2d:a6:38:54:6c:13:23:70:fa:29:a4:9a:5c:81:9b:
         02:e2:43:a5:f1:8f:2d:7f:7d:19:4d:08:c8:ae:09:c9:16:a3:
         28:79:4f:ca:e3:a4:b2:25:5b:1a:53:19:18:b9:be:db:8b:c7:
         12:89:34:e9:3c:a0:40:9a:55:80:76:64:89:8d:c8:48:67:d0:
         b8:96:b1:2d:71:6d:3f:cd:98:20:c4:9f:78:19:15:2c:67:47:
         50:5a:59:c3:f0:95:bb:43:6d:14:43:c5:f6:22:7b:e9:f7:fd:
         2d:58:4d:81:93:c7:4e:0b:b3:46:7b:2c:c6:ac:92:c4:25:f0:
         69:ee:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:41 2025 by rpki-client