Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa
File:                     3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa (raw, json)
Hash identifier:          r3lESTgSjPftjt/xWbhG1q0aaTbxFJoQSTw4QaR9vTA=
Subject key identifier:   8B:50:A7:5C:46:1A:D5:3A:6F:49:DC:2D:6C:76:F1:7F:4B:2C:B6:95
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       2E9E23A61E7C744CA8AE12A4D06E60527D361D71
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa
Signing time:             Mon 13 Oct 2025 02:25:13 +0000
ROA not before:           Mon 13 Oct 2025 02:20:13 +0000
ROA not after:            Mon 12 Oct 2026 02:25:13 +0000
asID:                     270760
IP address blocks:        179.109.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 09:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9e:23:a6:1e:7c:74:4c:a8:ae:12:a4:d0:6e:60:52:7d:36:1d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Oct 13 02:20:13 2025 GMT
            Not After : Oct 12 02:25:13 2026 GMT
        Subject: CN=8B50A75C461AD53A6F49DC2D6C76F17F4B2CB695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:21:15:6c:79:c0:d3:10:5f:80:7e:b4:5c:02:
                    30:9d:46:7e:25:b5:43:e0:7e:b2:91:6e:b3:75:65:
                    cd:d0:79:e8:46:1f:ee:14:59:9d:4c:f0:53:2a:a2:
                    92:bb:3b:35:a8:e7:eb:58:e2:a6:1a:bd:ad:0d:80:
                    e9:3b:ed:35:3e:1d:3a:dc:b9:6b:86:2e:5d:fd:08:
                    14:2a:5a:5e:2d:97:db:7c:a8:32:f3:a8:7e:6a:51:
                    28:be:18:00:c1:21:b4:14:b4:fb:c8:0e:4d:03:e4:
                    3d:2e:56:6d:2b:f3:4b:9a:46:c0:f7:84:f8:c9:ca:
                    71:85:e7:07:46:de:0f:42:d1:96:9e:95:f4:d1:3b:
                    b9:a3:4a:21:be:5b:5f:ee:81:66:4b:b7:67:17:a3:
                    4f:26:f4:23:d6:11:f8:6f:d9:b1:25:a9:8e:51:bd:
                    0a:8d:b3:52:ed:b5:b8:f6:90:12:f7:56:e7:98:63:
                    61:32:b7:24:23:f9:09:a9:3b:76:eb:7c:6b:4a:1d:
                    bc:fd:c7:7f:38:0e:2d:82:f8:36:3f:6b:f6:77:08:
                    a3:6c:48:48:83:1a:02:73:bd:ec:30:a0:6a:dc:97:
                    b9:ab:60:03:bb:75:46:0e:c2:b1:3e:09:e6:e7:16:
                    cf:e8:90:f1:27:5c:17:64:0d:05:77:b7:90:d8:62:
                    22:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:A7:5C:46:1A:D5:3A:6F:49:DC:2D:6C:76:F1:7F:4B:2C:B6:95
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:af:52:25:73:49:9a:50:da:3e:37:ae:3f:a1:2a:3d:80:2d:
         e1:ac:6e:c8:9b:57:00:3d:12:dc:fd:d3:01:ef:21:0d:f8:7a:
         ca:90:c7:63:07:a2:1a:e9:ba:0f:11:32:88:c2:61:74:91:e4:
         61:55:1e:8e:76:a6:d1:2b:50:47:f2:72:7a:42:fd:b7:c9:e9:
         5f:1c:2b:d6:a6:ee:8b:ad:a8:48:d1:8b:7c:73:e0:dc:45:7b:
         45:f5:3d:1e:70:65:44:ed:2c:29:76:9d:34:2c:ce:c5:40:99:
         cc:90:b0:89:3e:85:b6:4e:3d:38:36:c2:86:8e:07:41:cd:fa:
         5d:2a:58:80:ec:3e:0c:86:ad:6a:55:99:03:a0:67:84:0d:fb:
         b3:12:97:b5:06:d6:ce:c4:e9:78:25:47:47:fc:df:5f:c2:35:
         e9:aa:06:c9:41:31:67:cc:b2:2c:4f:69:22:ce:85:45:5d:43:
         35:ee:4a:b4:e5:0d:2d:a1:9f:9f:11:87:90:aa:ac:d0:11:ed:
         ba:17:2e:1f:13:77:ee:0f:a4:20:ec:79:b9:fc:1b:f9:69:6f:
         19:65:ef:c8:9b:4b:cb:cb:e3:f1:24:36:e5:18:4d:53:b9:ef:
         70:5d:73:b9:5d:c3:d5:73:c4:23:df:f5:53:6a:01:bf:5e:ec:
         e2:8e:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:02:33 2025 by rpki-client