Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa
File:                     3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa (raw, json)
Hash identifier:          M1tVQ7QzcpvLa4gxLmdSXd614XstjsDXFF52qQ/HUVQ=
Subject key identifier:   91:9C:15:4E:B5:2A:F3:F0:1A:EF:FA:15:94:DC:02:78:ED:7F:03:64
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       1048844F7123EACED123254FE1B52D6ABD4FBEDA
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa
Signing time:             Mon 13 Oct 2025 02:25:14 +0000
ROA not before:           Mon 13 Oct 2025 02:20:14 +0000
ROA not after:            Mon 12 Oct 2026 02:25:14 +0000
asID:                     270760
IP address blocks:        179.109.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 09:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:48:84:4f:71:23:ea:ce:d1:23:25:4f:e1:b5:2d:6a:bd:4f:be:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Oct 13 02:20:14 2025 GMT
            Not After : Oct 12 02:25:14 2026 GMT
        Subject: CN=919C154EB52AF3F01AEFFA1594DC0278ED7F0364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:8d:3b:78:2d:3c:71:75:dd:45:58:b8:64:
                    ad:24:d7:74:0e:11:db:ba:69:30:4e:b6:e1:ad:6c:
                    c2:10:a0:51:df:94:39:04:43:c2:00:59:ce:49:ad:
                    84:c0:da:fc:3a:0a:fd:43:23:06:eb:91:26:40:60:
                    3e:4c:07:aa:b5:a7:3f:43:ba:92:6b:56:3a:a4:7a:
                    b3:b1:8e:c8:8a:f6:3b:70:7c:34:c5:f1:a8:c9:86:
                    b6:bb:e2:23:c9:df:b8:42:47:63:a6:10:a1:dd:bc:
                    67:df:52:1c:57:fe:c7:3a:ca:6f:b1:65:01:b3:7d:
                    ff:07:b1:60:be:16:8e:bb:83:5b:d6:63:83:70:6c:
                    2e:63:fe:c3:80:e3:7c:97:76:d7:b9:cc:d2:96:25:
                    81:ac:96:29:c4:8e:29:56:83:fb:15:c1:f9:6e:66:
                    c5:7f:15:a7:00:7d:e7:f0:50:65:95:c8:38:0d:8a:
                    5f:52:db:c6:da:0b:d8:fb:fc:25:68:a3:f2:8b:da:
                    18:ef:39:e1:b1:13:bd:aa:3f:4c:6a:fd:9a:86:ec:
                    59:42:b0:e6:e5:ba:bc:c3:d8:e4:79:25:0a:74:ef:
                    1b:57:03:8b:a1:7e:b5:00:56:61:0b:97:20:32:ee:
                    d2:45:64:1c:84:5b:68:9a:9b:90:bf:d6:d2:b3:39:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9C:15:4E:B5:2A:F3:F0:1A:EF:FA:15:94:DC:02:78:ED:7F:03:64
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:ac:50:db:d9:94:fc:28:30:42:74:84:f7:3b:7c:d9:59:
         9d:50:6a:6b:21:c8:8a:96:04:23:ad:87:6d:66:22:44:ea:d1:
         db:72:f1:5a:45:74:95:77:35:de:81:2a:f1:d4:5f:f0:55:98:
         fb:a4:a2:b8:85:b9:b7:74:79:08:5e:6f:67:1c:83:63:77:5a:
         96:8a:9f:cc:c2:ae:1b:d2:7a:44:66:2a:47:be:18:43:5c:bf:
         7c:d8:78:c9:68:45:d5:f6:31:89:8b:26:9f:85:f6:4f:72:4d:
         c6:2d:a4:c4:b4:9b:e8:42:b8:9b:7b:f2:c6:b3:db:54:1b:b5:
         de:d6:fd:55:dd:ab:3d:72:c8:bf:66:10:1c:76:21:d5:fd:91:
         d2:aa:e5:39:bf:96:9a:89:d6:81:24:12:4e:38:b7:97:ec:6f:
         8c:8a:50:3a:ab:7a:5f:e5:57:bb:8e:ad:ae:4f:ad:eb:97:f3:
         de:66:c9:e7:49:62:af:8b:07:26:5e:8e:65:9a:22:6e:c7:c9:
         dd:7f:ec:9e:51:e0:44:44:38:78:82:21:40:85:bc:8f:d0:d1:
         54:aa:a3:64:71:f8:95:16:dc:5c:a6:ac:02:be:ae:44:dd:96:
         89:a0:05:97:bf:e4:95:aa:a3:83:e8:00:a6:fc:5a:f1:4f:71:
         c8:5a:04:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:02:32 2025 by rpki-client