Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3136382e3139342e3137392e302f32342d3234203d3e20323733343637.roa
File:                     3136382e3139342e3137392e302f32342d3234203d3e20323733343637.roa (raw, json)
Hash identifier:          S5xbZU/1JslLztgi5lZx0s2bvLv0yORzEzjDB9v635k=
Subject key identifier:   7B:D9:34:2E:DA:73:66:07:CF:D3:6C:28:33:BF:0A:92:FA:3F:7B:4F
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       7637A8A1271B386F818C7315FFDCE35D8222B1EE
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3136382e3139342e3137392e302f32342d3234203d3e20323733343637.roa
Signing time:             Fri 03 Oct 2025 18:20:04 +0000
ROA not before:           Fri 03 Oct 2025 18:15:04 +0000
ROA not after:            Fri 02 Oct 2026 18:20:04 +0000
asID:                     273467
IP address blocks:        168.194.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:37:a8:a1:27:1b:38:6f:81:8c:73:15:ff:dc:e3:5d:82:22:b1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Oct  3 18:15:04 2025 GMT
            Not After : Oct  2 18:20:04 2026 GMT
        Subject: CN=7BD9342EDA736607CFD36C2833BF0A92FA3F7B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:7b:89:a4:6f:ac:be:b6:8d:47:ac:6a:dc:
                    80:d7:fc:bf:fc:20:54:eb:7a:47:86:58:e9:d8:fb:
                    31:43:ae:9d:e6:7a:b8:26:63:0a:56:b3:7b:43:e4:
                    ec:f1:76:5b:d8:0d:d8:0c:2e:fc:16:78:a9:0e:a8:
                    07:64:5e:6c:3c:e9:75:c3:aa:51:24:bd:53:1a:40:
                    17:5f:6d:c0:dd:ea:69:3b:34:2d:e8:a4:79:80:22:
                    2b:e7:74:02:9f:97:27:3a:6f:75:15:9a:59:cf:28:
                    aa:84:b4:34:52:ef:a4:75:97:3e:47:07:21:d5:ab:
                    fe:82:3d:c7:0f:77:f7:53:03:df:c8:3c:48:15:92:
                    c5:02:73:e2:79:c8:20:d2:85:9d:ed:fa:f6:7f:bd:
                    a6:83:52:ad:76:3d:ad:89:de:c8:f2:a1:cc:4f:b1:
                    9e:4e:f3:da:66:19:7a:fd:07:65:65:a4:b7:29:c6:
                    5b:08:f9:4b:e9:38:a7:78:18:74:e9:ce:e6:15:77:
                    3d:cf:7f:54:6b:b8:f0:58:18:4d:f0:a0:29:68:6d:
                    91:c1:31:55:ad:ef:8e:e3:f4:e5:98:a8:44:dd:f9:
                    d1:8f:d0:f0:cb:88:f9:9b:1a:82:ef:ab:98:bc:26:
                    0e:d2:fd:87:b5:37:b6:d6:5c:74:f4:5c:79:e2:7a:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:34:2E:DA:73:66:07:CF:D3:6C:28:33:BF:0A:92:FA:3F:7B:4F
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3136382e3139342e3137392e302f32342d3234203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:76:3a:71:cd:e6:a3:e9:7e:00:92:07:bf:4e:10:1f:07:05:
         36:a4:c9:ab:ac:9a:40:31:ef:6d:f9:a5:ce:ca:45:4d:d7:01:
         b4:f8:8a:44:67:b7:99:43:03:8d:cc:73:84:0a:14:2d:9a:f0:
         44:82:94:e0:f4:56:82:f6:36:c5:04:9d:03:a9:23:0a:48:5f:
         40:ef:b0:af:79:6e:6d:d3:00:16:5d:83:23:56:9e:3b:a1:f1:
         8a:21:c1:07:2e:6f:1e:ba:8a:ef:43:86:5e:1e:40:f2:53:76:
         3f:de:9c:e4:7f:3b:93:87:ef:ee:97:ab:94:aa:41:fa:51:08:
         ff:d5:c4:88:77:cd:6f:03:d6:2a:d8:02:39:b0:a9:6a:d4:02:
         59:3e:99:4a:ec:9c:eb:e0:26:98:bd:cd:6b:a7:4c:b6:15:79:
         05:ff:0d:e3:0d:05:63:e6:0b:ad:3f:c9:2d:10:dd:44:23:ab:
         bb:a3:56:fa:f1:76:b8:e9:c7:58:79:36:19:b1:58:73:2b:d7:
         fa:98:ff:44:ac:33:0a:7d:44:e8:99:21:de:ec:9b:0f:b9:71:
         2a:05:7e:ab:fc:2c:d0:73:c5:bc:8e:ed:8f:ae:f2:87:95:61:
         46:a8:f9:cf:e2:0c:16:7b:7d:e1:2c:82:36:74:9a:fe:36:4c:
         e4:ea:42:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:08 2025 by rpki-client