Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e32342e302f32312d3231203d3e203237363933.roa
File:                     3137392e3130392e32342e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          gVbKspbV1ybyhWI5qUFgiSUYVGroKZssz83ec8q0N1w=
Subject key identifier:   83:CF:14:1A:EC:40:84:1A:BF:DA:8C:DD:8C:4F:3E:D5:4D:C8:D5:B6
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       7FD3FCF238B9062596A837823634AD1D6A6A1516
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e32342e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:34 +0000
ROA not before:           Tue 23 Sep 2025 15:14:34 +0000
ROA not after:            Tue 22 Sep 2026 15:19:34 +0000
asID:                     27693
IP address blocks:        179.109.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d3:fc:f2:38:b9:06:25:96:a8:37:82:36:34:ad:1d:6a:6a:15:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:34 2025 GMT
            Not After : Sep 22 15:19:34 2026 GMT
        Subject: CN=83CF141AEC40841ABFDA8CDD8C4F3ED54DC8D5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:db:e2:92:dc:2d:62:b3:d2:12:d7:26:0e:
                    75:6d:62:5b:6b:d4:62:a4:39:09:b4:56:65:76:6a:
                    34:0a:3f:7d:7f:a4:bc:db:8c:59:f9:a7:9a:49:13:
                    a7:94:d7:1a:7e:3f:7d:37:f7:93:67:aa:d4:6e:6c:
                    c7:33:d3:98:76:25:4f:7d:3c:80:0d:1b:bc:1c:ea:
                    cc:6f:05:8a:6a:9d:1c:b0:c7:fa:5b:50:bd:91:34:
                    b3:95:6d:5f:51:93:82:72:42:0e:f4:3e:c1:33:b3:
                    ca:04:a1:80:36:e2:d2:23:1b:b3:7e:c1:04:0d:41:
                    97:d0:17:f7:b6:04:46:fa:16:f1:59:1c:73:00:7b:
                    1c:36:9e:79:71:73:3a:eb:70:bd:a4:7a:ea:df:fe:
                    72:54:09:09:3e:ff:e0:8a:29:3d:f2:35:85:4f:4b:
                    aa:93:7f:28:90:98:85:13:ce:85:e6:c4:d8:8e:3f:
                    c1:f1:17:8e:49:2a:e7:58:99:2e:cd:d0:cf:a8:8e:
                    e9:6a:af:dd:3f:e8:75:ae:2f:5a:14:c9:ca:73:1c:
                    27:83:01:a9:01:a6:e1:33:0b:01:8c:2d:02:27:93:
                    ec:53:2d:c4:69:a8:19:c9:b3:c0:4a:10:9d:11:40:
                    10:00:81:f4:0b:61:87:a5:63:2e:33:4e:d3:09:93:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CF:14:1A:EC:40:84:1A:BF:DA:8C:DD:8C:4F:3E:D5:4D:C8:D5:B6
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e32342e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:c4:63:14:86:07:88:35:9a:48:1e:23:a3:36:c1:63:d1:
         a2:58:95:ca:13:15:c0:88:f9:d6:ee:5c:55:cb:f2:b6:27:3f:
         dd:15:5e:20:c6:f7:40:77:36:7b:ab:bb:29:87:8d:5c:fc:b9:
         7a:e3:dd:bc:9f:46:01:3a:60:4c:bb:3c:33:42:87:d4:ac:1e:
         52:02:27:64:01:78:61:85:3d:2e:1a:15:00:3a:32:d5:85:7d:
         1f:2d:04:8c:a8:5b:6c:33:75:82:b7:44:88:e1:09:c9:18:2d:
         9e:89:fa:ca:f2:12:d0:18:94:1b:3a:17:7b:fd:fe:f4:5a:8a:
         e2:ae:06:ea:a2:7c:40:26:0e:95:c9:f8:0e:bf:62:18:f8:4e:
         4c:d7:96:57:b5:46:73:0a:c4:4d:d0:52:08:a5:ab:67:b2:44:
         9c:cf:72:2e:d5:16:c3:cf:58:f2:20:40:cf:06:95:80:3f:1c:
         c3:da:45:9f:a7:f1:88:a3:6e:bb:12:75:ad:b8:cd:cc:93:e9:
         6b:7d:0f:8f:4f:e5:f1:0e:58:3f:6d:4f:4a:f4:a5:20:8b:c1:
         6c:62:47:b5:46:66:19:13:91:88:d8:db:16:b5:6c:5a:f6:67:
         11:ed:bd:11:44:d1:63:5d:1d:0e:ec:2f:39:2c:0c:50:2a:61:
         3b:19:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:20 2025 by rpki-client