Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/3137392e34392e38302e302f32332d3234203d3e20323731333934.roa
File:                     3137392e34392e38302e302f32332d3234203d3e20323731333934.roa (raw, json)
Hash identifier:          GYSfMdIJgrs3ZbkaqRtcXgLBW5PEhr0QLq9H3n1FhC0=
Subject key identifier:   D5:5B:BD:F3:CA:83:59:05:41:27:94:8D:18:01:1B:10:D4:7E:61:CF
Certificate issuer:       /CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Certificate serial:       59FA16C4CDF14759BAAC94B3ADC9C6986BA8BEE9
Authority key identifier: DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/3137392e34392e38302e302f32332d3234203d3e20323731333934.roa
Signing time:             Mon 22 Sep 2025 15:58:46 +0000
ROA not before:           Mon 22 Sep 2025 15:53:46 +0000
ROA not after:            Mon 21 Sep 2026 15:58:46 +0000
asID:                     271394
IP address blocks:        179.49.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl
                          rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fa:16:c4:cd:f1:47:59:ba:ac:94:b3:ad:c9:c6:98:6b:a8:be:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
        Validity
            Not Before: Sep 22 15:53:46 2025 GMT
            Not After : Sep 21 15:58:46 2026 GMT
        Subject: CN=D55BBDF3CA8359054127948D18011B10D47E61CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:82:67:7b:7a:6d:57:ab:92:84:5e:4d:5b:
                    eb:d7:57:b3:df:74:bc:86:a7:b5:80:fe:8a:50:d5:
                    f1:94:5d:c5:2c:cf:40:0c:fd:c4:02:f7:f3:5b:ba:
                    3a:d7:e9:93:a7:12:84:fe:cf:31:d0:73:e8:7f:f9:
                    41:62:bb:51:79:b6:04:ad:71:2f:77:fa:c0:b5:8f:
                    7d:3c:18:95:4d:3c:9d:34:4e:a8:89:5e:e4:fa:bc:
                    e1:c8:ec:e1:3e:fa:01:15:5a:b6:ff:de:fe:11:9b:
                    5b:ce:92:c9:e7:3c:bd:f8:c3:5f:5e:4a:5f:db:59:
                    28:a7:92:ad:08:84:ea:39:f5:da:36:67:09:b0:52:
                    5b:72:86:ff:f2:62:bd:a3:93:13:a9:fc:89:b6:1b:
                    e2:da:fc:a5:a2:c4:fe:e5:7e:f6:3e:15:a8:72:6d:
                    30:f2:d4:a8:55:5b:bd:ee:ee:ed:e7:2a:f4:cd:dc:
                    1d:f7:8a:55:57:80:9c:87:96:93:37:7c:14:f6:05:
                    62:d2:e9:96:a4:9a:60:a9:02:b7:92:56:e6:3d:c1:
                    bc:29:b5:5f:09:e5:7d:35:8e:4b:0e:d6:d3:de:55:
                    05:8f:1e:37:e1:c8:75:3b:75:c5:18:f0:6f:66:67:
                    ff:3e:3a:ad:2c:55:bb:a7:fc:ca:d0:13:39:49:45:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5B:BD:F3:CA:83:59:05:41:27:94:8D:18:01:1B:10:D4:7E:61:CF
            X509v3 Authority Key Identifier:
                keyid:DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/3137392e34392e38302e302f32332d3234203d3e20323731333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:de:64:b4:ad:ec:64:9c:42:02:a1:e9:3e:e3:b3:72:2e:70:
         c9:66:9d:ea:f4:6d:74:5a:64:bc:2f:4e:84:05:05:5a:b7:cd:
         c0:6e:97:cc:b5:49:0e:1c:ef:2e:c2:f1:95:c3:90:ed:0c:19:
         af:bb:52:f0:48:ca:ca:47:6e:8f:b8:6d:55:62:7b:77:f1:aa:
         dd:08:b8:28:42:c9:57:4a:7c:be:1d:5c:dd:f0:ae:bb:03:8f:
         f5:03:5a:20:cf:bb:f3:5f:e3:9d:60:2b:61:9b:56:4e:b2:ff:
         ea:c6:63:0e:5a:ae:5d:8b:47:51:b3:63:b9:8e:2a:b9:d7:46:
         7d:1d:e5:14:77:24:ee:2b:19:d3:ed:9b:e6:41:be:26:d5:a8:
         77:d0:0a:53:6d:ac:b4:2e:ff:10:d1:53:7d:77:87:5b:2a:04:
         8f:fb:79:1b:16:bc:8a:9e:3b:f5:ac:91:4a:c5:99:12:2e:dc:
         96:79:b3:3f:6b:f5:2b:ef:aa:ca:64:56:13:99:b5:d3:9f:3a:
         e8:be:a7:16:ff:80:60:a4:c5:81:8f:51:d3:7d:05:d9:1a:51:
         0e:1c:3d:85:39:51:7d:98:16:56:5a:0b:ca:57:af:7d:f8:73:
         eb:c3:e3:ca:63:3d:2c:53:34:d3:62:48:4f:2f:e6:d1:4d:ac:
         35:52:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:04 2025 by rpki-client