Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa
File:                     3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa (raw, json)
Hash identifier:          G62QEazDnEPkWGKJETqj7+BcYdgc4UO1Pmgcr9bMnWs=
Subject key identifier:   73:A5:40:08:66:6D:BB:E0:D1:04:00:D2:FB:22:0E:49:94:D9:E0:2C
Certificate issuer:       /CN=6BBF728DE154B05A425E7B8D5874E5344AC84C67
Certificate serial:       5A769C23C8EB0DEFE4DF5B76824DEE610A593F24
Authority key identifier: 6B:BF:72:8D:E1:54:B0:5A:42:5E:7B:8D:58:74:E5:34:4A:C8:4C:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBF728DE154B05A425E7B8D5874E5344AC84C67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa
Signing time:             Sat 04 Oct 2025 13:01:40 +0000
ROA not before:           Sat 04 Oct 2025 12:56:40 +0000
ROA not after:            Sat 03 Oct 2026 13:01:40 +0000
asID:                     271058
IP address blocks:        179.48.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/6BBF728DE154B05A425E7B8D5874E5344AC84C67.crl
                          rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/6BBF728DE154B05A425E7B8D5874E5344AC84C67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBF728DE154B05A425E7B8D5874E5344AC84C67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:9c:23:c8:eb:0d:ef:e4:df:5b:76:82:4d:ee:61:0a:59:3f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BBF728DE154B05A425E7B8D5874E5344AC84C67
        Validity
            Not Before: Oct  4 12:56:40 2025 GMT
            Not After : Oct  3 13:01:40 2026 GMT
        Subject: CN=73A54008666DBBE0D10400D2FB220E4994D9E02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:50:61:03:ba:05:db:1d:29:50:9d:98:92:
                    c5:43:3f:1b:38:ec:2a:f0:c4:28:60:42:b9:3b:74:
                    a5:67:61:55:4b:be:4d:29:75:df:7e:19:fe:77:8b:
                    b0:cb:55:f1:3c:b1:5d:8e:66:e6:7f:6e:85:f6:e1:
                    82:f6:cb:6b:18:2b:5b:55:0e:c8:35:15:21:fd:b3:
                    6d:d1:76:9b:77:cc:ce:6d:c2:b3:5e:b3:32:ae:b3:
                    89:d3:ea:0e:2d:39:89:97:5c:58:6e:0a:3e:e4:6b:
                    aa:15:7b:fc:f7:c0:33:26:ff:4f:84:7f:7d:ed:16:
                    53:1d:3c:90:0a:a7:4d:82:ff:7b:0a:fd:30:e7:9e:
                    6d:cd:8a:ea:5e:57:98:db:9d:c5:d1:48:be:9a:73:
                    02:6d:1a:53:54:fb:0b:a4:43:2f:a2:8f:08:ee:3c:
                    16:cf:35:c2:78:6e:b3:94:2b:02:10:c2:aa:f2:ee:
                    f1:80:fc:fb:44:93:e7:29:1e:2a:99:03:72:5b:5e:
                    79:b4:bf:9e:a0:57:fd:e4:ed:87:84:87:63:b5:18:
                    95:f0:fa:94:2e:45:09:12:0a:98:4d:11:9c:61:5e:
                    17:4f:92:4f:5c:73:10:f6:ac:15:ca:a5:63:d1:1c:
                    64:85:56:21:c9:22:03:ca:57:e5:fd:f3:4c:83:98:
                    83:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:40:08:66:6D:BB:E0:D1:04:00:D2:FB:22:0E:49:94:D9:E0:2C
            X509v3 Authority Key Identifier:
                keyid:6B:BF:72:8D:E1:54:B0:5A:42:5E:7B:8D:58:74:E5:34:4A:C8:4C:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/6BBF728DE154B05A425E7B8D5874E5344AC84C67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBF728DE154B05A425E7B8D5874E5344AC84C67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:da:db:cd:d0:88:e4:66:e6:15:76:3f:8c:61:1e:cb:1f:
         ad:00:99:7e:fa:57:d4:31:7a:7b:01:56:12:bf:af:00:16:b5:
         c0:1d:48:61:fe:5c:01:f2:c4:2a:c3:c7:48:e7:ce:90:dc:6f:
         2c:5b:4d:e4:8d:bb:05:f1:64:70:89:a9:59:d8:41:f4:6b:23:
         0c:30:f6:53:7c:2f:2a:29:9e:3c:17:a8:1c:3c:9b:62:09:d4:
         d0:bb:5c:c4:54:4a:50:be:c8:eb:37:53:43:0b:57:12:5f:a6:
         7f:32:46:95:db:6d:24:90:23:7c:1a:54:ad:d5:06:e0:c5:0b:
         85:18:d5:4a:80:3a:60:95:4e:99:83:29:2d:0d:af:b7:87:f0:
         28:80:e7:71:7a:49:29:ab:74:27:dd:07:82:81:fc:f1:46:15:
         d1:2d:b6:6a:d4:e0:ce:bc:40:56:7a:23:47:7f:56:23:18:65:
         b4:fb:63:6e:84:1a:9e:e2:54:28:0d:b3:ff:0d:90:3d:91:43:
         e4:37:40:63:20:32:18:cb:a0:47:28:ad:f8:ce:27:5e:ab:f2:
         cb:da:ed:f6:41:90:7c:e4:ba:b0:82:ff:02:86:f2:55:3c:30:
         d4:8a:35:89:48:52:6d:c0:96:b1:e0:8e:4e:40:d2:2b:98:12:
         c5:28:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:26:49 2025 by rpki-client