Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32322d3234203d3e20323730383733.roa
File:                     3137392e34332e36302e302f32322d3234203d3e20323730383733.roa (raw, json)
Hash identifier:          OQzZLEJCfEcQ43G72oLZv/GSUjAXPfQVtxpOXBgC/RY=
Subject key identifier:   E3:DA:49:ED:35:92:8B:65:97:3C:D4:EB:D6:D3:A8:A1:D4:F4:1F:69
Certificate issuer:       /CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
Certificate serial:       4500DB7F3F7C74CE567EE98446B5731B0880A1F1
Authority key identifier: 46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32322d3234203d3e20323730383733.roa
Signing time:             Tue 16 Sep 2025 19:02:56 +0000
ROA not before:           Tue 16 Sep 2025 18:57:56 +0000
ROA not after:            Tue 15 Sep 2026 19:02:56 +0000
asID:                     270873
IP address blocks:        179.43.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.crl
                          rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:00:db:7f:3f:7c:74:ce:56:7e:e9:84:46:b5:73:1b:08:80:a1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
        Validity
            Not Before: Sep 16 18:57:56 2025 GMT
            Not After : Sep 15 19:02:56 2026 GMT
        Subject: CN=E3DA49ED35928B65973CD4EBD6D3A8A1D4F41F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:76:9d:c4:55:43:95:b2:2d:fb:5c:80:5f:
                    ca:c1:ca:8a:ae:e7:ce:fc:c9:fd:84:0b:b8:97:56:
                    09:b5:61:4b:7d:ba:86:7a:fc:0e:a5:3e:0a:76:a2:
                    07:74:ae:8f:ad:3c:94:8b:22:48:f7:39:7d:7d:16:
                    c5:7b:0d:25:4b:3f:b8:50:fb:66:1b:fe:c6:0c:38:
                    f9:c8:3a:82:11:7f:35:0b:5f:4a:68:69:0c:51:15:
                    08:65:51:2e:be:29:00:2b:13:54:34:5e:c1:6c:f1:
                    bf:a6:9b:de:bb:82:3b:e2:f8:d5:1c:21:93:6c:b2:
                    9c:61:99:d1:56:54:cc:ab:6e:b4:42:9c:c9:37:0c:
                    29:9c:4e:57:6a:f5:52:ce:ee:39:92:f7:53:d9:95:
                    b4:4f:ac:6a:8f:17:dd:01:ab:07:f7:a8:c8:65:b4:
                    6f:9f:07:70:4e:9d:33:91:49:f7:ae:b9:96:a7:1d:
                    1f:3c:bb:87:be:e2:1c:67:a3:44:4b:73:f5:0c:a2:
                    c7:25:b8:23:36:0f:d5:f4:be:53:92:d1:f5:0f:ae:
                    a5:49:db:9c:1a:1d:d8:a4:86:eb:c4:b7:79:a5:52:
                    60:6f:1e:c4:51:bb:b2:7e:96:b6:36:d1:31:49:d8:
                    ec:05:ab:6e:20:e0:fa:33:49:0c:34:7e:e4:d0:55:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:49:ED:35:92:8B:65:97:3C:D4:EB:D6:D3:A8:A1:D4:F4:1F:69
            X509v3 Authority Key Identifier:
                keyid:46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36302e302f32322d3234203d3e20323730383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:2e:3f:fd:5e:9e:27:ee:73:91:df:c1:43:4f:36:90:f7:1d:
         8b:b0:c5:98:0b:78:71:df:3e:79:13:0a:25:59:de:ea:94:29:
         04:3e:26:02:8a:b7:91:53:89:e2:27:26:5a:70:a6:f5:f6:0f:
         33:1f:c5:80:9c:66:92:27:70:1f:d0:87:d6:d8:82:ee:4e:33:
         d3:8c:b6:1a:09:70:93:b2:80:4d:19:6f:87:5e:c6:60:62:02:
         eb:fd:0f:9c:ac:c0:1b:d6:4b:bc:11:af:0b:64:4d:eb:e9:96:
         20:b7:c0:f4:6b:1f:50:ff:1f:ce:b7:f1:7a:a8:af:10:77:90:
         89:02:d0:8e:33:f3:c2:65:b2:ef:a8:8a:75:75:e3:6b:b5:31:
         87:d3:63:da:09:aa:3d:42:68:2b:66:05:77:dd:54:49:0f:79:
         e4:c5:d5:38:70:7b:e0:de:28:86:15:0c:28:ec:9c:28:9f:4e:
         09:bb:5d:71:4c:94:b4:ba:d0:78:28:6a:6b:95:3c:87:74:52:
         fd:07:58:f7:c9:ff:a4:75:29:1a:03:e4:ed:37:ad:bd:30:76:
         96:0e:48:77:8f:c6:3c:af:b3:21:29:e2:05:e2:59:10:35:4b:
         6d:bf:95:92:2c:58:1b:ba:6a:a9:cc:b7:56:6a:b4:7c:3f:04:
         32:a8:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:35 2025 by rpki-client