Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3137392e3132342e3138342e302f32312d3234203d3e203631393038.roa
File:                     3137392e3132342e3138342e302f32312d3234203d3e203631393038.roa (raw, json)
Hash identifier:          a9FHcagAn8rTT1KRkuR2JDFTVm1b8nEjEU2X9IozEzw=
Subject key identifier:   7A:B1:84:B7:11:76:BB:58:70:6D:00:31:69:08:A7:7B:A7:E9:F3:93
Certificate issuer:       /CN=BB0E18F43E99502212097842E9F81169A8D29D2E
Certificate serial:       45D6D21D46F63ECE9FF3E2EF37B0B746597DFD39
Authority key identifier: BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3137392e3132342e3138342e302f32312d3234203d3e203631393038.roa
Signing time:             Mon 15 Sep 2025 00:32:55 +0000
ROA not before:           Mon 15 Sep 2025 00:27:55 +0000
ROA not after:            Mon 14 Sep 2026 00:32:55 +0000
asID:                     61908
IP address blocks:        179.124.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl
                          rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:d2:1d:46:f6:3e:ce:9f:f3:e2:ef:37:b0:b7:46:59:7d:fd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0E18F43E99502212097842E9F81169A8D29D2E
        Validity
            Not Before: Sep 15 00:27:55 2025 GMT
            Not After : Sep 14 00:32:55 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:0e:17:2d:54:bf:13:4f:00:11:9f:ea:d4:
                    b5:b2:d2:13:10:7f:6c:a1:49:12:7b:7b:b5:b5:d1:
                    b4:6c:1e:ce:64:7e:52:36:1b:5b:35:82:9d:fb:43:
                    eb:da:5e:6f:67:63:65:70:16:d2:2c:2a:47:85:0c:
                    2a:e3:4a:9a:3c:4c:51:64:4b:b1:db:de:58:77:88:
                    51:04:45:e9:f7:69:39:d6:0e:aa:2c:84:39:7e:6e:
                    f0:2d:02:26:3c:02:13:1a:28:5b:32:70:b5:8e:83:
                    19:ce:40:7f:c3:ba:46:6c:d1:12:2c:98:3e:a4:f1:
                    14:06:f8:18:8d:42:0e:7d:96:54:56:42:38:40:a4:
                    26:c8:bd:b4:a0:de:ad:0a:aa:1b:da:8e:c5:75:72:
                    10:6f:1a:41:be:f9:7c:ff:b5:5e:25:4f:3e:12:04:
                    f6:d4:79:cd:0b:24:7c:5c:c8:44:68:ac:56:30:fa:
                    83:a2:a1:3a:ea:01:07:e3:04:a9:92:65:d8:26:96:
                    a8:b8:00:8d:8e:da:50:3c:ec:58:98:63:b1:20:36:
                    6f:ce:16:56:e1:d5:4d:82:7b:30:1d:c5:b0:36:c7:
                    a1:46:10:9d:ef:54:62:96:a3:f9:10:8d:5f:90:df:
                    4d:7d:6a:0d:3c:4c:cd:0a:14:2f:c6:1d:de:f2:d5:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B1:84:B7:11:76:BB:58:70:6D:00:31:69:08:A7:7B:A7:E9:F3:93
            X509v3 Authority Key Identifier:
                keyid:BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3137392e3132342e3138342e302f32312d3234203d3e203631393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:79:00:e8:5d:36:5f:4c:d3:62:34:a7:2e:15:72:4e:3b:79:
         95:a3:c1:64:17:f1:04:13:57:4b:80:ff:4c:70:db:ac:48:26:
         d0:69:66:be:22:bc:4e:ce:a4:33:01:bf:50:d6:62:61:17:03:
         88:c1:07:30:db:9e:ce:26:86:85:25:b4:a7:34:0c:f3:f1:be:
         36:70:dd:00:28:69:a3:0b:34:3d:c4:9c:e9:27:4d:b2:6e:ad:
         b1:7b:a6:78:a3:de:f8:5e:9d:ca:23:d4:1d:12:f9:8c:39:85:
         0c:f6:19:d9:b1:ac:65:8c:02:ef:75:9a:e1:f7:0b:93:de:bb:
         83:ba:b8:dc:64:d9:be:1b:e8:e9:bd:87:c5:c9:ee:47:c3:40:
         5f:4d:3c:d2:73:e6:d8:06:49:c1:64:aa:98:c9:1e:e7:17:e2:
         72:d1:91:e5:ff:9e:56:bc:05:8c:0d:d0:28:79:33:99:04:85:
         ae:bb:a4:a0:fc:71:76:30:e1:9e:df:89:6c:10:0e:12:0f:e3:
         9b:86:15:58:2c:49:ee:3b:bc:cf:58:db:e9:6b:22:a4:b3:55:
         8c:b8:18:f0:7e:7d:ff:f3:65:64:d4:9c:39:f0:0c:2f:c9:74:
         2b:62:31:54:19:dd:14:4a:ee:81:4c:1c:86:2e:bf:f7:f9:25:
         5a:4e:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:35:28 2025 by rpki-client