Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3232203d3e20323731313934.roa
File:                     3137392e34392e3134382e302f32322d3232203d3e20323731313934.roa (raw, json)
Hash identifier:          2c5mSwERepfpwRshBrHj1jyyOnSZeWC85kEAmazeod0=
Subject key identifier:   93:97:EB:C7:89:8E:7F:EA:27:33:86:E4:8E:83:5B:78:BB:53:FF:97
Certificate issuer:       /CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
Certificate serial:       10DF067BC305D77F4D5230DF9EDE9A8EF3217A9B
Authority key identifier: 9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3232203d3e20323731313934.roa
Signing time:             Tue 08 Sep 2026 00:10:22 +0000
ROA not before:           Tue 08 Sep 2026 00:05:22 +0000
ROA not after:            Tue 07 Sep 2027 00:10:22 +0000
asID:                     271194
IP address blocks:        179.49.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl
                          rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 04:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:df:06:7b:c3:05:d7:7f:4d:52:30:df:9e:de:9a:8e:f3:21:7a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
        Validity
            Not Before: Sep  8 00:05:22 2026 GMT
            Not After : Sep  7 00:10:22 2027 GMT
        Subject: CN=9397EBC7898E7FEA273386E48E835B78BB53FF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:09:37:4a:c9:f5:98:ac:db:0c:84:93:48:
                    fc:18:c3:c6:d9:1c:35:01:79:f6:b4:b6:53:1f:64:
                    4e:87:74:34:ed:6e:3e:07:49:28:72:ef:32:0b:6d:
                    7c:e7:9e:09:1e:76:7e:b7:ef:95:98:0a:7a:0a:0d:
                    16:9b:ff:fb:37:dd:a2:f8:3c:ed:59:a6:6b:40:3f:
                    71:31:02:49:7e:01:9c:4f:8c:6a:f5:74:e3:39:cf:
                    ab:d5:fd:e5:48:84:16:31:6d:fa:e0:4c:67:e6:ee:
                    a6:a6:f2:29:33:4d:35:ef:ca:a4:d1:fb:32:f3:b4:
                    0e:1a:13:0b:c2:dd:98:f4:34:b6:d1:eb:f2:9f:e4:
                    92:e9:47:81:61:0b:64:8d:b0:cd:11:2c:92:7e:20:
                    47:1b:dd:28:7c:84:a7:56:35:68:97:22:39:26:b8:
                    ad:52:08:f2:73:bf:4f:ef:0a:12:6d:66:bd:29:74:
                    de:c5:ae:09:da:8f:12:9e:74:5a:0c:10:54:a9:6a:
                    f7:71:c9:b5:a7:0f:61:ba:bf:21:22:a9:1c:c6:1c:
                    fe:fc:6a:c7:d1:f3:08:e9:c6:3d:01:8d:24:e1:33:
                    38:df:70:4e:48:4b:c9:55:61:b5:23:c8:25:b4:ef:
                    1b:c3:49:1f:41:6f:d2:ec:53:35:c3:d1:29:d9:55:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:97:EB:C7:89:8E:7F:EA:27:33:86:E4:8E:83:5B:78:BB:53:FF:97
            X509v3 Authority Key Identifier:
                keyid:9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3232203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:4e:e3:ba:13:71:35:d2:ca:37:d7:c6:d9:2b:bd:09:98:fa:
         90:d8:52:48:7d:9b:98:6b:6e:8b:e4:9e:7e:0a:8c:6a:d9:ef:
         02:82:45:87:aa:d2:e3:16:24:65:3d:f3:86:b2:5d:28:f1:a4:
         98:07:4e:6d:34:1c:8c:4c:74:02:3c:9c:2c:fe:c7:09:f7:f7:
         42:80:08:0c:ef:8a:10:24:8d:13:38:3f:44:da:4b:e3:35:c8:
         c5:08:52:0b:fc:1b:d5:58:99:4e:dc:48:de:8b:19:74:41:52:
         9f:fc:64:f3:de:95:7b:32:b0:0f:78:3f:7d:1b:71:48:ef:94:
         74:ad:49:5a:93:cf:31:5f:33:a4:e1:fd:27:60:25:7f:3a:ce:
         f0:ed:9e:39:8b:c6:33:33:33:d7:bd:31:81:c9:b8:cf:66:80:
         ef:a8:44:8e:6c:fc:79:db:05:cb:2f:5a:2b:9b:cc:ca:a9:ac:
         55:b7:08:46:f5:75:56:c1:d2:99:65:50:31:5d:54:4c:2a:55:
         60:25:d3:f8:c1:7a:3a:e8:c2:24:b2:36:a9:2c:25:f1:bd:5d:
         26:e2:14:45:44:9d:cd:7a:80:cd:18:b9:be:81:f0:d5:f2:c0:
         3d:0c:d2:7f:ed:51:c2:18:9f:33:84:38:b5:43:f3:33:c9:7a:
         0d:68:0e:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEN8Ge8MF139NUjDfnt6ajvMhepswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZBMjQ0RjQ2ODI5RjU4MUM5RDk0RDFBRTQyN0IxQTg1
NkJGOTcwRDAeFw0yNjA5MDgwMDA1MjJaFw0yNzA5MDcwMDEwMjJaMDMxMTAvBgNV
BAMTKDkzOTdFQkM3ODk4RTdGRUEyNzMzODZFNDhFODM1Qjc4QkI1M0ZGOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2gk3Ssn1mKzbDISTSPwYw8bZ
HDUBefa0tlMfZE6HdDTtbj4HSShy7zILbXznngkedn6375WYCnoKDRab//s33aL4
PO1ZpmtAP3ExAkl+AZxPjGr1dOM5z6vV/eVIhBYxbfrgTGfm7qam8ikzTTXvyqTR
+zLztA4aEwvC3Zj0NLbR6/Kf5JLpR4FhC2SNsM0RLJJ+IEcb3Sh8hKdWNWiXIjkm
uK1SCPJzv0/vChJtZr0pdN7FrgnajxKedFoMEFSpavdxybWnD2G6vyEiqRzGHP78
asfR8wjpxj0BjSThMzjfcE5IS8lVYbUjyCW07xvDSR9Bb9LsUzXD0SnZVQP/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk5frx4mOf+onM4bkjoNbeLtT/5cwHwYDVR0j
BBgwFoAUn6JE9Ggp9YHJ2U0a5CexqFa/lw0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXdLSk12UXBMYnJ3U1ptTk1NTjZEUGpkRk1BVlFHQk5YckRROHg5REJ4
d0IvMC85RkEyNDRGNDY4MjlGNTgxQzlEOTREMUFFNDI3QjFBODU2QkY5NzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQTI0NEY0NjgyOUY1ODFD
OUQ5NEQxQUU0MjdCMUE4NTZCRjk3MEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V3S0pNdlFwTGJyd1NabU5NTU42RFBqZEZNQVZRR0JOWHJEUTh4OURCeHdCLzAv
MzEzNzM5MmUzNDM5MmUzMTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMZQwDQYJKoZIhvcNAQELBQADggEBABdO47oT
cTXSyjfXxtkrvQmY+pDYUkh9m5hrbovknn4KjGrZ7wKCRYeq0uMWJGU984ayXSjx
pJgHTm00HIxMdAI8nCz+xwn390KACAzvihAkjRM4P0TaS+M1yMUIUgv8G9VYmU7c
SN6LGXRBUp/8ZPPelXsysA94P30bcUjvlHStSVqTzzFfM6Th/SdgJX86zvDtnjmL
xjMzM9e9MYHJuM9mgO+oRI5s/HnbBcsvWiubzMqprFW3CEb1dVbB0pllUDFdVEwq
VWAl0/jBejrowiSyNqksJfG9XSbiFEVEnc16gM0Yub6B8NXywD0M0n/tUcIYnzOE
OLVD8zPJeg1oDoU=
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:12:34 2026 by rpki-client