Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32332d3233203d3e20323731313934.roa
File:                     3137392e34392e3134382e302f32332d3233203d3e20323731313934.roa (raw, json)
Hash identifier:          VCtcFCRHGZgciYzPbrstiPlHouh5la6Spo6ZkO/LkRg=
Subject key identifier:   73:81:9B:CC:8C:C7:10:B5:B5:EB:A2:79:19:4E:86:96:C9:D1:BC:C0
Certificate issuer:       /CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
Certificate serial:       587AE623796722BD8161384684A7FD309596E381
Authority key identifier: 9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32332d3233203d3e20323731313934.roa
Signing time:             Mon 06 Oct 2025 23:38:14 +0000
ROA not before:           Mon 06 Oct 2025 23:33:14 +0000
ROA not after:            Mon 05 Oct 2026 23:38:14 +0000
asID:                     271194
IP address blocks:        179.49.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl
                          rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7a:e6:23:79:67:22:bd:81:61:38:46:84:a7:fd:30:95:96:e3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
        Validity
            Not Before: Oct  6 23:33:14 2025 GMT
            Not After : Oct  5 23:38:14 2026 GMT
        Subject: CN=73819BCC8CC710B5B5EBA279194E8696C9D1BCC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:6f:85:6a:50:94:1a:9d:e2:5e:6e:6f:de:
                    5c:c0:70:c4:b0:11:71:ce:db:9a:df:5a:f8:5c:75:
                    61:87:88:02:15:5f:cf:ad:ef:7f:99:cc:4e:5a:dd:
                    ad:30:7e:a9:27:a4:6a:6f:53:f4:35:cd:c6:88:40:
                    d0:a7:49:2f:8a:91:9d:b3:bc:1f:f3:2f:53:7e:24:
                    28:ce:22:cb:1d:85:57:2b:b5:cb:fc:22:84:15:93:
                    57:a7:5d:1b:5c:fd:fd:3a:85:17:96:f8:6c:ed:89:
                    1e:47:66:d7:bc:74:a2:38:aa:8e:49:60:f2:44:85:
                    6e:e4:f0:8c:28:89:d4:75:7a:e5:41:c2:bd:e7:52:
                    1d:44:26:a4:42:02:99:d2:81:6f:36:8b:f9:e2:8b:
                    24:d6:45:3a:c5:c0:8f:38:1c:7d:6e:54:2e:bd:ca:
                    f1:2d:f3:cc:c1:8d:8d:b1:cf:44:a5:20:64:3f:7c:
                    9b:ed:ec:72:22:22:6a:b5:a7:f5:bb:04:04:f8:22:
                    26:33:c7:cd:a2:88:86:1f:a8:f5:b9:16:fc:44:e9:
                    79:c5:7c:bc:af:b4:6e:96:12:5e:7c:13:7c:8b:35:
                    25:d5:18:ca:9c:d0:94:df:f8:57:d6:ea:31:00:90:
                    95:3a:ea:35:26:b6:88:67:bb:aa:e7:62:87:6e:4f:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:81:9B:CC:8C:C7:10:B5:B5:EB:A2:79:19:4E:86:96:C9:D1:BC:C0
            X509v3 Authority Key Identifier:
                keyid:9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32332d3233203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:7c:ce:72:6b:55:9b:c4:00:c7:3a:48:b1:df:ac:2e:5a:
         ac:5a:84:50:61:68:22:f8:19:21:e2:65:0a:0d:20:9b:72:d7:
         60:39:08:92:19:6c:c7:08:89:90:11:15:35:c0:9d:63:f4:06:
         9e:5b:f0:ff:2a:d3:c6:20:ad:aa:67:fa:1a:f8:28:94:2d:c0:
         4a:59:a6:20:40:58:c9:91:f9:40:5b:1d:23:d1:c5:fb:4b:dd:
         3d:eb:1b:10:ef:a1:ff:3d:ce:07:83:44:5a:94:07:3d:28:b7:
         0b:f9:db:9f:67:ac:e0:28:17:a4:3d:1d:03:5c:8e:33:ec:3c:
         a0:f4:58:1e:1a:b4:5d:38:39:ce:86:a0:22:15:46:14:78:7b:
         d1:b9:7f:34:72:77:74:d1:0f:0c:8c:3f:5b:5e:20:49:3f:3c:
         9f:a9:0d:7a:bd:4c:91:4c:b2:a6:04:4a:b8:29:00:a6:a1:a8:
         f6:db:e6:95:92:c2:db:00:7a:f7:45:bf:8f:bf:e1:30:72:35:
         77:b6:1b:86:a1:66:45:a6:ab:9e:75:f1:2d:e1:1f:93:19:f2:
         30:8c:2f:ff:dc:6c:2b:2b:38:c9:a5:6f:5d:d4:7a:bd:ba:ff:
         41:04:d2:ac:43:9a:d8:8b:90:a3:71:13:9c:d7:69:5b:9a:91:
         03:b2:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:15 2025 by rpki-client