Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32342d3234203d3e20323731313934.roa
File:                     3137392e34392e3134382e302f32342d3234203d3e20323731313934.roa (raw, json)
Hash identifier:          ExPM+//TFAA2DDn8jopYgWHo1ivoNPNji3KvhvLAFhw=
Subject key identifier:   04:EA:16:AF:5E:D7:3F:61:9F:79:A1:C6:11:B1:D2:3D:F6:97:D8:C5
Certificate issuer:       /CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
Certificate serial:       79B6C5A78398368C749439CC45CC4E80B61A9574
Authority key identifier: 9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32342d3234203d3e20323731313934.roa
Signing time:             Tue 08 Sep 2026 00:10:25 +0000
ROA not before:           Tue 08 Sep 2026 00:05:25 +0000
ROA not after:            Tue 07 Sep 2027 00:10:25 +0000
asID:                     271194
IP address blocks:        179.49.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl
                          rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b6:c5:a7:83:98:36:8c:74:94:39:cc:45:cc:4e:80:b6:1a:95:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
        Validity
            Not Before: Sep  8 00:05:25 2026 GMT
            Not After : Sep  7 00:10:25 2027 GMT
        Subject: CN=04EA16AF5ED73F619F79A1C611B1D23DF697D8C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:24:bd:94:2d:28:90:e9:1f:9f:b4:8e:a8:
                    4f:56:33:4e:2f:d5:30:5e:3b:93:c5:11:d3:14:41:
                    7a:35:0d:66:0a:94:1b:cb:88:70:ff:b9:2f:83:96:
                    c4:b2:5b:0f:d5:cc:5c:03:cf:bd:22:9d:fc:1d:7e:
                    44:85:6f:e9:f2:28:18:d9:5b:b4:02:4d:b1:07:f1:
                    48:0f:6c:ba:06:56:fa:47:6b:a1:be:83:9b:87:2c:
                    42:e6:ba:33:97:5f:d0:bf:f3:31:0b:f5:ff:0c:8b:
                    26:4e:9a:4d:23:ca:38:79:a2:2d:d7:0d:d3:c6:e8:
                    9c:3a:af:39:8b:ca:0a:73:64:af:03:89:dc:88:8e:
                    fc:db:76:5f:e9:5f:e2:76:d8:37:88:7c:bd:35:5f:
                    46:0c:61:04:3f:38:d8:8c:ec:82:22:f6:3b:3a:c9:
                    45:5e:b3:4b:dc:42:24:57:ad:4d:b2:c9:69:d0:ab:
                    e4:d5:31:27:fe:25:f9:15:db:ff:9d:47:76:ea:22:
                    b8:19:00:09:67:1e:09:27:a8:24:d5:c1:8f:92:8a:
                    12:a2:86:95:d6:c5:2d:56:0a:eb:09:e0:8b:41:20:
                    ea:80:70:3d:a0:9a:85:67:33:c6:f1:8c:5d:00:cf:
                    5e:fe:25:dc:c2:a0:44:ef:e4:32:31:33:4a:b0:1b:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EA:16:AF:5E:D7:3F:61:9F:79:A1:C6:11:B1:D2:3D:F6:97:D8:C5
            X509v3 Authority Key Identifier:
                keyid:9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32342d3234203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:6a:b3:38:d1:14:65:04:0f:5c:2e:5c:6c:6e:ef:51:92:50:
         c1:69:9f:45:c8:af:4c:08:98:7c:59:60:5d:1e:8d:34:d0:19:
         33:3f:a9:39:78:fb:7e:b3:9d:90:f3:ff:a1:be:38:51:80:48:
         44:c3:5d:5c:0c:9e:db:b9:c7:13:15:19:28:4b:47:91:86:b5:
         51:0e:e3:98:b7:9f:17:e8:c7:76:f0:dd:47:12:f0:f2:bd:d9:
         df:40:4f:ab:69:ae:bc:d9:52:a0:68:53:ea:b3:a0:32:a2:83:
         e5:43:4c:61:75:7c:9e:00:34:86:f0:5b:1b:2c:1b:fc:5b:2b:
         90:fd:d2:09:ef:5d:37:6d:5b:74:89:5e:23:42:62:28:12:ad:
         8b:98:6d:58:13:d0:a1:8e:65:28:bc:f5:32:08:7a:4a:80:9f:
         32:e8:93:61:2a:0b:14:67:92:6c:81:70:b4:89:6e:3c:bf:c3:
         8a:e8:a2:ee:d3:89:dc:62:ac:c0:ad:0e:74:ea:5e:0e:8d:df:
         cc:20:fe:e4:dd:9e:cb:77:38:93:7e:68:2b:25:68:f6:5d:be:
         b4:b7:be:6c:23:9c:2b:cb:7e:b1:1c:5c:3e:7d:3f:8d:e7:cd:
         5b:04:47:0a:a2:7c:75:17:42:e2:b7:18:73:80:7e:23:4f:80:
         86:16:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:51:01 2026 by rpki-client