Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134392e302f32342d3234203d3e20323731313934.roa
File:                     3137392e34392e3134392e302f32342d3234203d3e20323731313934.roa (raw, json)
Hash identifier:          i/iQYmhVRRO+pWVZHYZNAUu39A5MgUH9apZ7xFf2+hQ=
Subject key identifier:   1C:0C:57:3B:6E:F3:FD:95:72:08:B1:25:5D:6D:12:D6:46:5C:B4:9E
Certificate issuer:       /CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
Certificate serial:       6DEC1568B42A87F4857D6515D0BB1DB924E803D5
Authority key identifier: 9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134392e302f32342d3234203d3e20323731313934.roa
Signing time:             Mon 06 Oct 2025 23:39:19 +0000
ROA not before:           Mon 06 Oct 2025 23:34:19 +0000
ROA not after:            Mon 05 Oct 2026 23:39:19 +0000
asID:                     271194
IP address blocks:        179.49.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl
                          rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ec:15:68:b4:2a:87:f4:85:7d:65:15:d0:bb:1d:b9:24:e8:03:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
        Validity
            Not Before: Oct  6 23:34:19 2025 GMT
            Not After : Oct  5 23:39:19 2026 GMT
        Subject: CN=1C0C573B6EF3FD957208B1255D6D12D6465CB49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:6c:00:99:6a:66:27:95:b0:b0:97:39:5f:
                    6e:58:31:9f:56:75:15:22:90:8f:ed:97:68:f4:c6:
                    7e:0e:41:23:54:c6:79:27:59:71:59:69:31:d9:af:
                    26:9d:37:e1:76:14:47:23:b7:e5:ea:a7:fb:37:9f:
                    b3:be:e3:a5:56:56:1e:49:76:14:a2:5d:17:40:9f:
                    66:fb:e5:05:a1:b7:dd:22:26:ee:d1:12:0c:04:23:
                    3f:c8:0c:ca:e7:c6:c2:51:88:18:08:03:8c:bd:f1:
                    e1:d2:28:22:96:8a:3d:8c:1a:2f:ee:99:65:0b:a6:
                    40:ac:74:a4:d7:4b:d0:8e:9a:39:22:9f:be:ce:ee:
                    da:02:5d:34:6e:f8:1e:14:24:c3:31:95:d6:0b:30:
                    94:35:ba:90:68:0e:60:73:f8:da:24:ed:7a:27:a0:
                    f4:9b:d9:1c:d0:1b:67:60:cf:a7:1f:22:ff:84:e1:
                    b2:dc:4b:e9:31:b0:d0:71:13:e0:45:15:1f:b5:d9:
                    3f:e8:06:3e:5d:48:85:c0:4f:ac:36:be:3c:85:0a:
                    58:e9:0d:be:3c:02:55:68:fc:20:12:9a:3d:68:ed:
                    96:76:93:be:af:7e:e5:05:3b:77:31:12:c1:bb:0e:
                    84:06:fa:bc:e3:16:70:8b:60:01:85:c5:81:8d:eb:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0C:57:3B:6E:F3:FD:95:72:08:B1:25:5D:6D:12:D6:46:5C:B4:9E
            X509v3 Authority Key Identifier:
                keyid:9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134392e302f32342d3234203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:69:78:23:70:7f:8d:2d:a3:62:5e:c2:6a:bf:64:59:6c:13:
         4d:a0:11:e1:7a:83:e8:60:d0:e5:48:16:21:07:37:06:10:dd:
         e9:b5:f8:37:f8:c0:e4:8f:bb:e2:fb:b7:77:b6:7f:2a:78:a1:
         33:44:6a:d4:42:b7:89:63:d6:e5:bc:55:4b:fe:39:15:b3:54:
         a4:60:58:1d:ec:8b:02:df:9a:ff:16:26:0c:3d:e4:3d:36:49:
         60:c5:6d:04:ba:5c:1c:e0:64:2a:b0:7a:28:6e:40:62:9d:c8:
         92:35:01:e7:59:44:3c:24:6e:39:f1:de:87:2a:1b:1a:67:4b:
         f5:ef:f8:a4:1e:01:9b:ca:53:e1:b2:67:45:74:7d:47:4a:fa:
         67:ce:93:9d:24:b1:3e:01:54:28:da:d9:96:0e:c6:04:f5:d5:
         88:3c:4e:28:3a:52:61:96:97:bc:d1:0d:29:b9:60:50:70:cf:
         82:13:79:26:20:75:47:62:cd:f0:a3:cb:5c:fb:20:ac:a8:0d:
         0c:a5:61:7d:14:32:32:8a:5c:b7:13:75:e2:fa:42:58:2e:68:
         b8:ab:0b:c9:79:46:ca:f2:f7:8e:82:ce:a1:6a:6b:4e:fd:6d:
         cb:52:06:f7:b2:16:74:d6:d6:f2:6c:75:6f:a6:2a:48:d1:db:
         aa:86:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:10 2025 by rpki-client