Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135302e302f32332d3233203d3e20323731313934.roa
File:                     3137392e34392e3135302e302f32332d3233203d3e20323731313934.roa (raw, json)
Hash identifier:          Ouv1JmlJPaIacmbk8DH+g7LU8oYXNDKu5g5LmobJ7Hw=
Subject key identifier:   0A:A8:6B:66:63:28:47:7E:BA:7B:FD:0F:92:BC:8D:18:30:F8:40:C2
Certificate issuer:       /CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
Certificate serial:       6103E2FFB4420B9A1EA1A8B7043D25DFFD78254C
Authority key identifier: 9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135302e302f32332d3233203d3e20323731313934.roa
Signing time:             Mon 06 Oct 2025 23:38:31 +0000
ROA not before:           Mon 06 Oct 2025 23:33:31 +0000
ROA not after:            Mon 05 Oct 2026 23:38:31 +0000
asID:                     271194
IP address blocks:        179.49.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl
                          rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:03:e2:ff:b4:42:0b:9a:1e:a1:a8:b7:04:3d:25:df:fd:78:25:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
        Validity
            Not Before: Oct  6 23:33:31 2025 GMT
            Not After : Oct  5 23:38:31 2026 GMT
        Subject: CN=0AA86B666328477EBA7BFD0F92BC8D1830F840C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:25:f9:95:26:b3:ef:18:07:32:f4:4a:5c:
                    47:77:8c:e2:29:37:89:44:83:b1:3a:7c:37:64:c5:
                    b4:bf:4f:46:66:ef:d8:f1:26:84:e2:42:b4:af:66:
                    16:e8:95:b6:ba:38:df:35:05:06:1a:73:aa:0c:7d:
                    7e:60:fc:2a:e5:d9:cc:af:8a:84:21:d4:f9:d2:b5:
                    5e:86:f9:71:d8:ea:1c:54:e9:1a:5b:54:98:12:2d:
                    f7:db:0b:c4:4c:cb:c3:4c:57:37:88:27:d9:47:a7:
                    c3:a8:7e:3a:79:20:f0:65:a4:79:8b:0e:5c:6d:9e:
                    df:41:89:a8:0a:84:8f:6c:2f:47:d1:7f:cd:82:31:
                    67:11:7b:56:d6:75:e4:c7:4d:83:3e:67:20:7d:0e:
                    1c:db:47:26:d7:cd:c1:40:8f:93:a7:d3:11:64:88:
                    ae:d2:fc:bc:35:cc:cf:99:83:1f:12:ff:06:62:65:
                    47:da:f1:b4:0e:55:80:34:6b:2b:c4:70:bc:e2:ab:
                    53:e3:2a:07:a0:c4:db:ee:50:1d:11:ac:57:48:8f:
                    8d:b2:b4:d8:ad:fb:0b:79:dc:73:52:c2:74:75:5a:
                    12:d6:f7:89:7d:7c:35:e5:9c:b1:bc:73:e3:ee:57:
                    0c:b8:2b:49:74:20:eb:14:ec:01:49:98:14:6a:71:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A8:6B:66:63:28:47:7E:BA:7B:FD:0F:92:BC:8D:18:30:F8:40:C2
            X509v3 Authority Key Identifier:
                keyid:9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135302e302f32332d3233203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ca:6f:a5:b7:11:53:af:69:70:56:1b:35:91:46:94:fa:22:
         bd:16:b4:3e:ed:ea:d2:7b:bc:a8:c6:fb:6b:08:c9:4b:00:c2:
         f7:fc:8d:18:ab:60:b2:40:ab:e0:8a:84:46:54:20:26:4e:2e:
         29:64:eb:d5:5a:2f:1b:7a:36:f8:b6:d1:61:50:e2:4d:8e:61:
         7e:8f:6b:ba:00:66:bf:ae:fa:a4:7d:0d:4d:eb:b8:30:fa:95:
         f4:de:f5:20:a0:9a:8f:65:c8:c0:db:b3:80:45:15:8c:04:97:
         f1:0c:97:93:c0:fb:01:34:24:04:00:05:bb:16:d0:43:cf:e0:
         c9:c3:ee:6d:33:a6:0e:80:b6:71:22:4f:49:36:b1:76:da:e3:
         dc:b2:71:51:9d:79:27:d7:72:11:62:2a:17:5f:60:28:b2:d2:
         b4:08:b8:aa:85:cc:eb:60:b7:af:16:7b:52:d0:e2:3c:4f:2a:
         b4:5f:76:58:0a:df:de:ea:ea:a0:0e:6e:d7:1d:0b:21:7d:5d:
         1f:1c:4a:ec:fa:16:98:31:91:c6:f1:44:b9:e2:ea:9a:e0:93:
         75:fc:b5:72:b7:ba:d1:01:fe:a4:ef:18:fd:44:65:96:3d:94:
         fb:ac:ef:64:9c:7f:ab:cd:b5:9c:ae:60:90:7c:9a:0d:8f:62:
         a3:cf:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:23 2025 by rpki-client