Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137342e302f32332d3233203d3e20323731353636.roa
File:                     3137392e36332e3137342e302f32332d3233203d3e20323731353636.roa (raw, json)
Hash identifier:          9IYP2dl93rVFklApRtUxMVgEKx7fDNx/O37wXGntc+I=
Subject key identifier:   3F:2E:17:23:96:21:AE:71:26:82:82:9C:36:A0:46:66:11:84:59:C3
Certificate issuer:       /CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
Certificate serial:       470DB49FF0B07CC7E0D38F154A429A30A2F5B7B5
Authority key identifier: E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137342e302f32332d3233203d3e20323731353636.roa
Signing time:             Tue 30 Sep 2025 19:25:18 +0000
ROA not before:           Tue 30 Sep 2025 19:20:18 +0000
ROA not after:            Tue 29 Sep 2026 19:25:18 +0000
asID:                     271566
IP address blocks:        179.63.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl
                          rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0d:b4:9f:f0:b0:7c:c7:e0:d3:8f:15:4a:42:9a:30:a2:f5:b7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
        Validity
            Not Before: Sep 30 19:20:18 2025 GMT
            Not After : Sep 29 19:25:18 2026 GMT
        Subject: CN=3F2E17239621AE712682829C36A04666118459C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:64:f5:e8:8e:00:8e:68:93:f4:0e:81:86:
                    31:68:d7:8e:d7:90:34:86:73:28:93:2b:79:c8:44:
                    ff:fb:48:7c:11:71:38:24:a5:8d:5c:d4:10:1a:95:
                    2e:2c:af:f1:b3:71:63:ca:8c:08:9a:73:b7:6e:f9:
                    ef:1c:97:ae:bb:ef:d5:ac:94:90:16:b5:9e:88:a2:
                    78:4b:d9:6f:aa:b4:e1:1e:25:80:40:71:28:2c:84:
                    70:b0:28:f8:f6:60:70:36:8a:27:39:16:9b:ad:a0:
                    00:07:cd:d0:e6:cb:2e:73:68:54:53:b3:8e:74:71:
                    14:61:72:61:da:42:61:5d:8a:ec:1a:d4:fd:42:80:
                    21:34:9c:5f:6c:57:33:01:79:3d:c9:5c:7c:45:e1:
                    3d:42:c7:0f:fc:d5:9d:89:7c:84:ba:2a:74:1f:39:
                    71:b8:90:a7:10:ae:bb:02:6f:08:f0:d0:a0:64:83:
                    da:9d:a9:89:27:0c:87:66:c2:4a:6a:38:65:d8:8f:
                    3f:61:63:a7:56:7d:d9:18:27:05:53:cd:f8:33:56:
                    03:3e:1b:45:2a:c9:c7:9c:78:7b:90:49:4b:ef:4a:
                    25:20:5f:7d:a2:1d:cb:62:2c:9a:31:19:71:3c:8d:
                    fd:ec:d4:c4:2c:e6:ba:f4:e3:3b:42:48:8e:67:11:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2E:17:23:96:21:AE:71:26:82:82:9C:36:A0:46:66:11:84:59:C3
            X509v3 Authority Key Identifier:
                keyid:E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137342e302f32332d3233203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:d1:ab:79:77:46:15:e6:d8:4c:9d:ac:45:f9:d8:79:e5:42:
         b5:2b:2e:81:51:f7:f7:31:52:63:3f:de:68:32:17:6a:c3:c1:
         a7:20:4f:37:6f:ca:3a:99:40:b1:96:c3:66:2b:15:2f:ae:93:
         5e:a6:2d:61:bf:39:17:9f:cd:6f:d6:a2:1e:b7:5e:9b:fa:2d:
         a6:2c:6a:73:a7:33:13:ac:a2:d6:0b:bd:15:ae:95:24:68:21:
         6b:a4:9d:f7:15:aa:cb:1e:93:cf:9b:9b:b6:0c:10:40:c8:63:
         91:56:6d:9a:6b:2b:8a:5f:12:48:fb:26:d0:d9:f6:9e:c9:55:
         5d:2f:34:e9:41:d7:27:90:12:ad:4d:fb:eb:e8:9a:cb:ec:06:
         75:9f:e0:9f:8a:b0:94:04:2d:9e:3f:f2:a8:2f:d3:8f:2c:2e:
         87:c7:62:ba:31:3d:86:35:58:83:95:1a:41:e0:59:8a:31:0b:
         af:dd:c8:ac:60:8e:e3:f8:ae:59:7f:d4:25:c7:93:f7:47:ec:
         3d:ed:ad:36:54:90:48:f2:bc:47:d7:18:9a:19:29:4a:8d:6f:
         1d:07:7c:d2:37:c3:a1:1d:62:8f:9c:77:63:b0:35:6e:3f:5e:
         d3:72:91:0a:56:ec:fa:af:7f:7e:6a:83:c9:a5:53:14:a9:6c:
         51:cf:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:05:15 2025 by rpki-client