Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32322d3232203d3e20323731303639.roa
File:                     3137392e34382e302e302f32322d3232203d3e20323731303639.roa (raw, json)
Hash identifier:          MPWmMp/R7OinZcgoEkIoBBzGQLybEMQJUOsR4Kwv+OE=
Subject key identifier:   49:C0:22:10:AA:87:94:1A:8E:FC:FC:F3:13:E5:E3:F9:FC:0D:1A:47
Certificate issuer:       /CN=F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837
Certificate serial:       5E5008EE1EC1BF1855F3C61E169FF5FB0A58D276
Authority key identifier: F2:68:EE:DC:5A:FD:60:8E:ED:CF:0E:59:CF:A2:BD:FE:D1:6B:C8:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32322d3232203d3e20323731303639.roa
Signing time:             Mon 23 Mar 2026 15:25:42 +0000
ROA not before:           Mon 23 Mar 2026 15:20:42 +0000
ROA not after:            Mon 22 Mar 2027 15:25:42 +0000
asID:                     271069
IP address blocks:        179.48.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.crl
                          rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:50:08:ee:1e:c1:bf:18:55:f3:c6:1e:16:9f:f5:fb:0a:58:d2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837
        Validity
            Not Before: Mar 23 15:20:42 2026 GMT
            Not After : Mar 22 15:25:42 2027 GMT
        Subject: CN=49C02210AA87941A8EFCFCF313E5E3F9FC0D1A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:94:8b:ad:a5:c7:22:ff:7a:c3:61:cb:07:
                    57:58:c5:17:1b:35:37:a1:9e:84:97:1e:e0:74:42:
                    39:94:fe:4d:5c:28:70:9d:52:e8:df:bc:63:4a:a0:
                    ff:f0:e1:f7:80:54:63:fa:4d:8d:01:26:dc:2c:92:
                    bd:c0:ba:1b:4b:d0:7a:d5:ad:8d:51:00:6d:4b:5b:
                    57:77:9f:1c:60:a4:22:80:0c:3c:f2:3e:37:e2:75:
                    2e:6e:d5:d8:55:59:40:a6:42:c5:4d:fa:f0:5b:96:
                    b4:d6:75:c8:e3:9b:7d:a8:54:cd:80:84:ab:e5:58:
                    d5:ab:d7:6e:1b:fc:2c:0c:3d:fc:7b:81:25:c6:dc:
                    c7:de:f9:7c:6f:46:54:1e:88:fd:c3:89:2e:85:fc:
                    80:46:64:9e:98:40:cf:dd:8b:0a:84:62:b7:a5:91:
                    1f:6b:a7:b7:17:42:2d:8b:40:0d:de:d2:d4:ff:f5:
                    a8:c9:80:72:de:14:ca:ef:37:30:f8:3e:0f:66:20:
                    fc:6a:e7:69:18:7f:bb:7c:26:5f:99:80:09:dd:8e:
                    73:a4:97:f0:3c:1d:9d:7a:11:5d:65:8e:07:bb:a4:
                    d3:50:04:89:79:19:4c:f4:f4:d9:2b:fa:18:a0:1b:
                    53:65:46:f9:8c:90:0c:9f:6c:36:f2:d8:45:23:42:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:22:10:AA:87:94:1A:8E:FC:FC:F3:13:E5:E3:F9:FC:0D:1A:47
            X509v3 Authority Key Identifier:
                keyid:F2:68:EE:DC:5A:FD:60:8E:ED:CF:0E:59:CF:A2:BD:FE:D1:6B:C8:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32322d3232203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:78:f4:05:ed:c4:cc:a2:57:cc:c6:75:19:6e:f2:7f:7c:a7:
         12:14:c1:3f:e0:a2:65:6a:da:f9:c1:05:94:68:f5:96:37:94:
         8d:8c:8b:75:80:b6:54:6a:6b:01:92:9d:6b:ff:a7:08:66:13:
         b7:d2:12:ea:58:53:09:86:16:53:43:3b:e3:3b:2f:f3:d9:9e:
         4d:01:c2:c8:c7:57:99:59:e7:5a:c8:95:8f:e3:78:42:8a:94:
         92:71:e1:32:a1:c1:36:68:22:69:15:f1:d1:00:4d:41:22:16:
         e9:7f:85:d3:b2:47:4f:a5:86:66:73:54:32:20:ee:b9:68:16:
         d0:53:ff:6b:21:96:4c:0f:cc:41:a7:05:c2:11:82:ab:56:07:
         3e:ee:6b:a1:cd:61:c0:06:6f:e8:59:fa:78:ec:86:14:66:b4:
         6b:59:16:5a:2d:a3:df:40:e5:fd:7f:55:92:c3:f9:96:77:cd:
         0d:29:63:1e:89:ee:18:04:b4:14:c8:fc:e9:d1:26:9d:1f:b7:
         3f:ed:f8:ce:3a:02:5d:55:54:7a:1f:03:03:97:58:38:f8:16:
         1d:06:2f:d8:3a:b9:16:04:9a:62:98:6d:ac:de:80:db:92:2e:
         a0:6e:5d:a7:40:68:c6:26:39:92:42:45:e3:85:7c:9e:64:24:
         f3:c7:86:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:20:26 2026 by rpki-client