Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32332d3233203d3e20323731303639.roa
File:                     3137392e34382e302e302f32332d3233203d3e20323731303639.roa (raw, json)
Hash identifier:          ncQelK9mEIrXHjc1TQI359agQYLC/830lDsOpd86IY4=
Subject key identifier:   F2:51:F6:C4:BB:B7:F5:20:35:2C:81:3F:62:A8:0D:C1:CE:A8:F3:51
Certificate issuer:       /CN=F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837
Certificate serial:       20F573E8EA5073E8C7F6056BC02374D876F02002
Authority key identifier: F2:68:EE:DC:5A:FD:60:8E:ED:CF:0E:59:CF:A2:BD:FE:D1:6B:C8:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32332d3233203d3e20323731303639.roa
Signing time:             Mon 23 Mar 2026 15:25:41 +0000
ROA not before:           Mon 23 Mar 2026 15:20:41 +0000
ROA not after:            Mon 22 Mar 2027 15:25:41 +0000
asID:                     271069
IP address blocks:        179.48.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.crl
                          rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f5:73:e8:ea:50:73:e8:c7:f6:05:6b:c0:23:74:d8:76:f0:20:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837
        Validity
            Not Before: Mar 23 15:20:41 2026 GMT
            Not After : Mar 22 15:25:41 2027 GMT
        Subject: CN=F251F6C4BBB7F520352C813F62A80DC1CEA8F351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:8a:52:26:cf:0d:c9:2f:59:37:92:35:51:
                    df:f1:7d:12:9f:27:e1:26:58:1d:e2:3d:6d:45:3f:
                    86:49:2a:2d:c2:74:91:57:1b:82:a7:dd:02:d5:38:
                    18:b6:7c:a4:37:cc:33:4b:15:f6:9d:3b:49:bc:75:
                    19:44:62:7d:94:bb:bc:12:68:68:c2:de:0e:15:66:
                    d9:08:c9:06:cc:59:bb:2c:2d:51:0e:eb:45:ed:02:
                    19:7a:58:a5:2a:8a:88:72:6e:f8:1c:78:95:1c:73:
                    3f:b7:03:12:a3:37:70:6a:a5:07:83:64:cf:36:06:
                    81:e4:e1:13:9d:b3:96:16:d4:f2:1b:32:23:1b:70:
                    62:11:91:97:08:75:6b:41:1b:f0:d7:85:32:41:f6:
                    1f:56:6d:71:ec:8b:66:d3:50:e1:f0:41:05:6a:61:
                    80:cd:c7:38:a8:fa:ce:d5:d8:e1:56:da:22:02:a9:
                    45:fe:79:ef:4c:a5:33:9d:de:1a:3b:e3:63:c9:e9:
                    e6:a5:0d:dd:be:0c:1e:d5:96:f1:89:6f:b1:eb:03:
                    01:64:c1:d1:15:98:15:ee:95:72:d7:52:28:d0:47:
                    0b:a8:93:ed:29:93:e3:81:c2:b3:bd:4a:d1:a4:2f:
                    09:02:3f:0c:80:6e:d1:16:28:53:db:6a:a3:74:17:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:51:F6:C4:BB:B7:F5:20:35:2C:81:3F:62:A8:0D:C1:CE:A8:F3:51
            X509v3 Authority Key Identifier:
                keyid:F2:68:EE:DC:5A:FD:60:8E:ED:CF:0E:59:CF:A2:BD:FE:D1:6B:C8:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32332d3233203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:2e:5b:08:33:e5:b3:b6:eb:a0:ff:fe:0c:a4:04:d6:54:0e:
         bb:18:1e:d7:30:cc:6d:c5:87:de:21:26:ce:7e:32:40:fa:3b:
         3f:2e:8e:82:62:fa:cf:ad:c8:77:b4:a9:43:b8:da:cd:c8:e3:
         dc:59:3a:70:0c:27:7d:1f:ff:33:ef:92:88:08:50:85:a6:65:
         a8:86:41:85:3e:40:93:0c:33:57:f5:c2:a3:72:61:1d:72:a5:
         f5:fc:f3:e9:62:a3:5c:88:f1:c1:cf:fc:b9:af:5f:d1:95:3e:
         8a:b8:de:2b:29:80:11:7f:87:7f:1a:ad:4a:c1:ea:ef:8e:a5:
         e4:18:22:6a:f1:4d:91:46:b8:b3:e4:c1:c3:1a:9e:ff:3f:b3:
         ae:94:e0:71:4a:01:5a:7e:82:fb:54:67:5e:52:a2:b2:c4:f1:
         e0:7e:7a:63:a3:4d:1a:77:a2:8b:b1:7a:f6:98:a5:85:63:62:
         08:fd:75:c4:72:8b:60:4c:ff:20:62:b5:c0:df:dd:51:42:30:
         77:63:de:57:03:aa:10:31:81:4d:e7:6d:90:c5:eb:62:31:57:
         24:4e:43:74:5d:db:e6:82:32:b1:72:46:60:da:e0:01:06:df:
         6c:ab:98:73:fc:2c:da:c3:40:b8:66:b4:11:8f:35:ba:78:69:
         29:be:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:41:47 2026 by rpki-client