Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32342d3234203d3e20323731303639.roa
File:                     3137392e34382e302e302f32342d3234203d3e20323731303639.roa (raw, json)
Hash identifier:          Zf7p5Fg0wsV+cQk9iIEoIad7Zk9BtPluPlkj9p7QxPg=
Subject key identifier:   6A:2E:E2:83:FB:F0:C1:97:AA:22:B6:1E:29:7A:47:AC:9C:B5:F5:00
Certificate issuer:       /CN=F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837
Certificate serial:       20BC684930B7C2C734E27DF54D730FB0BD9D8175
Authority key identifier: F2:68:EE:DC:5A:FD:60:8E:ED:CF:0E:59:CF:A2:BD:FE:D1:6B:C8:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32342d3234203d3e20323731303639.roa
Signing time:             Mon 23 Mar 2026 15:25:41 +0000
ROA not before:           Mon 23 Mar 2026 15:20:41 +0000
ROA not after:            Mon 22 Mar 2027 15:25:41 +0000
asID:                     271069
IP address blocks:        179.48.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.crl
                          rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bc:68:49:30:b7:c2:c7:34:e2:7d:f5:4d:73:0f:b0:bd:9d:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837
        Validity
            Not Before: Mar 23 15:20:41 2026 GMT
            Not After : Mar 22 15:25:41 2027 GMT
        Subject: CN=6A2EE283FBF0C197AA22B61E297A47AC9CB5F500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:e1:3f:f5:b8:76:b8:a1:9a:cc:b4:57:6b:
                    af:d2:b5:61:32:f6:4e:19:a5:ab:63:93:21:38:2c:
                    d8:9e:f7:60:0c:84:fb:14:2c:11:a5:85:6c:db:7d:
                    1c:e7:f5:25:68:f0:e9:05:9b:ea:42:b9:96:61:5d:
                    78:0a:6b:f5:97:90:7b:db:4a:5b:7f:ee:64:a8:ff:
                    b1:f1:72:1d:84:17:1e:6a:f2:4c:d6:68:48:83:78:
                    5c:e2:e1:e9:a2:5c:51:07:b4:4e:e4:c3:8b:c4:3c:
                    f2:6a:b6:81:29:e8:f6:2a:42:d1:c7:30:dd:e6:d1:
                    bd:ef:cb:13:06:a0:b1:49:76:32:1a:8f:a0:27:61:
                    0d:3f:e6:a0:ab:1c:80:08:d4:e2:66:76:2a:8e:50:
                    1c:e1:73:6b:04:f1:1a:24:02:8e:4b:ed:35:89:40:
                    d0:a5:ba:b0:5b:a9:3e:8c:4d:5c:c5:f4:4b:9a:44:
                    98:fc:43:8a:5c:6c:f8:2a:06:c1:da:cd:86:e3:8b:
                    99:83:1e:e3:92:f0:d7:7e:50:3f:58:4c:49:7a:7d:
                    a3:a1:88:08:37:c7:27:8e:23:4b:87:e9:d2:ff:ef:
                    42:8c:34:19:5d:7f:a6:f6:bd:75:62:89:ee:50:e9:
                    21:59:1f:f5:2e:7c:14:26:38:57:9f:5b:a6:0b:4c:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2E:E2:83:FB:F0:C1:97:AA:22:B6:1E:29:7A:47:AC:9C:B5:F5:00
            X509v3 Authority Key Identifier:
                keyid:F2:68:EE:DC:5A:FD:60:8E:ED:CF:0E:59:CF:A2:BD:FE:D1:6B:C8:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F268EEDC5AFD608EEDCF0E59CFA2BDFED16BC837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNWCMPfnVMnmbsYV7uGP4eb1bse983JPN213rHtHW4BF/0/3137392e34382e302e302f32342d3234203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:84:c1:20:c9:f4:d5:0f:e4:e5:cc:2c:2a:a4:56:af:82:
         9a:f7:07:d2:fd:cf:69:2d:dd:20:3b:eb:32:09:09:94:cd:ca:
         39:f3:ac:a6:39:b2:0b:f9:ba:5f:6e:c2:f3:80:f4:f5:1a:9f:
         98:be:a2:65:34:7f:77:af:a0:2f:62:d7:b9:06:15:f5:b6:8e:
         c3:e8:25:3b:bf:80:46:2a:5a:e2:9b:29:d4:ae:9b:99:ae:9f:
         ce:cb:79:3c:46:0e:1a:0f:77:2d:11:e9:5d:f0:71:f7:1a:10:
         10:ba:15:5e:a1:e4:bd:b2:55:95:94:37:35:7a:df:ce:fc:67:
         df:44:f9:78:b5:df:67:62:07:4f:9f:03:53:5c:6b:dc:98:c3:
         c8:8a:cd:2a:df:f0:39:0e:5c:a9:80:08:f5:2f:aa:cc:46:2e:
         f6:c9:58:b8:3b:17:82:79:c3:9c:8d:39:7c:d6:3f:df:3b:dd:
         5a:03:09:e5:0e:3d:82:ee:9f:e7:c7:a2:57:4b:33:1b:56:da:
         d7:85:b2:6c:75:d0:c9:0d:b2:7e:07:45:36:6c:4f:7c:45:6c:
         9c:32:2f:d1:11:8d:55:6a:8c:ec:0f:07:c6:09:b8:b2:da:e9:
         ce:6c:bb:fc:32:b0:c9:ce:2a:af:a6:9e:88:cb:dd:71:2c:50:
         d5:d8:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:17 2026 by rpki-client