Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3137392e34322e302e302f32322d3234203d3e20323731313033.roa
File:                     3137392e34322e302e302f32322d3234203d3e20323731313033.roa (raw, json)
Hash identifier:          Q+JuOcRjWIxypP6zouSxi385OzlV6BSMYiNwRgYHGAE=
Subject key identifier:   59:BA:24:A5:DE:0D:AD:53:35:B7:6E:B0:F1:77:7E:6D:38:BD:1B:84
Certificate issuer:       /CN=3EF633923A51B56E1376665FA9A269A157B419AF
Certificate serial:       64B42347CA059675AD356C0E0BCE1D14A5C8BD23
Authority key identifier: 3E:F6:33:92:3A:51:B5:6E:13:76:66:5F:A9:A2:69:A1:57:B4:19:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF633923A51B56E1376665FA9A269A157B419AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3137392e34322e302e302f32322d3234203d3e20323731313033.roa
Signing time:             Thu 28 Aug 2025 01:17:29 +0000
ROA not before:           Thu 28 Aug 2025 01:12:29 +0000
ROA not after:            Thu 27 Aug 2026 01:17:29 +0000
asID:                     271103
IP address blocks:        179.42.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.crl
                          rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF633923A51B56E1376665FA9A269A157B419AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 21:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b4:23:47:ca:05:96:75:ad:35:6c:0e:0b:ce:1d:14:a5:c8:bd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF633923A51B56E1376665FA9A269A157B419AF
        Validity
            Not Before: Aug 28 01:12:29 2025 GMT
            Not After : Aug 27 01:17:29 2026 GMT
        Subject: CN=59BA24A5DE0DAD5335B76EB0F1777E6D38BD1B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:f3:ac:d0:47:ac:ce:1d:f4:d9:65:ad:1f:
                    46:7d:67:b7:71:17:15:5c:df:6f:ab:cf:2e:ce:69:
                    ef:4e:56:7b:33:05:9f:95:ec:c6:b1:2c:f7:4c:91:
                    cb:64:06:30:9e:90:c8:21:4d:34:20:08:5e:15:9d:
                    53:52:32:35:1e:52:b3:2b:9b:ea:04:ec:81:c5:a7:
                    12:bf:64:c3:3a:b2:8b:45:7f:8f:86:17:6f:00:3d:
                    ca:89:57:75:bf:cf:41:95:d6:c9:72:bc:d4:74:54:
                    b2:da:40:e2:82:ba:2c:ef:f2:b5:68:0f:c7:b1:2f:
                    dc:dc:55:15:3f:0f:7c:00:da:b4:ed:09:a3:c9:6d:
                    3d:70:f4:b8:73:cb:fe:5f:f5:1d:a3:bc:36:df:a6:
                    bd:7e:d5:d5:d9:37:e4:fc:20:c4:4d:6e:3d:81:1d:
                    bb:ff:5f:fb:64:a5:bb:d1:54:2f:fb:bd:12:52:17:
                    20:be:ad:52:d7:ae:2f:7c:73:6c:e2:87:a4:ff:5f:
                    27:c7:c5:85:06:7e:85:a8:1a:5c:ad:bd:f7:e4:8e:
                    2a:ea:17:5f:da:7e:a9:ed:8a:89:1d:2d:b6:08:13:
                    81:31:e8:75:bd:7b:1d:25:29:ca:53:4f:5f:e8:77:
                    94:d2:c0:1a:4f:ee:88:d6:e6:e6:72:85:06:21:7c:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:24:A5:DE:0D:AD:53:35:B7:6E:B0:F1:77:7E:6D:38:BD:1B:84
            X509v3 Authority Key Identifier:
                keyid:3E:F6:33:92:3A:51:B5:6E:13:76:66:5F:A9:A2:69:A1:57:B4:19:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF633923A51B56E1376665FA9A269A157B419AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3137392e34322e302e302f32322d3234203d3e20323731313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:1f:fb:de:2d:ca:f3:ed:bb:fe:ca:89:2a:e0:ec:e8:04:2b:
         4e:91:a1:07:17:f0:e5:ba:f2:47:ba:40:a6:13:2b:cd:91:68:
         40:15:d9:d1:d2:2b:55:11:cd:b1:7e:bf:fa:90:cc:b8:58:56:
         51:dc:89:33:85:6d:76:2b:bf:ed:8a:e5:40:11:b4:9c:0e:a4:
         88:5c:f5:24:20:44:9a:7f:a9:af:0a:1a:2a:1d:51:03:54:0f:
         db:54:22:d7:d2:66:c2:c4:8a:f5:e5:bf:08:fa:47:7f:c4:2e:
         6a:fb:00:85:1c:aa:99:e5:64:78:16:17:ab:3e:1d:dc:65:f6:
         08:81:d1:fe:25:0b:c5:56:94:67:60:f4:46:e0:9e:29:8c:68:
         f5:98:be:f6:d5:65:4a:46:e3:53:e1:2c:29:02:a0:cb:b4:bc:
         8c:85:ac:b9:4a:2a:08:de:4f:30:41:41:44:91:51:d5:20:ab:
         25:6b:85:74:0e:b1:c2:c9:83:59:5a:51:86:eb:20:f6:f2:96:
         34:df:35:52:93:5b:2d:e7:76:99:ee:dc:9b:fe:cd:a0:fe:c6:
         c4:c1:dc:ee:f7:3a:d6:c0:75:2b:2e:d0:0a:93:76:56:1e:77:
         39:24:38:f1:5d:80:8c:3f:6c:04:d1:aa:5d:4a:dd:4c:6f:0c:
         e5:1a:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:28 2025 by rpki-client