Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3137392e3130392e3132302e302f32322d3234203d3e20323637313738.roa
File:                     3137392e3130392e3132302e302f32322d3234203d3e20323637313738.roa (raw, json)
Hash identifier:          pwaHKDL0ALy1Wa8LUCGBgTwdZcMbB8CVB1g5am4C7bQ=
Subject key identifier:   FA:42:20:5E:87:EF:FB:0A:ED:42:EE:44:1F:0D:90:99:6D:5B:91:67
Certificate issuer:       /CN=B27D4418D1584C02A2BA4B025F7E602EADBE0BCF
Certificate serial:       562CD11C56938FC056199823DC4C1DEE0BCE680D
Authority key identifier: B2:7D:44:18:D1:58:4C:02:A2:BA:4B:02:5F:7E:60:2E:AD:BE:0B:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3137392e3130392e3132302e302f32322d3234203d3e20323637313738.roa
Signing time:             Thu 11 Sep 2025 19:13:42 +0000
ROA not before:           Thu 11 Sep 2025 19:08:42 +0000
ROA not after:            Thu 10 Sep 2026 19:13:42 +0000
asID:                     267178
IP address blocks:        179.109.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.crl
                          rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2c:d1:1c:56:93:8f:c0:56:19:98:23:dc:4c:1d:ee:0b:ce:68:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27D4418D1584C02A2BA4B025F7E602EADBE0BCF
        Validity
            Not Before: Sep 11 19:08:42 2025 GMT
            Not After : Sep 10 19:13:42 2026 GMT
        Subject: CN=FA42205E87EFFB0AED42EE441F0D90996D5B9167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:db:0e:b5:d7:67:11:de:b7:ad:01:da:6f:
                    85:2f:ab:5d:31:c7:17:94:2d:af:35:ee:0f:57:e4:
                    f7:a9:20:fd:b5:8e:77:a0:58:d5:e3:d3:77:3d:12:
                    2a:80:a1:ca:48:b0:76:08:a7:49:25:20:1f:99:f4:
                    0e:54:ce:e2:0c:3c:53:ba:7f:0a:81:d4:45:7a:3e:
                    37:2e:5b:df:b2:a6:09:f3:45:21:3e:b2:f3:70:b5:
                    40:8b:7d:41:9c:1a:d5:6c:56:92:58:ee:fe:18:39:
                    8a:1c:5e:45:ae:cb:63:ce:74:44:78:da:aa:42:42:
                    a3:f8:46:3a:b3:0b:44:f2:0f:c4:4c:54:23:e0:ba:
                    c9:85:96:2a:16:d9:5c:49:e2:db:13:e9:49:d1:0f:
                    c7:aa:5d:66:d2:5a:a7:a5:9f:b6:32:7a:01:8f:56:
                    da:91:9b:9f:6c:3e:9a:6f:5e:73:27:25:44:e4:8f:
                    ef:9c:0c:d5:3e:49:a2:70:28:06:0f:77:62:a1:d4:
                    0f:d2:67:96:d2:55:cb:6a:55:cc:85:38:e4:38:b5:
                    59:46:a8:36:c7:f1:3f:5e:8d:2a:10:f2:1d:e5:34:
                    b4:9a:82:22:24:a8:34:49:36:11:9b:ec:f9:67:3c:
                    5a:12:3d:48:fc:18:32:0e:80:b3:a4:13:1e:f7:4e:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:42:20:5E:87:EF:FB:0A:ED:42:EE:44:1F:0D:90:99:6D:5B:91:67
            X509v3 Authority Key Identifier:
                keyid:B2:7D:44:18:D1:58:4C:02:A2:BA:4B:02:5F:7E:60:2E:AD:BE:0B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3137392e3130392e3132302e302f32322d3234203d3e20323637313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:74:c3:a3:f2:14:56:4d:9b:28:ee:81:5e:eb:12:4d:0c:0c:
         85:1f:c9:10:11:b7:f4:62:1d:91:25:9f:ab:6e:20:e2:14:e5:
         e2:7d:49:00:de:9e:ff:7f:87:95:b9:fa:86:f6:ee:1b:10:a3:
         97:b4:18:80:e6:80:e4:23:96:63:60:0a:7f:35:ea:90:78:7a:
         cb:83:cd:64:76:e4:61:85:a8:27:a2:84:a7:ca:c4:6f:49:3c:
         8d:df:c3:a0:9e:e6:33:36:55:d7:df:a6:cf:e6:54:4e:9d:14:
         d0:5c:fa:45:c5:0a:b7:b6:bf:b2:67:c8:80:6c:f4:27:1d:7d:
         6b:73:26:ad:9c:08:87:7d:54:57:fe:c4:ec:12:01:07:d4:36:
         ec:19:34:cf:87:5e:71:3e:73:82:9d:1b:79:0f:5a:c2:da:3a:
         3b:3a:be:80:1c:7c:06:96:10:16:cd:58:b6:c6:7f:13:5f:ca:
         b3:91:20:3e:a2:76:2c:43:a7:c1:0a:c9:b4:55:32:ea:4f:48:
         6f:7c:6a:c8:ce:37:df:b8:85:e4:cd:0d:cb:e1:85:a5:c0:10:
         ff:8c:4b:64:e7:57:69:a0:2e:53:66:75:d7:c3:1d:d6:ad:fd:
         7c:5b:96:42:72:9e:04:62:bc:18:64:1c:a7:cf:d8:84:d7:ea:
         5a:5d:29:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:13:19 2025 by rpki-client