Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39322e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39322e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          xuXQBJqPGBL2N0y0TdRa2RoNy347URuHhMgZOhpcKpo=
Subject key identifier:   0A:5E:62:59:82:8F:CD:56:E4:DA:58:23:B6:D6:BB:74:28:37:A7:64
Certificate issuer:       /CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
Certificate serial:       6B651C8D41606C2FE20EA551EB66F29FC3FDF630
Authority key identifier: 9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39322e302f32342d3234203d3e20323731363132.roa
Signing time:             Tue 27 Oct 2026 01:34:05 +0000
ROA not before:           Tue 27 Oct 2026 01:29:05 +0000
ROA not after:            Tue 26 Oct 2027 01:34:05 +0000
asID:                     271612
IP address blocks:        179.63.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 18:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:65:1c:8d:41:60:6c:2f:e2:0e:a5:51:eb:66:f2:9f:c3:fd:f6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
        Validity
            Not Before: Oct 27 01:29:05 2026 GMT
            Not After : Oct 26 01:34:05 2027 GMT
        Subject: CN=0A5E6259828FCD56E4DA5823B6D6BB742837A764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:f0:7a:07:c0:7b:95:c1:fb:5d:30:c0:5a:
                    75:6b:40:65:e9:15:25:48:8f:a3:a3:d6:9b:72:11:
                    f2:c8:87:75:33:91:ab:55:06:ef:34:83:df:d5:94:
                    d4:77:f4:2c:83:ad:e3:68:e9:6b:df:a0:f9:f0:68:
                    fd:8d:8e:e8:79:99:f6:ea:28:f2:0a:d5:fb:a6:7e:
                    e5:bd:1e:73:4f:a6:d1:4a:1c:23:ac:eb:e3:f4:2f:
                    8e:89:9e:5c:7a:c5:f2:1c:11:72:c6:59:55:e0:16:
                    84:9a:4a:36:cb:39:7f:75:5e:db:f6:63:50:a2:98:
                    e9:f2:a6:ff:6a:89:e8:ff:77:db:fb:2c:45:06:8a:
                    dc:99:fe:1e:64:ef:2d:fe:c1:f4:15:43:b7:b8:fd:
                    24:fc:f7:6f:2b:32:f3:80:c5:04:4f:a6:77:97:39:
                    60:5a:f4:37:39:44:64:1e:c5:b2:06:94:9a:f2:3d:
                    b3:f6:04:3c:c6:c0:ad:df:1b:a8:5a:fa:12:88:3a:
                    a9:b5:31:56:bd:00:25:9b:58:5b:64:42:ef:ff:8c:
                    75:1a:96:8e:43:8a:32:1e:ff:fb:14:02:a9:0b:96:
                    73:87:c8:24:df:b1:27:38:f7:fc:7c:2c:f0:e5:35:
                    8b:17:f3:2a:8e:c1:70:8b:58:c3:c9:a2:76:a8:b7:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:62:59:82:8F:CD:56:E4:DA:58:23:B6:D6:BB:74:28:37:A7:64
            X509v3 Authority Key Identifier:
                keyid:9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39322e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:dc:f5:36:d7:b7:77:ce:11:dd:a0:b6:a1:de:e1:27:f0:97:
         44:12:f3:67:06:e1:67:ef:28:a5:9c:83:a0:2f:c0:30:44:66:
         e3:3c:aa:93:7a:a7:4c:7d:b3:0c:74:56:0c:3a:09:49:8c:74:
         2a:e7:1d:4d:47:84:2d:55:56:3b:69:73:92:94:97:35:53:1d:
         f5:64:1d:54:c7:77:8e:67:98:59:5c:70:1e:19:ce:fe:98:53:
         6e:f1:01:48:54:7b:d1:2f:6f:24:07:8c:30:f4:66:7b:04:ba:
         64:ca:3f:53:7f:cc:1d:c0:70:1c:8c:12:2f:f7:c5:e0:22:c1:
         52:06:d7:7e:a7:5f:98:13:52:d9:4a:1b:b0:92:e1:d4:b2:1e:
         c9:1e:02:02:bb:7e:09:48:60:0c:65:f3:24:f8:48:f1:dd:bd:
         87:21:fe:cc:cf:b4:5b:9d:14:c2:28:fa:f4:c1:92:6a:d3:25:
         04:29:86:8d:2f:96:16:8e:37:1d:12:24:b4:28:bb:ff:cd:3a:
         92:d8:93:ed:8c:a4:c9:ca:2b:05:2e:48:8c:ff:a8:24:84:e7:
         01:42:c0:67:ca:f6:50:84:2c:6f:ed:84:f3:44:52:b1:49:64:
         7d:f9:af:29:20:7b:7a:bb:46:30:fb:7b:83:ec:78:20:4c:fa:
         fc:7f:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:23:30 2026 by rpki-client