Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39332e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          SeNpaA3493UtcReUAZ2738EWXG4kmJUhw+WpO/gfY0M=
Subject key identifier:   E8:A3:F1:C3:D5:7D:8A:82:A6:1F:3A:91:AE:C3:44:82:FB:6E:D7:AB
Certificate issuer:       /CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
Certificate serial:       0AB426E6EC466EDF02D515B9EBF39CDFAAA74428
Authority key identifier: 9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
Signing time:             Tue 27 Oct 2026 01:34:08 +0000
ROA not before:           Tue 27 Oct 2026 01:29:08 +0000
ROA not after:            Tue 26 Oct 2027 01:34:08 +0000
asID:                     271612
IP address blocks:        179.63.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 23:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b4:26:e6:ec:46:6e:df:02:d5:15:b9:eb:f3:9c:df:aa:a7:44:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
        Validity
            Not Before: Oct 27 01:29:08 2026 GMT
            Not After : Oct 26 01:34:08 2027 GMT
        Subject: CN=E8A3F1C3D57D8A82A61F3A91AEC34482FB6ED7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:2e:4d:d8:b7:93:e2:0d:75:82:e1:c8:4a:
                    f8:38:5c:9d:74:e4:96:91:67:74:7a:24:2a:1b:1e:
                    85:53:4e:67:64:70:5a:6d:54:e7:a5:08:d6:16:25:
                    9d:b8:d6:3a:2c:1d:df:20:3b:7c:18:d0:c4:d2:50:
                    0b:d9:12:81:d3:f0:f8:be:51:f5:a4:c9:0a:e2:8b:
                    e4:48:c4:26:ce:4f:b1:03:11:8f:ad:a9:a9:aa:78:
                    5f:22:69:ad:00:65:9e:bd:1f:09:76:dc:a8:1b:72:
                    b9:2d:bd:3c:f0:db:cd:69:00:d7:32:24:f5:cb:2c:
                    d1:35:9d:af:e3:a3:84:57:41:6d:45:6b:f8:5b:0f:
                    04:a5:ee:0c:cd:c4:6c:64:16:a9:3f:22:c4:ba:ae:
                    15:85:a7:e2:0b:43:a1:f2:a4:9c:f9:39:1d:ce:45:
                    6d:54:1e:6d:f8:13:70:0b:13:17:b6:a1:a5:b1:3e:
                    77:55:8c:c1:28:bb:5d:c8:42:b9:5d:b9:df:75:cc:
                    b7:2c:de:7a:68:bd:20:5e:30:ad:4a:71:9c:ce:e4:
                    25:4e:4d:03:2d:76:a8:45:c0:f0:81:1c:f5:98:8d:
                    5d:41:ee:60:e6:50:56:26:0c:c3:b4:2f:fc:43:28:
                    4e:3a:84:9b:ee:a9:91:f8:d7:74:0b:84:cb:0b:c9:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:F1:C3:D5:7D:8A:82:A6:1F:3A:91:AE:C3:44:82:FB:6E:D7:AB
            X509v3 Authority Key Identifier:
                keyid:9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:20:fd:ad:2d:23:54:80:05:95:76:f0:3e:00:db:37:79:
         e7:9a:98:11:fb:0b:15:10:19:71:68:33:e3:28:93:41:ba:5a:
         5f:8b:5b:bb:d1:65:80:5e:b8:ef:61:f3:95:74:5d:02:79:50:
         46:51:66:3d:31:4a:e6:13:83:02:cc:17:f3:43:11:66:49:19:
         80:2a:ea:31:27:a9:b0:f9:30:46:dd:b5:40:83:05:b8:2c:02:
         c2:9c:b4:f5:2a:3b:db:e5:c6:a3:16:0b:bb:cb:cd:d9:6a:13:
         34:8e:5f:aa:46:66:e3:f8:1a:84:dd:db:89:28:c6:ea:ed:03:
         ac:f3:43:39:29:ae:af:f6:46:1a:ef:ea:79:f7:f0:a9:f6:34:
         9d:77:2d:ee:5f:ff:6e:ba:3f:29:90:b0:f2:7d:17:93:d7:3f:
         20:e7:1a:e4:4c:70:3b:1f:2a:39:57:8c:f6:d0:41:9a:db:6a:
         fd:51:f1:9f:5b:0c:0b:91:0d:ec:52:87:31:0a:ff:6f:b4:a0:
         62:b6:7e:f3:cb:11:34:f6:87:b3:16:21:f0:65:f5:90:e1:3e:
         2f:c9:73:30:a2:05:b1:80:a0:1b:b2:b0:9e:09:bc:12:f9:34:
         33:e0:1b:ae:5c:26:40:bb:ce:38:0a:11:8b:fb:26:a0:ef:bc:
         c5:67:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:19:06 2026 by rpki-client