Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa
File:                     3137392e3130362e39362e302f32302d3234203d3e203532353332.roa (raw, json)
Hash identifier:          DM3kIpSKmIFXJQvxQ2yFN78HH//WmLGUu08RyfPkSSg=
Subject key identifier:   2D:07:2A:52:9E:91:C1:7C:7E:35:84:C8:4A:32:DA:27:51:27:4F:EB
Certificate issuer:       /CN=EE6712BD730C01B9AA4855887395BD8974972E8E
Certificate serial:       3413FD719B596C9F378EB5BC64D586B83B02E990
Authority key identifier: EE:67:12:BD:73:0C:01:B9:AA:48:55:88:73:95:BD:89:74:97:2E:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE6712BD730C01B9AA4855887395BD8974972E8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa
Signing time:             Mon 01 Sep 2025 15:43:36 +0000
ROA not before:           Mon 01 Sep 2025 15:38:36 +0000
ROA not after:            Mon 31 Aug 2026 15:43:36 +0000
asID:                     52532
IP address blocks:        179.106.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/EE6712BD730C01B9AA4855887395BD8974972E8E.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/EE6712BD730C01B9AA4855887395BD8974972E8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE6712BD730C01B9AA4855887395BD8974972E8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:13:fd:71:9b:59:6c:9f:37:8e:b5:bc:64:d5:86:b8:3b:02:e9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6712BD730C01B9AA4855887395BD8974972E8E
        Validity
            Not Before: Sep  1 15:38:36 2025 GMT
            Not After : Aug 31 15:43:36 2026 GMT
        Subject: CN=2D072A529E91C17C7E3584C84A32DA2751274FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:19:f2:c1:42:b4:6e:06:5c:84:34:7d:ae:
                    a1:9a:c0:04:fa:fc:c1:ea:56:9f:ab:4c:44:f2:ab:
                    0c:18:eb:b0:8f:97:19:e9:77:7c:18:9e:8d:43:bb:
                    ad:dd:ed:37:a4:54:33:94:dc:fa:f5:2b:48:64:85:
                    d1:8a:ab:80:40:93:ee:de:dd:55:4b:2f:e0:d8:e9:
                    c1:57:1b:4d:81:41:eb:76:1c:52:8f:c7:91:61:59:
                    ba:3f:b9:a0:b3:51:a4:ef:af:73:08:59:34:b0:54:
                    cb:a9:d9:3a:84:82:a2:fa:d6:32:51:7e:17:a5:8e:
                    b9:24:e4:93:4a:87:d6:fd:8b:c5:ad:07:a3:c2:f4:
                    ab:dc:5e:2e:0d:f2:b4:79:28:86:cf:75:d4:c6:17:
                    5f:f0:49:79:fc:3d:37:9b:87:c1:09:d6:7f:d9:f3:
                    4f:70:a4:f7:2e:90:8e:0e:d3:e8:30:6c:ef:7b:02:
                    a6:e9:27:62:90:ad:19:ca:53:60:f7:f7:05:31:db:
                    be:7a:23:ea:f2:18:a5:0f:a2:9c:2e:1c:22:e9:39:
                    25:07:07:e9:ac:db:e8:fe:0b:88:83:82:2b:36:57:
                    91:0d:92:58:58:5b:ad:03:6e:2e:1f:c1:ab:a1:3b:
                    13:9c:f8:b0:5c:66:12:62:7d:44:04:31:ca:09:06:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:07:2A:52:9E:91:C1:7C:7E:35:84:C8:4A:32:DA:27:51:27:4F:EB
            X509v3 Authority Key Identifier:
                keyid:EE:67:12:BD:73:0C:01:B9:AA:48:55:88:73:95:BD:89:74:97:2E:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/EE6712BD730C01B9AA4855887395BD8974972E8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE6712BD730C01B9AA4855887395BD8974972E8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:ca:5b:92:7b:90:20:32:20:aa:4b:31:5f:44:15:8b:0b:c2:
         7d:9b:ba:08:5e:fa:76:8a:34:2d:f3:75:b0:f5:a9:5b:89:64:
         a3:75:d1:dc:9f:a4:f2:c5:85:b4:c7:b0:7b:cf:96:3b:0e:2d:
         99:db:54:61:e8:0a:aa:bd:e3:7a:e9:9c:4b:39:b4:9c:6d:76:
         1c:3c:1b:ab:d7:2e:41:df:a3:b1:3c:2e:db:45:b7:73:c3:f3:
         a7:66:af:a0:c4:a7:da:26:99:d2:9c:23:3b:fd:aa:0d:c3:a0:
         8e:c8:57:86:df:5d:96:cd:c1:50:fa:69:46:99:31:0a:f8:7a:
         c0:56:e9:d0:8b:13:52:78:d7:59:4c:97:41:9e:20:66:76:3a:
         fa:1d:c3:f7:bc:57:a4:b0:10:ca:14:f8:44:f3:b0:0d:9b:c6:
         34:cf:de:64:c1:99:cd:34:91:1b:a6:5e:b0:3e:79:cb:f0:4e:
         e1:17:d1:c2:43:73:16:c3:bc:8f:c2:eb:c4:32:af:76:b6:5b:
         7f:c6:6f:38:26:c1:b7:26:8b:b6:51:5a:aa:31:2a:86:0a:80:
         e3:bb:d9:f5:6a:6d:15:71:3c:ca:33:7c:6f:9e:4c:11:8e:8d:
         1f:9a:38:70:81:42:a1:ff:f7:8d:88:08:b8:27:93:a6:f3:18:
         1d:47:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:00:44 2025 by rpki-client