Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38362e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          dbAsN08fXpioH/SKr/9Lm74T/CgJJw26EFJ3HY73NSs=
Subject key identifier:   61:25:A0:AF:6B:65:75:A9:34:8B:7C:F2:56:77:6C:1E:26:35:46:F5
Certificate issuer:       /CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
Certificate serial:       010F719649676075BB8AE931413D1F0F3D3741B3
Authority key identifier: 3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa
Signing time:             Fri 12 Sep 2025 02:41:53 +0000
ROA not before:           Fri 12 Sep 2025 02:36:53 +0000
ROA not after:            Fri 11 Sep 2026 02:41:53 +0000
asID:                     272677
IP address blocks:        179.63.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0f:71:96:49:67:60:75:bb:8a:e9:31:41:3d:1f:0f:3d:37:41:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
        Validity
            Not Before: Sep 12 02:36:53 2025 GMT
            Not After : Sep 11 02:41:53 2026 GMT
        Subject: CN=6125A0AF6B6575A9348B7CF256776C1E263546F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:44:ee:26:3d:dc:b1:25:0b:35:72:b9:9d:
                    97:c3:09:b8:5e:fe:cc:b4:d1:4b:79:d7:86:58:5d:
                    3e:ec:37:b9:87:e3:ce:55:0d:d7:b2:9f:1f:a1:04:
                    e4:dd:d2:fd:4a:04:57:de:10:65:0f:59:a9:0e:2f:
                    e8:a3:f7:3b:7b:fc:b8:3f:2b:8e:d6:91:da:b5:39:
                    cb:10:09:77:cf:cf:69:b2:ca:49:09:8e:ab:3c:84:
                    ad:e5:27:fa:14:db:c2:d6:1a:a0:34:20:0e:95:f3:
                    6e:d2:3a:84:6b:d4:d8:7a:22:5f:e2:c9:7d:15:6f:
                    5e:63:92:f1:f0:7a:fe:e3:ad:31:1c:e1:76:b6:39:
                    3f:8e:1f:8c:ea:9d:bc:c6:df:f8:7c:bc:60:4a:3e:
                    04:34:fb:0c:9d:77:b7:01:b7:2e:1e:15:91:41:2d:
                    8d:83:22:09:40:2d:31:88:02:66:90:3d:59:9a:0e:
                    b4:87:8e:c7:8c:b1:28:4f:fc:70:c0:4c:c7:52:a9:
                    ce:a8:a4:68:da:b3:55:41:75:63:6f:dc:11:c7:68:
                    68:3b:08:b0:c3:c1:dd:bf:03:d3:a1:e1:9e:04:74:
                    56:a8:16:0d:f4:2c:2a:ad:fb:25:f8:47:1f:e0:21:
                    3f:b1:c5:8d:80:52:aa:04:dd:ba:f4:43:96:67:72:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:A0:AF:6B:65:75:A9:34:8B:7C:F2:56:77:6C:1E:26:35:46:F5
            X509v3 Authority Key Identifier:
                keyid:3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:7c:f3:3d:5d:60:90:91:ba:4b:98:f9:44:fa:d3:ea:b7:d7:
         4d:c7:2b:4c:2d:66:ca:e2:d1:b3:a4:db:19:29:25:82:13:1c:
         08:c4:5a:7e:89:cc:4a:78:b6:9f:9b:a6:ef:1a:e7:93:23:db:
         ba:81:3c:a2:7e:81:8f:5b:b5:d9:94:f1:33:84:35:b9:fa:a3:
         c6:0b:5c:6e:42:c6:22:8e:27:1b:68:39:08:5f:14:62:8b:8c:
         f7:36:14:98:63:b5:dd:1c:48:91:10:f2:08:bb:da:01:b1:32:
         eb:4e:8b:fc:cb:cf:b3:54:a9:be:71:4c:06:ea:10:e7:c8:ea:
         1f:b8:51:75:bc:85:f1:ec:c4:21:91:1b:28:59:3b:b2:42:64:
         b4:86:62:a3:5a:20:d1:b7:33:14:12:67:33:b5:0d:33:9e:dd:
         14:0f:ef:bb:42:c4:d0:5f:f4:dd:5d:e8:d7:33:85:39:d2:10:
         f7:a7:40:57:c8:ab:0b:27:04:1d:0f:7c:89:d0:40:b5:a5:be:
         83:c7:59:2e:a4:e0:f5:26:e3:ce:12:bb:6c:a8:af:a6:12:0e:
         9e:02:ef:64:97:db:79:4e:31:7b:b0:6f:51:41:4c:25:33:2d:
         e2:33:13:f2:e6:c0:eb:b5:e4:67:8e:a3:1c:12:ea:cb:0c:9a:
         40:7a:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:31:48 2025 by rpki-client