Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34352e302f32342d3234203d3e20323635303933.roa
File:                     3137392e3139312e34352e302f32342d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          +5NaMFmY/ghveU85+04t3twxtg6cpoLDESPesS27f+k=
Subject key identifier:   72:F2:D3:ED:B4:61:48:51:43:E3:78:20:31:CA:A4:26:E3:70:BF:7A
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       30926158080FADCF03903A58CFA0F8BCB87DE4E0
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34352e302f32342d3234203d3e20323635303933.roa
Signing time:             Wed 03 Sep 2025 00:19:56 +0000
ROA not before:           Wed 03 Sep 2025 00:14:56 +0000
ROA not after:            Wed 02 Sep 2026 00:19:56 +0000
asID:                     265093
IP address blocks:        179.191.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:92:61:58:08:0f:ad:cf:03:90:3a:58:cf:a0:f8:bc:b8:7d:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Sep  3 00:14:56 2025 GMT
            Not After : Sep  2 00:19:56 2026 GMT
        Subject: CN=72F2D3EDB461485143E3782031CAA426E370BF7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:cc:20:93:fa:51:97:d5:27:f4:8a:a0:a6:
                    d6:48:ca:ac:59:e9:8b:85:84:18:60:fc:f3:80:47:
                    5c:f6:78:7a:c4:e4:83:ab:f4:63:f6:7b:a1:eb:01:
                    43:e8:c0:47:52:02:44:d1:40:9b:9a:46:6b:93:a0:
                    f7:cb:95:fd:b8:01:dc:10:81:84:0e:4b:90:e2:61:
                    3c:65:6f:1e:ee:7d:87:93:5f:ba:15:72:1a:09:e2:
                    52:62:06:9a:aa:7e:ef:84:94:f3:32:a0:63:2a:c8:
                    b6:b5:88:11:b2:16:57:17:76:0a:3b:cb:61:9a:6b:
                    7d:21:64:87:fe:38:2d:88:a7:f0:dc:7f:24:a9:1a:
                    19:35:fc:15:9f:4b:a4:bb:15:05:77:93:9c:c2:c4:
                    e5:d4:8a:76:65:33:2d:a4:77:6b:86:7a:25:a6:58:
                    5c:08:7e:42:f1:ab:1a:dd:9f:c4:02:8d:ee:9f:af:
                    7b:b4:87:a9:2a:8e:07:3c:c6:70:c5:9e:a0:6c:6c:
                    ae:03:90:d1:a8:83:93:be:91:86:91:34:a4:48:c0:
                    56:82:fc:89:fd:97:41:c8:cb:ff:39:df:5f:15:93:
                    a1:7d:9b:91:2a:15:44:65:a6:f9:ea:98:f2:09:c3:
                    80:b2:21:c4:e6:95:03:61:08:c5:30:47:af:0b:57:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F2:D3:ED:B4:61:48:51:43:E3:78:20:31:CA:A4:26:E3:70:BF:7A
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34352e302f32342d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:e4:5f:32:0c:79:6b:36:21:c0:9b:7a:c1:58:b0:c9:38:1c:
         ca:29:18:a6:63:ed:b0:79:da:7e:4d:1e:73:e5:40:77:ec:2a:
         5c:a5:8c:07:83:e6:76:dc:55:a3:f9:1f:e4:7c:6e:17:7c:7c:
         53:3b:d4:f1:14:51:35:06:61:5c:e7:43:42:95:b5:1b:d1:32:
         51:b1:75:58:e9:df:3d:29:a6:d0:50:54:a4:c5:f6:4e:02:9d:
         21:1f:73:22:62:d8:a2:39:06:bd:55:a4:cf:29:70:38:a9:e9:
         c3:9c:e4:08:b2:a1:9f:c7:0e:95:11:59:cf:16:f5:87:f6:17:
         a5:d9:ef:3d:06:27:a7:60:53:38:a5:46:57:18:e8:56:67:f8:
         c8:a3:ea:29:a5:d7:9a:a0:03:dc:fa:51:9c:14:96:16:36:f4:
         e0:06:37:20:b4:c5:45:26:37:aa:89:ed:69:bd:31:3d:47:5a:
         d3:e9:37:33:f2:e7:33:24:56:c3:06:09:21:55:c2:c8:08:09:
         16:3b:d6:d8:5b:10:ca:fe:e0:08:f4:d3:18:41:ec:25:59:07:
         a3:41:f8:12:dd:d0:9f:66:f2:b8:ef:7a:3a:fd:26:5d:25:e8:
         c1:2c:2e:ec:e0:31:cd:03:36:75:7d:0f:35:93:8b:94:26:89:
         08:fa:27:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:12:56 2025 by rpki-client