Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34362e302f32332d3234203d3e20323635303933.roa
File:                     3137392e3139312e34362e302f32332d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          jD9+p9wfG/oT+P9FcyVK72iU4cmDvcfHQHGMC+om1jA=
Subject key identifier:   93:03:23:FB:67:F6:A7:A0:55:B8:95:05:27:21:32:62:23:2B:2B:12
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       3B5A83A07A06862AE9026CC02E1DA05E769A64F4
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34362e302f32332d3234203d3e20323635303933.roa
Signing time:             Tue 02 Sep 2025 22:19:56 +0000
ROA not before:           Tue 02 Sep 2025 22:14:56 +0000
ROA not after:            Tue 01 Sep 2026 22:19:56 +0000
asID:                     265093
IP address blocks:        179.191.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5a:83:a0:7a:06:86:2a:e9:02:6c:c0:2e:1d:a0:5e:76:9a:64:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Sep  2 22:14:56 2025 GMT
            Not After : Sep  1 22:19:56 2026 GMT
        Subject: CN=930323FB67F6A7A055B8950527213262232B2B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:69:5d:f7:78:ef:15:55:23:1b:f6:cd:bb:
                    64:d8:c8:a4:e1:f3:6e:44:00:8a:9a:d9:ea:5e:7c:
                    85:63:05:aa:10:c6:cb:f1:a8:37:72:c8:67:b5:e8:
                    8c:71:75:c6:52:15:22:93:4e:a9:9e:06:3b:56:3d:
                    40:dd:ae:d8:f7:83:08:48:67:44:8e:e4:d4:72:f8:
                    58:10:b1:a7:49:2d:9c:2a:54:a9:ba:77:c6:af:46:
                    21:ad:c1:57:b3:ef:0a:76:99:e8:85:54:53:68:4a:
                    df:81:19:3c:ea:64:17:61:3d:14:31:89:43:50:3a:
                    8a:09:03:02:dc:05:2e:ca:1f:de:90:07:0a:a1:d9:
                    f1:00:97:ea:ea:95:f5:0a:26:f3:0e:2e:32:cd:4e:
                    6b:66:db:fb:b2:78:9c:37:9e:b5:02:69:20:f4:89:
                    e4:22:1f:cd:f6:89:16:35:6d:80:3e:1f:67:a0:7f:
                    2b:67:91:42:f7:90:61:a4:2d:52:78:a8:60:18:be:
                    99:7f:c2:82:9f:3f:32:07:ad:fb:da:9a:5c:d4:18:
                    d1:55:b8:c3:32:d2:a4:68:a1:cb:c4:8d:75:ae:f1:
                    9b:e8:f7:54:df:9f:a7:58:84:d1:ae:87:39:69:21:
                    f2:71:a6:e2:25:82:42:49:f6:c5:6c:ae:5f:15:4a:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:03:23:FB:67:F6:A7:A0:55:B8:95:05:27:21:32:62:23:2B:2B:12
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137392e3139312e34362e302f32332d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:c6:91:b1:0f:e3:ac:fc:3d:5a:59:14:26:94:45:e9:32:
         bb:6a:9c:07:d4:92:31:19:96:7a:18:49:c3:02:f1:05:c3:b1:
         16:76:34:a2:49:a6:b6:4f:46:2d:cd:b4:81:72:15:f4:71:09:
         d9:02:e2:36:bf:3c:19:d9:c9:ab:39:e3:b3:a5:a2:c5:ed:c3:
         7f:39:fc:07:8e:2e:cd:aa:52:df:de:40:5e:2d:9d:b0:e2:d6:
         c6:7d:af:2a:28:28:09:0d:bd:37:30:78:70:5b:94:ca:b7:d3:
         40:aa:b8:b0:cc:8a:49:bd:f8:7c:d7:d3:33:ea:50:95:a2:b1:
         38:14:8f:a2:1d:4e:19:d4:4a:56:7a:b1:ec:e2:0a:60:cf:dd:
         57:76:f7:56:04:ef:5a:04:61:c1:11:08:02:7d:21:8e:a2:3a:
         6f:f3:ab:da:3a:bd:36:cd:72:73:75:0a:c4:ad:b0:bd:eb:c2:
         b5:91:7a:1b:e0:76:ae:1c:b4:1d:c9:36:37:13:41:8b:41:3e:
         ec:47:19:fd:e1:14:a1:b7:2b:68:8d:aa:9e:34:8d:40:14:0c:
         1f:ab:88:f0:3a:39:52:70:ca:d8:cb:aa:52:c9:3e:3b:a2:17:
         1f:64:b2:88:79:38:64:62:11:65:d5:92:67:53:8d:6a:09:69:
         66:af:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:14:56 2025 by rpki-client