Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa
File:                     3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa (raw, json)
Hash identifier:          s1WdJOClXVwpnjW/xYzftLVNtF7BS0W/Qu+rC8c2dsA=
Subject key identifier:   B9:E4:39:72:FC:10:16:9A:72:78:FC:A6:95:57:B4:79:96:0C:1E:AF
Certificate issuer:       /CN=FEFB6417C2C38F6B002334D5A317B320F0C140D9
Certificate serial:       38AA2B292E3AFFDFC3C9509D4A1FD6C3CDD1F0F2
Authority key identifier: FE:FB:64:17:C2:C3:8F:6B:00:23:34:D5:A3:17:B3:20:F0:C1:40:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa
Signing time:             Fri 23 May 2025 14:06:26 +0000
ROA not before:           Fri 23 May 2025 14:01:26 +0000
ROA not after:            Fri 22 May 2026 14:06:26 +0000
asID:                     271094
IP address blocks:        179.48.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.crl
                          rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 17:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:aa:2b:29:2e:3a:ff:df:c3:c9:50:9d:4a:1f:d6:c3:cd:d1:f0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFB6417C2C38F6B002334D5A317B320F0C140D9
        Validity
            Not Before: May 23 14:01:26 2025 GMT
            Not After : May 22 14:06:26 2026 GMT
        Subject: CN=B9E43972FC10169A7278FCA69557B479960C1EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:57:0d:31:03:2f:0f:e2:fe:4e:27:06:aa:
                    f9:04:b4:55:67:91:dd:12:63:01:bc:c5:aa:10:ed:
                    f6:34:19:10:2b:ec:79:06:7c:69:99:42:4d:b6:2b:
                    00:17:af:c6:c5:bf:da:3b:c7:81:64:94:3f:d3:ff:
                    d4:4f:6b:d1:ae:62:77:85:08:12:7b:26:4c:f1:5d:
                    b9:f0:eb:63:9a:a0:26:14:89:5a:01:cd:e3:ce:5d:
                    1e:aa:c4:6d:c8:7c:9b:eb:4b:58:59:f2:73:50:c5:
                    70:00:3b:c7:b4:af:73:7c:84:19:a4:e3:43:35:b8:
                    6c:61:c9:85:fb:b6:5b:e4:29:8e:4f:30:1f:f9:0b:
                    98:da:d2:2f:d1:dc:5b:77:50:47:c6:cd:a8:39:52:
                    75:47:a9:a6:c8:31:86:96:10:15:20:ba:a8:56:0d:
                    4f:ad:a6:1c:34:82:d6:64:e8:ab:f4:11:08:4e:2a:
                    2d:0e:b1:0a:87:b2:0a:fe:54:de:83:ea:f9:62:2c:
                    32:40:1b:68:9a:e3:9d:fa:fa:8b:7e:0c:72:05:a9:
                    86:59:84:8f:82:cc:2d:00:e0:90:97:f9:8f:17:20:
                    c0:6d:9f:7a:7e:99:28:ce:29:56:5d:88:c7:ae:2f:
                    f3:ad:6a:15:9f:e4:36:d4:fc:b9:4d:85:e5:f8:21:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E4:39:72:FC:10:16:9A:72:78:FC:A6:95:57:B4:79:96:0C:1E:AF
            X509v3 Authority Key Identifier:
                keyid:FE:FB:64:17:C2:C3:8F:6B:00:23:34:D5:A3:17:B3:20:F0:C1:40:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:d6:25:ab:38:5c:5f:d1:88:75:46:a3:04:d8:a9:54:39:9e:
         80:da:56:20:05:d8:34:de:6a:95:58:0a:a9:83:fd:04:1b:25:
         16:8a:73:89:de:d0:ba:1d:f0:98:e9:36:e5:01:82:4f:34:69:
         cc:b6:37:e6:29:5d:f0:d6:fb:fb:4e:44:72:44:85:bd:56:dd:
         73:8d:1c:76:97:c6:a5:3f:b5:51:a5:43:2a:41:b9:83:1c:ba:
         61:dd:68:ba:23:4b:d2:b4:22:96:e7:fe:51:b2:7f:7d:2e:d8:
         22:06:e5:6c:5f:77:31:b4:d3:cb:45:b9:25:4d:9a:8c:0e:f1:
         46:29:3c:8a:ce:e7:04:6e:74:32:e4:63:ef:dd:80:ac:24:6c:
         95:d0:4f:3e:4e:c3:59:2d:87:af:a7:9c:56:12:d2:24:a9:eb:
         40:28:58:94:ac:e0:97:74:93:ed:09:a5:da:d7:59:33:17:74:
         98:c5:c4:a1:f8:9a:c9:5c:e9:b4:58:ba:8c:44:4d:ea:c0:e6:
         37:fe:35:d2:a8:ae:1a:c3:b7:6b:ca:33:a0:de:f3:b5:32:21:
         6d:5e:fe:16:e7:fa:fd:97:7c:0a:cc:92:06:64:52:17:d7:83:
         48:40:0b:87:12:ac:2e:94:1d:95:21:f1:d5:9d:ce:84:c4:2a:
         c2:43:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:57 2025 by rpki-client