Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32332d3233203d3e20323731303934.roa
File:                     3137392e34382e3138302e302f32332d3233203d3e20323731303934.roa (raw, json)
Hash identifier:          nKgQ4L1DG5leY0TU1pspdVK/Zzwhs+kxQ58pmoTyppc=
Subject key identifier:   33:9E:B8:71:84:B5:99:9A:DC:30:26:07:B2:46:39:DC:06:98:E0:62
Certificate issuer:       /CN=3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C
Certificate serial:       7710F66BB05CC6DF78C349B539F523C471290528
Authority key identifier: 3F:10:31:B9:B7:E6:E1:FE:5D:60:32:D2:49:D6:30:EE:DB:24:C8:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32332d3233203d3e20323731303934.roa
Signing time:             Tue 02 Sep 2025 17:49:27 +0000
ROA not before:           Tue 02 Sep 2025 17:44:27 +0000
ROA not after:            Tue 01 Sep 2026 17:49:27 +0000
asID:                     271094
IP address blocks:        179.48.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.crl
                          rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 23:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:10:f6:6b:b0:5c:c6:df:78:c3:49:b5:39:f5:23:c4:71:29:05:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C
        Validity
            Not Before: Sep  2 17:44:27 2025 GMT
            Not After : Sep  1 17:49:27 2026 GMT
        Subject: CN=339EB87184B5999ADC302607B24639DC0698E062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:d8:34:88:79:61:df:86:60:4e:56:58:8b:
                    f4:29:13:c9:b4:f0:8a:4f:ea:54:d6:1c:35:f5:1a:
                    2c:d1:21:35:b9:75:31:7d:99:56:0b:02:84:64:93:
                    e8:da:67:a8:f8:ca:f7:21:75:66:b9:db:70:6f:b7:
                    10:a2:8f:7d:28:5a:8a:2a:0a:7f:fa:a5:b3:d1:56:
                    57:c2:c2:7d:53:c3:b4:d3:ab:ea:12:e2:d6:c7:e5:
                    ef:5e:02:bd:e9:3b:65:5b:ee:58:69:46:d0:1e:91:
                    a2:26:b1:4e:94:6b:d7:e0:a1:cd:a9:00:01:0e:47:
                    a8:a4:62:b8:05:54:4c:01:82:a4:9a:bd:9a:a8:f0:
                    b8:fa:4e:00:8f:df:cc:47:bb:26:d4:26:dd:bf:8d:
                    3b:1c:85:c5:b1:52:71:88:cd:93:ab:20:ae:fc:74:
                    ba:20:38:33:32:a1:f3:70:7f:94:63:a6:0a:27:55:
                    82:a2:90:76:7a:85:34:2c:07:28:35:17:94:1e:91:
                    fe:2b:05:80:32:77:51:db:16:8c:ae:46:bf:f0:49:
                    0c:22:db:80:db:a9:44:1b:7f:8a:fb:29:be:a9:ef:
                    11:cf:5d:92:b0:e3:81:42:30:57:25:b9:e4:fb:c2:
                    64:84:ec:c2:af:5b:bb:bd:39:5a:7a:08:b4:34:a2:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9E:B8:71:84:B5:99:9A:DC:30:26:07:B2:46:39:DC:06:98:E0:62
            X509v3 Authority Key Identifier:
                keyid:3F:10:31:B9:B7:E6:E1:FE:5D:60:32:D2:49:D6:30:EE:DB:24:C8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32332d3233203d3e20323731303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:ab:02:94:eb:9a:2a:a9:c0:c9:a0:e1:be:4d:81:12:89:40:
         b2:23:e8:52:05:49:30:6c:4f:4e:a9:68:b2:62:87:a8:78:f8:
         93:2b:53:50:63:10:60:30:c2:96:83:e3:29:98:88:7d:20:1d:
         00:90:e2:a0:76:a9:c4:a2:e5:d8:a2:84:a3:94:37:ae:fe:5a:
         ed:11:c4:bc:a3:4e:fb:f0:30:8b:31:a2:36:c7:13:c3:9a:69:
         e1:ab:d0:5f:dc:e9:3f:cf:02:ef:33:b8:8c:98:35:45:98:ed:
         9e:a1:c7:54:a9:b6:e0:2b:ba:8a:40:90:dd:b4:fd:97:ef:3b:
         7c:c9:87:c8:71:9b:3d:ab:98:50:de:20:61:0b:65:91:45:0b:
         4d:20:e8:38:89:04:b7:83:bb:30:73:bd:c5:eb:fa:3e:c1:b2:
         a1:6e:4c:24:6f:61:5c:fa:0a:10:d4:ae:25:cd:6f:90:24:dc:
         d1:0e:79:d9:7c:bc:02:b6:90:8a:73:d6:ec:a6:9f:d3:62:3e:
         ee:32:fa:64:ad:6e:79:3c:6e:fb:7b:ac:45:7f:a5:8c:f6:25:
         25:69:bd:7a:56:19:f9:c7:66:8c:77:6d:32:57:af:bc:60:ae:
         c5:7f:ab:ed:15:0c:17:4b:38:03:08:cf:c4:a8:f2:45:b8:f9:
         e6:3c:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:52:54 2025 by rpki-client