Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/3137392e34392e3231362e302f32342d3234203d3e20323731323235.roa
File:                     3137392e34392e3231362e302f32342d3234203d3e20323731323235.roa (raw, json)
Hash identifier:          qB2Mk/YhG8kzLq0NkGPcVtguIrXJ9XD+//CgX0CjK24=
Subject key identifier:   2E:E0:38:B0:53:D0:DE:0A:C5:2D:1F:B3:0A:6F:B9:B9:E9:16:0C:8C
Certificate issuer:       /CN=82A1D0DA8B4FFB7B678B97B08C62245A144810AF
Certificate serial:       135CB5CB9EDB258531E0AADC011BEB0E5B43891C
Authority key identifier: 82:A1:D0:DA:8B:4F:FB:7B:67:8B:97:B0:8C:62:24:5A:14:48:10:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/3137392e34392e3231362e302f32342d3234203d3e20323731323235.roa
Signing time:             Tue 02 Sep 2025 10:09:51 +0000
ROA not before:           Tue 02 Sep 2025 10:04:51 +0000
ROA not after:            Tue 01 Sep 2026 10:09:51 +0000
asID:                     271225
IP address blocks:        179.49.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.crl
                          rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5c:b5:cb:9e:db:25:85:31:e0:aa:dc:01:1b:eb:0e:5b:43:89:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82A1D0DA8B4FFB7B678B97B08C62245A144810AF
        Validity
            Not Before: Sep  2 10:04:51 2025 GMT
            Not After : Sep  1 10:09:51 2026 GMT
        Subject: CN=2EE038B053D0DE0AC52D1FB30A6FB9B9E9160C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:0d:24:e9:5d:a3:0c:4c:23:7d:b8:2b:18:
                    92:7d:4d:7a:d5:e0:23:95:d1:e2:a4:6a:7f:a3:52:
                    3c:ea:8e:46:7d:ad:61:d9:6c:7c:12:72:ba:2a:02:
                    5d:13:ef:07:de:b9:9b:71:ee:06:99:9b:ed:38:96:
                    6a:77:26:a5:be:8e:1a:ad:82:57:8a:94:fb:db:90:
                    c9:fa:7c:16:ca:dc:93:9d:62:59:cb:4b:81:2e:68:
                    c1:a4:6b:d6:88:90:50:f1:3d:d6:c9:73:1d:b9:58:
                    fb:dd:2b:f0:ea:a5:7c:78:99:9f:69:65:09:8b:a1:
                    b3:f4:f4:eb:68:a6:4d:fe:b1:3e:55:37:da:e3:85:
                    66:1a:95:f3:aa:14:49:03:95:2f:f8:15:07:53:0f:
                    c8:b2:75:b2:b5:b2:cb:b0:e8:08:ac:6a:ba:27:02:
                    fe:a2:ae:0f:af:ef:86:50:4c:cc:49:12:90:fe:4d:
                    40:1f:56:11:55:5a:4a:2a:aa:89:38:be:10:74:b6:
                    fd:d5:03:7b:60:67:f4:b4:99:85:65:21:b3:df:f0:
                    cc:56:b1:8e:3a:03:d7:4d:dc:a1:1c:dd:40:6f:5d:
                    88:8f:d0:ba:df:29:4a:4f:aa:21:f8:ae:e9:3d:58:
                    2f:95:56:65:61:87:63:68:e8:06:0a:aa:5b:97:db:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E0:38:B0:53:D0:DE:0A:C5:2D:1F:B3:0A:6F:B9:B9:E9:16:0C:8C
            X509v3 Authority Key Identifier:
                keyid:82:A1:D0:DA:8B:4F:FB:7B:67:8B:97:B0:8C:62:24:5A:14:48:10:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/3137392e34392e3231362e302f32342d3234203d3e20323731323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:72:5a:4a:f6:7c:86:68:1a:f9:c7:ad:31:73:b0:76:eb:02:
         a2:33:bc:cb:3b:f1:ac:c5:d7:19:86:e6:09:a7:3e:ce:fb:9c:
         c6:99:de:cc:67:72:2e:f1:34:e0:b8:c8:d6:e5:4a:97:2a:61:
         7b:3e:e2:52:47:1e:7c:40:47:4c:54:0b:7f:66:90:70:9c:ab:
         7c:ba:0b:a8:81:9a:28:8c:2c:a8:b4:02:36:2f:4a:02:70:91:
         15:db:84:87:2d:2f:cd:4e:56:a9:84:18:2f:f1:8f:10:35:92:
         25:12:7f:97:87:26:3e:a8:06:14:e1:fb:3a:06:51:c0:c3:ba:
         e5:3e:83:f2:3a:3e:a4:1a:3d:8e:d9:5f:ab:1a:6f:91:2b:ec:
         c0:25:9a:0a:d2:b8:ab:c7:41:9d:4a:ff:04:51:f2:f1:7a:ab:
         56:c1:c4:f5:8b:34:bb:f1:47:35:11:ce:00:ec:10:a7:4f:21:
         16:1e:f7:7d:84:0a:46:1d:b2:cf:c6:bc:79:d4:87:98:1f:4c:
         36:53:dc:41:f5:b7:cd:1c:e8:8f:5a:f5:77:c4:47:78:d2:37:
         e7:ed:87:5a:08:d7:38:5a:be:ba:51:69:a4:e6:6c:93:3c:c3:
         69:f5:b4:d8:d9:6d:70:cf:a8:19:e9:a3:5a:74:0b:6e:a3:ce:
         c0:df:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:19:45 2025 by rpki-client