Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/3137392e34392e3231382e302f32342d3234203d3e20323731323235.roa
File:                     3137392e34392e3231382e302f32342d3234203d3e20323731323235.roa (raw, json)
Hash identifier:          bc0xywbRn4/bU4jQRPePkfdFpgDkAt3uC4fBC3xHIHo=
Subject key identifier:   A7:2F:DF:74:99:6C:58:51:EA:79:D0:D8:02:EE:BC:6F:6D:E9:49:24
Certificate issuer:       /CN=82A1D0DA8B4FFB7B678B97B08C62245A144810AF
Certificate serial:       3448DBD2F6F509CFC583EA195201E569354FEBA8
Authority key identifier: 82:A1:D0:DA:8B:4F:FB:7B:67:8B:97:B0:8C:62:24:5A:14:48:10:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/3137392e34392e3231382e302f32342d3234203d3e20323731323235.roa
Signing time:             Tue 02 Sep 2025 10:09:51 +0000
ROA not before:           Tue 02 Sep 2025 10:04:51 +0000
ROA not after:            Tue 01 Sep 2026 10:09:51 +0000
asID:                     271225
IP address blocks:        179.49.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.crl
                          rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:48:db:d2:f6:f5:09:cf:c5:83:ea:19:52:01:e5:69:35:4f:eb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82A1D0DA8B4FFB7B678B97B08C62245A144810AF
        Validity
            Not Before: Sep  2 10:04:51 2025 GMT
            Not After : Sep  1 10:09:51 2026 GMT
        Subject: CN=A72FDF74996C5851EA79D0D802EEBC6F6DE94924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:6d:65:fa:5c:39:28:dc:de:bc:6e:22:4b:
                    c7:40:7c:b4:31:70:da:14:e0:e6:56:81:66:f7:14:
                    d5:1d:33:33:c3:02:52:04:ea:0b:97:26:5d:4a:5e:
                    5a:0f:53:e8:fa:f5:fb:6e:ea:bd:91:2f:b7:d2:46:
                    04:61:53:92:ae:da:ac:90:6e:05:55:ee:9f:a9:6b:
                    f3:01:10:3c:0e:0d:a8:cd:ce:8b:71:a9:1d:54:88:
                    56:03:5c:23:ea:6b:c0:1c:5b:07:c3:bf:6a:6b:12:
                    02:53:a8:6e:51:a0:81:72:50:ec:e3:52:b4:75:33:
                    87:54:42:61:79:20:33:7f:49:b6:11:08:ed:e0:2c:
                    ee:d4:af:e3:90:5a:eb:82:3b:36:cf:f7:1d:90:8b:
                    55:56:4a:be:97:82:96:e6:c3:cd:d6:9f:d5:6b:8f:
                    15:89:25:a1:da:13:9d:97:32:9d:c6:26:93:15:ba:
                    01:f5:8c:b4:4b:c4:30:04:e0:0c:df:f8:c3:1f:99:
                    b7:87:f7:f9:68:d3:67:e9:27:82:77:c5:27:f9:ab:
                    fb:05:4b:79:6a:a7:fd:ed:95:ae:c4:a0:07:a9:0c:
                    0a:e2:d3:d9:9e:20:ec:1a:53:06:04:bb:ed:04:bf:
                    10:79:04:69:dd:22:55:3b:cc:63:e8:a9:a1:4a:2d:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:DF:74:99:6C:58:51:EA:79:D0:D8:02:EE:BC:6F:6D:E9:49:24
            X509v3 Authority Key Identifier:
                keyid:82:A1:D0:DA:8B:4F:FB:7B:67:8B:97:B0:8C:62:24:5A:14:48:10:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A1D0DA8B4FFB7B678B97B08C62245A144810AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9CyMxWqK4qVn71QdNoWUEeizAeN6uGedZU5238ELP8o/0/3137392e34392e3231382e302f32342d3234203d3e20323731323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:53:a3:6b:d5:97:7f:df:ad:83:99:57:6b:03:cb:62:01:63:
         87:3f:e3:d5:f2:c7:f9:05:20:cf:14:bf:cd:a3:68:00:7a:bf:
         04:3c:f8:05:5a:34:c7:da:3d:65:e4:87:07:d6:cb:41:b3:b8:
         88:d0:97:b1:85:ef:dd:ae:52:53:44:fd:fc:ca:cd:f1:7c:f6:
         bd:b9:28:4f:01:7a:55:f7:f8:16:24:cd:99:25:43:be:ca:c4:
         f8:b5:15:e7:9d:7e:6a:91:f3:fe:ac:1a:ff:ed:3e:7a:2a:d0:
         3b:b8:aa:98:f2:81:a8:c8:e2:02:4d:43:5c:65:69:94:7c:b9:
         ed:7b:1d:32:fb:af:94:0f:14:ef:fb:dd:ca:00:2e:8d:4b:49:
         4e:bc:0a:20:42:3d:ee:cb:4b:ad:2b:57:6f:ae:a3:1b:70:18:
         39:8e:a4:f7:59:6b:ff:3a:49:f3:f8:9a:98:a1:a0:3e:44:c1:
         a3:a3:06:f3:ca:ef:be:28:5a:15:c0:3e:04:f3:de:89:5d:c2:
         14:b0:8c:dd:d3:05:78:1b:d8:5d:24:85:bd:a9:60:3b:b3:f1:
         40:4a:2c:c4:f6:7f:55:24:83:99:5d:dc:07:66:ed:2f:7e:3f:
         0f:ab:98:02:21:41:9c:b9:37:92:b3:d9:41:67:68:d1:e9:6e:
         96:b9:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:48:44 2025 by rpki-client