Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132302e302f32332d3332203d3e20323731343738.roa
File:                     3137392e302e3132302e302f32332d3332203d3e20323731343738.roa (raw, json)
Hash identifier:          WRMwWEcrm2gR+d9XA0A18fWo2iP2mg0ySnpNxKHGqMw=
Subject key identifier:   5D:E8:53:AB:F5:99:7B:D2:0B:E3:CC:D9:F8:FF:5C:84:C5:EC:D3:E5
Certificate issuer:       /CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
Certificate serial:       2C28E3BE56031A32DB427BEE3A36B1CEE5562E3D
Authority key identifier: 0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132302e302f32332d3332203d3e20323731343738.roa
Signing time:             Wed 23 Sep 2026 16:59:20 +0000
ROA not before:           Wed 23 Sep 2026 16:54:20 +0000
ROA not after:            Wed 22 Sep 2027 16:59:20 +0000
asID:                     271478
IP address blocks:        179.0.120.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:28:e3:be:56:03:1a:32:db:42:7b:ee:3a:36:b1:ce:e5:56:2e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
        Validity
            Not Before: Sep 23 16:54:20 2026 GMT
            Not After : Sep 22 16:59:20 2027 GMT
        Subject: CN=5DE853ABF5997BD20BE3CCD9F8FF5C84C5ECD3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:d9:5e:31:c4:44:da:f6:4d:2a:37:d1:c7:
                    b5:84:77:8a:20:3d:6e:c7:d7:5b:05:68:8d:74:63:
                    ed:93:24:4d:0a:af:02:16:9c:93:06:bb:96:ac:f7:
                    ef:e1:c8:cf:b4:08:1f:dc:2d:cb:25:19:78:cd:74:
                    53:44:17:6c:5d:ba:5d:4f:20:b1:9d:ad:4f:63:21:
                    ba:8b:05:e9:10:9e:04:f6:49:e8:fd:69:ef:35:af:
                    20:2d:05:35:80:4d:cb:ff:1d:d9:2e:f8:87:3c:a7:
                    fa:29:c0:3e:0c:96:83:e9:73:cb:bc:73:2a:e2:2d:
                    8d:8a:58:a5:ad:68:bb:2e:8f:61:92:bb:c1:9f:00:
                    56:c6:9f:77:0e:b1:40:52:8d:96:3d:cd:98:d8:a8:
                    f1:02:dc:62:f9:6b:ae:22:90:bc:71:77:bf:f8:ab:
                    a9:24:b4:0b:a8:70:4c:e7:23:77:f9:cd:95:cd:28:
                    40:93:86:2d:35:57:30:f0:ec:ff:80:00:bc:1e:22:
                    a1:8a:f6:69:83:a3:39:a1:75:39:03:36:7e:80:b6:
                    82:c9:14:6b:74:b6:8d:78:43:20:74:f8:b1:1e:b5:
                    6a:ce:c6:4f:4b:3f:b6:d0:a9:31:3a:c2:b0:c3:da:
                    70:18:49:c4:83:97:83:ec:b2:41:bf:23:44:87:b8:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E8:53:AB:F5:99:7B:D2:0B:E3:CC:D9:F8:FF:5C:84:C5:EC:D3:E5
            X509v3 Authority Key Identifier:
                keyid:0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132302e302f32332d3332203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:e4:4d:f3:60:63:c2:98:e2:14:f0:0e:c4:6b:f1:41:e8:
         c5:c3:17:77:69:c9:1a:47:f4:96:af:a0:3e:96:50:82:20:87:
         7f:5b:e1:4d:ce:7f:8f:b4:54:9d:c7:f9:cb:8c:e8:32:85:8a:
         e7:0f:c5:ee:f6:9d:4e:63:9e:82:e1:7e:2d:b4:da:0a:65:c8:
         d3:88:6f:50:cc:71:93:4d:a4:f2:ca:4c:c1:ad:89:da:08:c5:
         e5:d4:fc:2d:b7:50:06:83:ff:8b:c3:22:a9:66:a4:6a:a3:a2:
         b5:1f:b0:17:b6:3f:65:57:9c:6d:ef:3a:24:cf:55:e9:8c:4f:
         4b:f3:e0:68:29:30:2e:3d:a6:29:b1:f9:00:91:81:fc:9c:5a:
         c2:ec:d2:46:35:1f:d7:49:2f:d9:1a:b1:70:73:a1:ad:fd:be:
         7b:b0:a7:41:71:66:4a:06:9a:c2:49:26:eb:8b:1b:a7:d2:78:
         fa:86:33:de:b0:ad:96:dd:d8:db:12:26:3e:88:a4:00:5f:4e:
         22:e1:60:19:3b:48:20:5f:01:98:a1:ae:f0:13:16:64:62:ab:
         7c:9f:ab:6c:0e:85:bc:27:31:9e:18:49:02:34:cc:07:fb:58:
         aa:0f:1e:28:46:17:d9:fa:b2:4d:f2:f3:84:0b:4d:c4:4c:14:
         e1:69:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:32:48 2026 by rpki-client