Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa
File:                     3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa (raw, json)
Hash identifier:          unIMXu0Ah9Z8nlF1d6QV3CTcwYF9wVvLxeo+ErSG/pc=
Subject key identifier:   39:6B:C3:8B:29:B9:C4:1E:25:7D:AB:A6:77:74:F5:E6:18:D8:B5:F9
Certificate issuer:       /CN=282E2E0A3EBA1DFB726703031B1F892156163C4D
Certificate serial:       1DF8866333104736A7DDAAE810B329D8D61EBCB8
Authority key identifier: 28:2E:2E:0A:3E:BA:1D:FB:72:67:03:03:1B:1F:89:21:56:16:3C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282E2E0A3EBA1DFB726703031B1F892156163C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa
Signing time:             Wed 05 Nov 2025 00:34:25 +0000
ROA not before:           Wed 05 Nov 2025 00:29:25 +0000
ROA not after:            Wed 04 Nov 2026 00:34:25 +0000
asID:                     271175
IP address blocks:        179.51.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/282E2E0A3EBA1DFB726703031B1F892156163C4D.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/282E2E0A3EBA1DFB726703031B1F892156163C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282E2E0A3EBA1DFB726703031B1F892156163C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 20:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f8:86:63:33:10:47:36:a7:dd:aa:e8:10:b3:29:d8:d6:1e:bc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282E2E0A3EBA1DFB726703031B1F892156163C4D
        Validity
            Not Before: Nov  5 00:29:25 2025 GMT
            Not After : Nov  4 00:34:25 2026 GMT
        Subject: CN=396BC38B29B9C41E257DABA67774F5E618D8B5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:2f:c8:21:33:f5:9a:48:b5:c0:f1:07:4f:
                    17:c5:b6:0c:7c:6c:ed:09:d8:15:f8:90:11:9d:63:
                    ee:70:42:6b:b6:c9:40:26:b0:95:86:8f:75:52:cf:
                    28:03:b2:3e:ad:5e:9b:65:0b:69:c4:dc:2e:1f:54:
                    08:27:15:63:7f:eb:49:3e:31:8c:71:88:95:c9:22:
                    ad:46:ae:46:d6:09:cb:39:4c:5c:f9:d7:b0:73:a0:
                    33:78:81:ff:9e:ec:1e:ca:fb:0b:75:49:05:a2:1a:
                    9b:fd:92:74:a4:c0:1d:47:e5:3c:8b:98:9f:a5:c0:
                    04:b9:57:c2:fd:43:89:6d:9a:f3:48:73:7b:22:1e:
                    a4:eb:91:42:49:88:c1:d8:91:b5:9d:f2:c5:12:23:
                    64:dd:5b:3d:7f:bd:90:27:df:78:6c:f1:40:f6:25:
                    89:77:bf:4c:63:8c:a5:fe:a1:2e:bb:4e:62:8b:a7:
                    bb:0d:2a:c4:88:b4:10:6e:f9:91:87:28:43:7b:6c:
                    26:8b:ad:08:16:b8:c6:c1:14:2d:ff:3a:9a:b6:d9:
                    30:8b:0b:fd:29:26:96:3c:d2:98:c5:d3:5a:34:9b:
                    3c:04:c9:d4:47:1f:e9:9e:36:a1:eb:67:f1:ef:9a:
                    22:2e:c6:d0:31:fd:04:37:35:2a:62:7c:dd:81:63:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:C3:8B:29:B9:C4:1E:25:7D:AB:A6:77:74:F5:E6:18:D8:B5:F9
            X509v3 Authority Key Identifier:
                keyid:28:2E:2E:0A:3E:BA:1D:FB:72:67:03:03:1B:1F:89:21:56:16:3C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/282E2E0A3EBA1DFB726703031B1F892156163C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282E2E0A3EBA1DFB726703031B1F892156163C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:e3:8c:27:b2:e2:5b:c9:2b:64:d1:07:43:31:a2:fe:a8:
         2f:f6:c4:77:6c:83:cb:ed:ce:43:1f:a9:d5:0d:0b:b1:f7:1d:
         7f:4a:53:35:13:24:e7:7e:f4:21:05:82:b1:d8:86:f3:e6:3a:
         59:21:7e:1d:2c:2e:6d:7a:5e:c0:e8:d7:41:c6:5c:50:d5:c3:
         41:c7:11:5f:bd:8e:09:2b:cc:3b:18:57:79:24:45:58:47:f4:
         0c:56:77:03:d8:07:02:7b:f4:77:32:fe:36:f4:1f:27:e4:f8:
         85:47:35:18:0d:82:3e:47:42:18:63:2c:29:11:10:a9:30:7b:
         be:4f:93:f7:f6:96:4b:88:98:99:00:9a:80:ab:cc:9c:2d:8d:
         7d:82:93:19:56:3e:c1:96:2d:98:d1:5d:d8:f5:6d:e5:94:79:
         e9:02:5b:33:ed:d6:02:b6:1c:e8:20:b6:28:0a:e0:32:96:26:
         ae:e1:40:9f:10:34:62:a3:38:41:cd:7d:32:bf:c5:68:b9:19:
         97:af:70:3a:29:e2:5c:9a:85:8e:0a:01:44:1c:91:80:63:fc:
         e6:dd:0f:fe:1b:35:d7:c2:56:36:c9:e5:0b:21:c2:35:08:98:
         59:32:f6:d7:9f:0b:e6:4e:c2:3a:a5:23:09:e0:24:9e:92:e0:
         a8:20:56:67
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHfiGYzMQRzan3aroELMp2NYevLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgyRTJFMEEzRUJBMURGQjcyNjcwMzAzMUIxRjg5MjE1
NjE2M0M0RDAeFw0yNTExMDUwMDI5MjVaFw0yNjExMDQwMDM0MjVaMDMxMTAvBgNV
BAMTKDM5NkJDMzhCMjlCOUM0MUUyNTdEQUJBNjc3NzRGNUU2MThEOEI1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSi/IITP1mki1wPEHTxfFtgx8
bO0J2BX4kBGdY+5wQmu2yUAmsJWGj3VSzygDsj6tXptlC2nE3C4fVAgnFWN/60k+
MYxxiJXJIq1GrkbWCcs5TFz517BzoDN4gf+e7B7K+wt1SQWiGpv9knSkwB1H5TyL
mJ+lwAS5V8L9Q4ltmvNIc3siHqTrkUJJiMHYkbWd8sUSI2TdWz1/vZAn33hs8UD2
JYl3v0xjjKX+oS67TmKLp7sNKsSItBBu+ZGHKEN7bCaLrQgWuMbBFC3/Opq22TCL
C/0pJpY80pjF01o0mzwEydRHH+meNqHrZ/HvmiIuxtAx/QQ3NSpifN2BY70PAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOWvDiym5xB4lfaumd3T15hjYtfkwHwYDVR0j
BBgwFoAUKC4uCj66HftyZwMDGx+JIVYWPE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZ6cHhGbVRoYUw3UW5uVWo5cGhXRnZuQ3J1aEdGaHlGb1VMUW5VN1di
a20vMC8yODJFMkUwQTNFQkExREZCNzI2NzAzMDMxQjFGODkyMTU2MTYzQzRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MkUyRTBBM0VCQTFERkI3
MjY3MDMwMzFCMUY4OTIxNTYxNjNDNEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGenB4Rm1UaGFMN1FublVqOXBoV0Z2bkNydWhHRmh5Rm9VTFFuVTdXYmttLzAv
MzEzNzM5MmUzNTMxMmUzMTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzM7AwDQYJKoZIhvcNAQELBQADggEBAA1I44wn
suJbyStk0QdDMaL+qC/2xHdsg8vtzkMfqdUNC7H3HX9KUzUTJOd+9CEFgrHYhvPm
Olkhfh0sLm16XsDo10HGXFDVw0HHEV+9jgkrzDsYV3kkRVhH9AxWdwPYBwJ79Hcy
/jb0Hyfk+IVHNRgNgj5HQhhjLCkREKkwe75Pk/f2lkuImJkAmoCrzJwtjX2CkxlW
PsGWLZjRXdj1beWUeekCWzPt1gK2HOggtigK4DKWJq7hQJ8QNGKjOEHNfTK/xWi5
GZevcDop4lyahY4KAUQckYBj/ObdD/4bNdfCVjbJ5QshwjUImFky9tefC+ZOwjql
IwngJJ6S4KggVmc=
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:36:49 2025 by rpki-client