Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa
File:                     3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa (raw, json)
Hash identifier:          i73Nj3VsUZffCacu4n6rUbqPzzHXGd+8MOKQZkSYvyI=
Subject key identifier:   A4:2D:03:32:92:D0:DC:8B:A5:64:DB:6D:F2:94:13:F8:C2:6A:FE:F1
Certificate issuer:       /CN=282E2E0A3EBA1DFB726703031B1F892156163C4D
Certificate serial:       1EB782F7C5AC27F4CFD4B0B35E2A7E325905ECE3
Authority key identifier: 28:2E:2E:0A:3E:BA:1D:FB:72:67:03:03:1B:1F:89:21:56:16:3C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282E2E0A3EBA1DFB726703031B1F892156163C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa
Signing time:             Wed 05 Nov 2025 00:34:25 +0000
ROA not before:           Wed 05 Nov 2025 00:29:25 +0000
ROA not after:            Wed 04 Nov 2026 00:34:25 +0000
asID:                     271175
IP address blocks:        179.51.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/282E2E0A3EBA1DFB726703031B1F892156163C4D.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/282E2E0A3EBA1DFB726703031B1F892156163C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282E2E0A3EBA1DFB726703031B1F892156163C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 20:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b7:82:f7:c5:ac:27:f4:cf:d4:b0:b3:5e:2a:7e:32:59:05:ec:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282E2E0A3EBA1DFB726703031B1F892156163C4D
        Validity
            Not Before: Nov  5 00:29:25 2025 GMT
            Not After : Nov  4 00:34:25 2026 GMT
        Subject: CN=A42D033292D0DC8BA564DB6DF29413F8C26AFEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:b7:10:95:a9:a1:6a:a6:0f:9f:91:73:55:
                    d9:29:4f:a7:ed:fc:84:fe:09:21:27:6f:d0:f4:51:
                    b4:f3:ec:60:d5:a0:c2:8a:ac:25:82:35:f4:34:02:
                    f6:22:8c:e0:74:d2:e0:22:fc:32:2a:87:e5:2a:a0:
                    28:de:d2:86:df:a7:85:cf:46:15:d3:e5:3f:c6:90:
                    f5:ef:10:fa:37:18:d3:09:79:05:db:95:8b:ac:21:
                    86:06:d0:93:20:3b:e6:48:f3:f0:cd:7c:2b:02:d3:
                    1b:05:82:16:6d:ea:ee:dc:ad:dd:d0:37:20:8e:a3:
                    f0:ab:64:cf:67:02:e7:4d:53:88:3d:55:d9:d6:ae:
                    e0:be:db:9d:6f:d3:59:bd:d5:7c:41:73:2e:4c:65:
                    93:40:d1:ec:d2:a4:d2:c8:99:76:61:88:a4:0d:e7:
                    00:f4:39:21:4a:5c:68:64:8d:b7:23:40:b3:42:57:
                    d0:62:1b:8f:c0:a2:7d:51:83:b4:1b:f3:9f:00:62:
                    a7:cd:18:42:59:bf:b6:15:13:91:ef:ec:02:68:6b:
                    6d:c5:f4:f7:87:c1:5c:7b:72:35:aa:3c:e8:40:fa:
                    2f:de:1d:28:55:9e:7b:b6:a8:8b:99:05:1a:91:9c:
                    49:a8:21:f4:37:43:d9:83:42:cb:3e:5e:c9:c0:0f:
                    c4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2D:03:32:92:D0:DC:8B:A5:64:DB:6D:F2:94:13:F8:C2:6A:FE:F1
            X509v3 Authority Key Identifier:
                keyid:28:2E:2E:0A:3E:BA:1D:FB:72:67:03:03:1B:1F:89:21:56:16:3C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/282E2E0A3EBA1DFB726703031B1F892156163C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282E2E0A3EBA1DFB726703031B1F892156163C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:c1:fa:2c:8b:50:f3:46:40:64:a1:79:0b:81:c9:ae:70:68:
         90:d9:74:a8:04:40:03:8a:d6:0d:09:4f:3a:d5:3e:59:d5:86:
         9d:77:0b:ba:27:ad:9b:2e:9a:a7:09:33:16:cc:5b:12:2b:b4:
         64:8b:16:dd:85:af:7e:57:c5:bd:45:d6:ea:e2:ed:1e:a8:89:
         fb:96:09:c5:34:bf:9c:23:f9:6d:b9:1c:1f:fc:3e:87:48:75:
         b6:b9:ac:78:63:89:87:04:60:ae:d0:78:c7:c4:b8:f3:a1:13:
         d4:e1:a8:5f:f3:e0:ff:ea:c6:b5:67:23:39:a9:67:3d:14:ef:
         fe:06:f4:30:f4:94:c1:8e:c5:4d:6a:bb:9d:48:b9:ad:7c:dd:
         0b:6a:4d:08:89:e4:43:b5:06:72:6a:df:70:89:5c:5b:6b:55:
         63:a1:07:9d:8d:d4:b6:c1:0c:9a:76:b0:a9:9f:f5:2a:51:9a:
         d9:12:6f:ba:2a:fb:b7:ed:60:28:5e:fd:49:1d:0b:0d:63:d5:
         8c:16:3b:a0:68:43:69:cd:39:3e:ac:b4:06:e2:1b:0c:52:5a:
         4a:5c:e3:42:39:0d:11:00:f7:0d:52:10:a6:19:cc:61:de:c4:
         de:2a:b6:29:6f:56:5e:3f:64:9c:a0:0a:1a:3f:f1:cc:99:bf:
         74:55:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:38:25 2025 by rpki-client