Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32312d3234203d3e20323633343135.roa
File:                     3137392e3130362e37322e302f32312d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          8hUPTdJMnT2JWQ/fQ5SH8Gcj7hoaw++Ddj728ou0srQ=
Subject key identifier:   B7:7C:CA:5A:B7:19:55:B0:63:D1:CB:67:E7:21:FF:F7:26:36:EA:30
Certificate issuer:       /CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
Certificate serial:       47623D055EA0C8EA176EDA8A3A473A11616EA1BB
Authority key identifier: 0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32312d3234203d3e20323633343135.roa
Signing time:             Thu 18 Sep 2025 18:13:44 +0000
ROA not before:           Thu 18 Sep 2025 18:08:44 +0000
ROA not after:            Thu 17 Sep 2026 18:13:44 +0000
asID:                     263415
IP address blocks:        179.106.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:62:3d:05:5e:a0:c8:ea:17:6e:da:8a:3a:47:3a:11:61:6e:a1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
        Validity
            Not Before: Sep 18 18:08:44 2025 GMT
            Not After : Sep 17 18:13:44 2026 GMT
        Subject: CN=B77CCA5AB71955B063D1CB67E721FFF72636EA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:1d:a2:f5:a5:03:ba:23:7d:7d:f6:14:80:
                    7f:bc:c4:21:9a:59:7b:ff:34:d7:cd:ff:b0:c5:df:
                    be:6a:99:10:fe:b0:29:52:02:f7:70:2c:1c:cf:4d:
                    ef:ea:80:3d:2c:32:7e:b3:7d:c1:17:b9:dd:ea:69:
                    e7:ba:8a:6a:99:39:e7:8e:58:9c:81:f4:a1:a5:4a:
                    46:c1:64:8f:0c:87:e0:ff:f9:30:da:25:c6:25:5e:
                    7d:6d:85:b0:af:84:e3:23:f8:9e:2a:95:e3:c6:fb:
                    22:53:8b:9c:59:7b:af:b5:a2:b6:82:01:45:49:5b:
                    32:0d:05:2d:f7:28:49:b9:2b:7f:71:bd:58:53:6e:
                    0c:ec:39:12:ec:ad:41:01:7a:94:16:61:a5:e9:c4:
                    41:ee:63:ee:db:92:0c:28:a0:f4:1b:eb:00:c6:8f:
                    52:18:21:f3:6e:60:80:d5:52:20:f2:66:86:54:f3:
                    66:1c:22:23:3b:4a:ca:77:22:37:7c:bb:9f:99:37:
                    bb:50:ad:db:0c:e7:40:ab:e8:44:80:5b:3c:99:5f:
                    9a:22:f3:87:a3:67:ce:25:f2:0c:6c:60:3b:1b:08:
                    79:bd:5f:54:35:c3:24:cb:ae:c0:91:31:41:99:2a:
                    e5:90:4c:ce:8d:4f:a9:59:d7:c4:62:a7:3c:03:c8:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7C:CA:5A:B7:19:55:B0:63:D1:CB:67:E7:21:FF:F7:26:36:EA:30
            X509v3 Authority Key Identifier:
                keyid:0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32312d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:f7:39:24:5d:dc:c2:a2:b3:1c:26:f0:ca:95:70:95:6f:
         4f:79:44:c1:bd:d8:f7:78:b6:0e:ae:59:c3:61:63:b2:63:c7:
         f1:0f:1c:b3:30:8c:58:3b:b3:49:fe:e5:b8:47:21:f6:9c:f6:
         69:2b:21:5c:69:3e:ad:59:99:b5:be:85:97:3c:d5:a7:25:90:
         3e:a5:e7:9f:16:77:e3:c4:22:5a:2e:81:58:28:2e:e3:39:98:
         90:ac:ef:9a:d3:24:8c:01:ba:e0:24:f7:a0:e9:87:d4:9a:c5:
         f4:33:2c:00:5b:4b:bf:56:75:be:8f:ff:5f:a0:f3:46:9d:f0:
         00:24:40:24:5e:72:c6:89:3b:d0:47:d8:cc:cf:80:c6:85:d4:
         56:52:6e:e0:35:55:ca:00:64:14:29:43:11:92:12:27:97:6c:
         3e:8f:8a:38:32:07:f3:46:91:f4:2d:c1:43:64:14:2c:76:25:
         ce:db:f2:f0:72:8b:d5:b9:76:0b:9f:a1:a6:74:16:bb:90:a8:
         06:55:59:8b:74:8a:b9:82:07:ae:fc:81:f5:e6:d0:e5:c1:1b:
         0c:cb:44:8b:6e:69:8f:e2:e7:b9:ae:07:91:e2:2d:69:5a:d7:
         37:b8:a7:da:2f:bc:69:ac:e2:c7:46:b9:cb:03:83:22:20:69:
         fb:09:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:59:05 2025 by rpki-client