Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131362e302f32342d3234203d3e20323731333235.roa
File:                     3137392e302e3131362e302f32342d3234203d3e20323731333235.roa (raw, json)
Hash identifier:          n/xWfxZdsxxP2SFtyX1U27Bjcm1eltq4TsLIZdJTFok=
Subject key identifier:   58:2D:1D:46:30:DF:53:31:6F:36:8E:B4:5F:AC:ED:8E:84:80:38:13
Certificate issuer:       /CN=4130030359799EC2A7E118AAED685C2C457CEF96
Certificate serial:       4B29D0E1BD56194A8F06374C3A3687E5BF2F33A4
Authority key identifier: 41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131362e302f32342d3234203d3e20323731333235.roa
Signing time:             Wed 02 Sep 2026 19:01:20 +0000
ROA not before:           Wed 02 Sep 2026 18:56:20 +0000
ROA not after:            Wed 01 Sep 2027 19:01:20 +0000
asID:                     271325
IP address blocks:        179.0.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Oct 2026 02:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:29:d0:e1:bd:56:19:4a:8f:06:37:4c:3a:36:87:e5:bf:2f:33:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4130030359799EC2A7E118AAED685C2C457CEF96
        Validity
            Not Before: Sep  2 18:56:20 2026 GMT
            Not After : Sep  1 19:01:20 2027 GMT
        Subject: CN=582D1D4630DF53316F368EB45FACED8E84803813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:b5:d0:87:ac:23:f3:46:2d:96:40:a5:ab:
                    a5:37:4b:52:12:b8:1b:7e:21:09:13:17:3b:46:2f:
                    7d:49:39:3f:02:6e:ca:a4:89:ef:f6:7b:71:95:f1:
                    0b:75:2b:07:04:1d:b2:d6:1c:07:b7:92:fb:cb:12:
                    e5:0f:6b:80:76:be:90:08:d5:88:0c:47:ce:64:b8:
                    a4:93:16:5a:41:62:25:36:fd:9c:26:55:9f:2a:30:
                    7d:ce:96:30:a5:2e:ac:d2:6b:ac:a9:c3:84:7f:89:
                    31:66:33:fb:f1:01:e5:61:37:7e:75:b5:b9:5e:cc:
                    dd:59:7d:5e:02:de:ed:52:47:f5:1b:fd:61:6e:45:
                    2a:c4:5c:4a:0c:1d:fc:ac:1d:29:80:03:a8:23:db:
                    11:e1:2d:7c:fa:35:26:8c:f1:c9:4d:85:8e:3b:13:
                    ce:39:d3:ea:19:41:61:e0:91:72:f6:e7:0a:7a:e2:
                    d7:ad:3c:8f:ab:38:d7:7b:25:cd:53:ed:d0:1e:a5:
                    cf:e2:57:06:dd:19:cb:2b:ec:67:b4:11:1c:38:4b:
                    41:ea:cd:27:2e:4a:e4:15:23:8b:82:49:a3:8e:fd:
                    5c:85:fc:ee:aa:29:2d:8d:8e:46:37:9c:48:32:47:
                    77:5c:bf:77:62:5c:a9:c2:47:bb:05:4d:95:ae:30:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:1D:46:30:DF:53:31:6F:36:8E:B4:5F:AC:ED:8E:84:80:38:13
            X509v3 Authority Key Identifier:
                keyid:41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131362e302f32342d3234203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:74:81:01:22:f0:00:c4:d2:5c:a8:f3:dd:be:d5:c2:f1:c0:
         37:ae:c2:8c:ec:87:54:97:50:08:64:cf:31:c7:f0:5d:9f:63:
         b8:f6:b5:64:bf:3f:02:48:4e:15:c1:86:2a:1a:f9:04:51:e7:
         aa:7c:d5:ef:54:7a:32:e2:04:22:72:1b:6a:c6:9d:28:22:b3:
         28:4c:64:16:47:57:10:0a:83:fd:76:34:3f:5a:a5:ed:59:92:
         26:8c:26:12:82:4c:25:7f:04:f0:06:f5:6f:e3:4f:af:c0:54:
         f3:b1:3d:7a:64:d3:51:ac:59:85:8b:ad:34:03:aa:3f:b5:d6:
         f3:f5:93:b2:39:ff:18:28:7f:1d:b8:08:c0:60:4c:0a:e3:ee:
         d9:ce:45:bc:bc:fc:25:f8:e5:65:41:4f:67:80:8d:a7:aa:de:
         7e:c3:90:46:d6:45:03:79:01:1a:0d:23:54:eb:8b:ed:30:3d:
         5e:aa:ca:71:3d:13:dc:90:ae:c8:94:df:3a:3c:5a:f2:cc:21:
         76:7b:b3:7e:c6:8a:0a:ae:d7:4c:fc:c8:24:f7:52:b5:e9:8b:
         1f:fa:0d:6c:62:bf:b8:df:6c:91:0f:73:1f:6b:dc:ad:bd:6a:
         26:7b:93:9b:9e:da:b3:ef:5d:5d:0d:23:f2:62:01:ed:f6:53:
         ab:b4:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:32:08 2026 by rpki-client