Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131372e302f32342d3234203d3e20323731333235.roa
File:                     3137392e302e3131372e302f32342d3234203d3e20323731333235.roa (raw, json)
Hash identifier:          xm1JM4u/5LxJixeUnhomv2BzuHxfhkS85adtUafXJ9o=
Subject key identifier:   F6:94:CF:E4:40:80:00:F2:82:AE:CE:D1:A4:EB:18:05:CD:E3:66:D3
Certificate issuer:       /CN=4130030359799EC2A7E118AAED685C2C457CEF96
Certificate serial:       0769F1DEAF799B0DAE3F5072CB88AEE82A02A675
Authority key identifier: 41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131372e302f32342d3234203d3e20323731333235.roa
Signing time:             Wed 02 Sep 2026 19:01:21 +0000
ROA not before:           Wed 02 Sep 2026 18:56:21 +0000
ROA not after:            Wed 01 Sep 2027 19:01:21 +0000
asID:                     271325
IP address blocks:        179.0.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Oct 2026 18:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:69:f1:de:af:79:9b:0d:ae:3f:50:72:cb:88:ae:e8:2a:02:a6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4130030359799EC2A7E118AAED685C2C457CEF96
        Validity
            Not Before: Sep  2 18:56:21 2026 GMT
            Not After : Sep  1 19:01:21 2027 GMT
        Subject: CN=F694CFE4408000F282AECED1A4EB1805CDE366D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:47:8b:51:6c:ac:6b:b4:96:62:18:6b:65:
                    dc:29:1f:4c:a6:59:44:68:b5:f1:de:77:62:b5:6c:
                    13:85:de:41:81:89:14:90:6e:c8:ba:98:5c:f2:31:
                    3b:35:d6:23:e7:d1:0d:fc:e0:80:50:e3:33:36:e4:
                    01:60:39:f2:cb:53:a7:40:d4:83:82:e3:eb:90:15:
                    5c:7d:60:64:d6:60:08:2c:68:91:ea:01:0f:bf:eb:
                    4e:95:6b:a5:14:2d:62:55:1c:5f:40:27:d6:c6:cf:
                    37:ac:c7:de:fd:81:b5:f1:4e:39:fd:01:9c:5e:fa:
                    46:22:0a:85:4b:bc:51:a2:c8:5f:f5:8f:a3:e2:0f:
                    ab:a8:49:eb:dc:d8:b0:ea:37:74:09:a9:2d:23:c1:
                    c6:4d:71:32:ea:be:d5:13:7b:8d:5f:f2:28:6e:a9:
                    01:53:a4:ac:1d:ff:b0:01:45:e4:06:0f:84:ac:81:
                    4a:19:1d:15:c9:3f:75:df:ea:d1:33:78:9c:97:87:
                    e6:e2:ac:2f:5a:10:5e:1e:e6:4e:42:43:e1:6d:b0:
                    87:68:4b:ff:64:cd:3f:94:a7:34:b3:b2:ba:f6:3d:
                    cb:3b:5f:b2:50:76:73:01:95:c8:b9:37:55:73:9e:
                    8a:ba:3b:ae:4a:9e:82:57:9f:7d:fb:b3:ae:8e:fc:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:CF:E4:40:80:00:F2:82:AE:CE:D1:A4:EB:18:05:CD:E3:66:D3
            X509v3 Authority Key Identifier:
                keyid:41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131372e302f32342d3234203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:95:62:38:52:99:44:a6:e4:ba:c2:c5:be:00:ed:fe:2b:13:
         07:b1:bc:3c:12:69:96:96:a1:df:f3:bc:e0:dc:d7:f9:89:21:
         6b:aa:68:a3:b5:03:89:c4:c1:57:b3:f0:1a:f7:60:5a:1d:b4:
         a7:68:77:6e:d3:06:53:71:6a:a4:8e:a3:0d:39:af:66:f0:d8:
         28:5c:b1:0c:26:35:bb:c2:1d:a2:91:73:31:c2:19:ae:07:af:
         67:a3:cc:c3:99:58:36:09:e3:93:53:cd:95:1d:97:f4:15:ff:
         9b:e7:33:8a:1c:d6:66:61:b1:f6:6f:8b:ff:15:c0:73:8e:6c:
         6f:47:26:80:ab:29:f7:d7:0f:5b:05:93:9b:51:a1:8c:4a:92:
         d7:e1:2c:3e:c8:61:01:e6:03:f9:3b:78:8e:28:ce:1a:42:dc:
         1d:c3:2d:0e:a1:10:e9:f8:50:58:cc:f0:d7:3b:ae:9f:dc:41:
         4c:51:49:04:4d:c2:3c:e3:3f:5c:07:4a:28:6e:9b:54:72:95:
         da:ea:11:52:44:d5:69:71:3b:d1:22:a8:fb:0e:fe:3e:27:42:
         9d:af:5f:1c:73:93:11:64:f0:68:13:68:11:eb:8e:5b:96:22:
         bb:a9:28:25:cf:9e:f6:2e:e7:57:d0:2e:91:60:20:9d:85:83:
         59:0d:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:57:01 2026 by rpki-client