Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa
File:                     3137392e302e3131382e302f32332d3233203d3e20323731333235.roa (raw, json)
Hash identifier:          jnl6soZugObbIdAhTsef6HXrRoXWMOGMfl6HYsJLXzY=
Subject key identifier:   94:1C:2B:91:92:4A:E2:5C:AD:50:B9:51:F5:56:DD:8C:59:3C:D9:06
Certificate issuer:       /CN=4130030359799EC2A7E118AAED685C2C457CEF96
Certificate serial:       7BD52FD1FF7E57E1E9361E164C62DD46163F8CC4
Authority key identifier: 41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa
Signing time:             Wed 02 Sep 2026 19:01:19 +0000
ROA not before:           Wed 02 Sep 2026 18:56:19 +0000
ROA not after:            Wed 01 Sep 2027 19:01:19 +0000
asID:                     271325
IP address blocks:        179.0.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Oct 2026 02:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d5:2f:d1:ff:7e:57:e1:e9:36:1e:16:4c:62:dd:46:16:3f:8c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4130030359799EC2A7E118AAED685C2C457CEF96
        Validity
            Not Before: Sep  2 18:56:19 2026 GMT
            Not After : Sep  1 19:01:19 2027 GMT
        Subject: CN=941C2B91924AE25CAD50B951F556DD8C593CD906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:06:8e:c9:9a:1e:17:76:4d:a0:95:28:24:
                    76:9f:e7:a8:df:7b:77:20:b8:ec:e5:00:ed:c9:63:
                    af:5d:86:1d:41:79:fa:1b:43:f3:2f:e2:ac:6d:98:
                    a0:2c:15:38:ff:ee:cc:47:d1:18:47:d5:7c:13:05:
                    bd:fb:da:ae:9b:1e:7d:43:a6:11:55:99:82:f6:09:
                    4c:3a:cc:7a:2b:3e:5d:88:24:31:3b:46:d4:a0:45:
                    cf:b0:d4:38:88:06:c8:bf:5b:da:00:dc:f9:7d:2c:
                    d7:e5:72:6e:d5:45:17:f2:11:00:b8:61:32:ef:91:
                    01:9c:ba:68:0a:c1:5d:5a:30:9d:6c:5c:e1:be:ea:
                    9b:b5:2d:ca:f4:aa:d6:d4:0a:0c:98:1f:40:a8:04:
                    e8:ec:a9:cb:9e:35:5e:5b:35:4b:d1:1e:f2:5d:a6:
                    59:71:34:ab:82:63:0c:95:96:24:6f:da:c1:04:3a:
                    ed:5b:75:bb:82:58:3f:f3:47:8e:00:67:76:f0:0d:
                    94:5b:cb:ac:77:b3:84:da:fa:8a:ad:59:77:66:39:
                    b4:33:42:b8:80:26:75:df:f8:21:92:a8:c1:29:ff:
                    a3:ad:29:ef:b6:29:71:de:6c:07:60:b5:18:ab:49:
                    65:82:39:4c:85:40:9f:7a:9b:5c:f1:17:50:b6:ed:
                    ab:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:2B:91:92:4A:E2:5C:AD:50:B9:51:F5:56:DD:8C:59:3C:D9:06
            X509v3 Authority Key Identifier:
                keyid:41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:30:4b:44:0c:15:23:6b:87:21:05:80:81:19:56:38:48:0c:
         ff:c0:01:1e:66:da:69:8c:81:ed:0a:e0:81:73:44:2f:63:63:
         da:f0:6d:3c:97:20:21:d9:7a:c5:df:32:a6:2e:91:81:22:5a:
         f0:af:31:6f:6c:8b:cd:94:ef:ba:39:41:09:f5:8f:9a:3d:da:
         69:2d:0e:e6:07:12:4f:b2:05:61:ae:89:47:38:1a:4a:e6:4c:
         5a:48:ad:8e:ec:b7:da:89:1c:ef:5a:67:21:b5:14:f7:0c:ee:
         e8:3f:96:b8:81:d2:1f:05:c4:01:4b:1e:48:20:5d:9c:53:0f:
         6c:c7:97:a2:ed:a9:02:44:bd:81:2f:0e:38:84:92:a7:28:d4:
         db:b7:4b:6b:af:71:52:de:b5:1e:06:79:1f:b5:b1:33:c6:14:
         58:8b:3d:1b:5b:fc:d8:52:cd:5c:f5:da:15:ff:72:d6:69:8f:
         b1:5e:15:8a:0b:bb:f8:14:77:7e:3f:dc:16:fd:07:2d:35:8a:
         55:55:58:bc:90:94:a5:c9:9f:68:74:75:31:8d:c7:ee:77:80:
         6e:73:a0:49:6e:e7:75:c2:92:6e:05:b0:25:4f:a6:2b:fe:68:
         65:1f:a8:84:cc:8c:83:43:01:dd:22:c0:b2:73:32:59:36:e3:
         12:16:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:40:33 2026 by rpki-client