Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32342d3234203d3e20323731333235.roa
File:                     3137392e302e3131382e302f32342d3234203d3e20323731333235.roa (raw, json)
Hash identifier:          bzrqAwPEbtLbyeHEX/hareuElA8DNDJ6lr30M0KybFc=
Subject key identifier:   21:BF:41:24:87:AF:4E:4F:79:9B:1C:68:4F:9A:33:0B:0B:9A:22:FC
Certificate issuer:       /CN=4130030359799EC2A7E118AAED685C2C457CEF96
Certificate serial:       09655886CF1536A9D503BA989B6DF96DC0DE83B7
Authority key identifier: 41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32342d3234203d3e20323731333235.roa
Signing time:             Wed 02 Sep 2026 19:01:20 +0000
ROA not before:           Wed 02 Sep 2026 18:56:20 +0000
ROA not after:            Wed 01 Sep 2027 19:01:20 +0000
asID:                     271325
IP address blocks:        179.0.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Oct 2026 02:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:65:58:86:cf:15:36:a9:d5:03:ba:98:9b:6d:f9:6d:c0:de:83:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4130030359799EC2A7E118AAED685C2C457CEF96
        Validity
            Not Before: Sep  2 18:56:20 2026 GMT
            Not After : Sep  1 19:01:20 2027 GMT
        Subject: CN=21BF412487AF4E4F799B1C684F9A330B0B9A22FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a1:0e:48:7f:61:c3:c4:bd:6d:66:eb:14:6e:
                    74:37:c8:15:25:ad:d7:12:8a:e8:70:45:b7:95:c1:
                    28:68:25:bb:7d:02:76:91:3d:85:d2:15:b1:94:45:
                    71:f4:62:ba:82:a3:15:00:1d:56:ae:3d:18:0b:4c:
                    3a:04:0f:ce:b2:6a:b3:a9:dc:f8:c4:8a:f6:f2:00:
                    3f:18:0d:ef:67:ce:06:3b:a8:96:94:f8:bf:6c:d1:
                    81:d6:01:1f:e1:96:b9:1f:1b:1b:27:b2:7b:36:71:
                    9a:ac:0f:0a:4a:8b:aa:71:ff:13:93:4c:1b:be:68:
                    07:7e:36:b6:ba:e4:c9:60:32:f3:45:e0:b2:1b:96:
                    56:88:0e:73:c1:ee:1f:a9:74:f6:01:22:7d:95:b6:
                    af:fa:e5:e7:1f:b3:03:6c:c8:01:70:dc:5b:10:28:
                    c2:95:3a:8e:62:c8:bb:b8:b5:8e:2c:37:44:35:38:
                    66:d4:ac:97:6b:6a:a1:59:26:36:83:e8:94:29:2e:
                    ed:a1:98:92:a0:4a:73:8e:3a:5a:f3:42:32:f6:70:
                    fc:1c:7e:1b:31:46:10:58:7f:43:02:ef:54:ec:ba:
                    6c:44:86:56:a1:c0:68:8f:4a:69:53:79:00:5c:61:
                    a2:38:f2:22:98:da:f8:b5:b6:0e:bb:16:7c:22:8e:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BF:41:24:87:AF:4E:4F:79:9B:1C:68:4F:9A:33:0B:0B:9A:22:FC
            X509v3 Authority Key Identifier:
                keyid:41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32342d3234203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:52:9e:d2:f4:b7:9e:2f:2b:34:7c:01:51:70:e9:69:a6:
         97:99:d5:1d:37:1e:28:14:9f:55:a0:84:5c:97:c3:a4:41:5d:
         55:b1:ee:a0:77:56:5e:ba:5d:87:7c:72:83:9e:c9:4d:9e:ca:
         db:96:34:53:8e:41:71:c7:2c:c9:0a:dd:15:c6:3f:0f:9b:29:
         e3:89:51:b9:85:e4:13:7c:1a:27:c8:8e:c4:26:57:11:02:10:
         9d:79:1f:a6:08:65:81:76:77:de:62:cf:93:c6:00:8c:7c:88:
         27:f3:38:81:93:48:f8:ab:9f:5a:ad:b2:0b:09:fa:8c:f3:d1:
         75:1b:92:8d:b6:08:87:de:60:43:cf:7a:32:de:21:b7:b8:40:
         29:ea:46:79:30:d3:54:d5:e3:8a:7e:77:29:43:89:5a:77:f8:
         0d:0e:19:08:ff:2f:bb:51:f1:c8:ad:32:f0:81:78:f2:bf:0c:
         30:ea:0c:c8:b3:2e:db:bd:42:e2:14:d7:93:f7:a8:a9:13:97:
         d5:ca:b3:96:06:bf:43:59:41:9f:56:33:c6:d7:e0:bd:e9:ab:
         94:01:d0:02:fc:02:dd:b3:b6:26:38:6a:5e:b6:35:0b:16:2d:
         77:da:26:5f:2e:bd:36:11:e8:a3:5a:f0:63:be:3e:c4:9d:d4:
         3a:3b:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:11:05 2026 by rpki-client