Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131392e302f32342d3234203d3e20323731333235.roa
File:                     3137392e302e3131392e302f32342d3234203d3e20323731333235.roa (raw, json)
Hash identifier:          8s4RYOWpWH1sMT82qhj6+pTpfxUQ8nZnkSlW0tyo4BI=
Subject key identifier:   07:9C:8C:06:15:0F:06:A5:2E:E5:AC:85:42:F9:B3:9C:27:29:F7:30
Certificate issuer:       /CN=4130030359799EC2A7E118AAED685C2C457CEF96
Certificate serial:       2EE589542760E5F2B0D2FB0A24A319F84E21284F
Authority key identifier: 41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131392e302f32342d3234203d3e20323731333235.roa
Signing time:             Wed 02 Sep 2026 19:01:19 +0000
ROA not before:           Wed 02 Sep 2026 18:56:19 +0000
ROA not after:            Wed 01 Sep 2027 19:01:19 +0000
asID:                     271325
IP address blocks:        179.0.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Oct 2026 09:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e5:89:54:27:60:e5:f2:b0:d2:fb:0a:24:a3:19:f8:4e:21:28:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4130030359799EC2A7E118AAED685C2C457CEF96
        Validity
            Not Before: Sep  2 18:56:19 2026 GMT
            Not After : Sep  1 19:01:19 2027 GMT
        Subject: CN=079C8C06150F06A52EE5AC8542F9B39C2729F730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:15:9c:ea:89:7f:86:4f:d1:84:0d:11:5d:
                    15:23:42:ff:d5:0f:bb:27:5b:bf:39:7a:be:ce:2d:
                    f0:d7:bd:92:dc:a7:ae:cb:03:be:86:be:5a:86:ea:
                    67:f5:1b:e4:b4:86:b8:2c:ae:db:be:71:48:c4:e8:
                    70:a5:b1:0a:8c:68:1a:63:aa:ec:18:37:b9:93:6b:
                    42:44:89:c6:4d:3d:4a:53:98:c5:ac:3f:f6:79:f2:
                    39:41:6d:d5:ec:1e:9f:e8:1f:cf:d6:98:25:44:51:
                    53:d0:57:3b:d6:29:fb:a9:ce:ef:8e:78:07:34:df:
                    fe:7c:e2:5a:7e:16:76:14:c7:c4:05:61:ee:ab:50:
                    9b:9a:ea:be:0a:26:6d:f9:85:27:ac:85:9e:e3:aa:
                    a2:73:73:45:c3:8d:b8:3d:ab:c4:ce:5f:ee:47:1e:
                    f1:f8:ee:ff:eb:a4:3f:01:cc:66:71:00:74:5d:17:
                    74:05:71:32:e3:7d:07:bc:dc:c5:fa:b3:86:fc:83:
                    a4:7d:89:9e:dd:aa:1d:b1:a3:cc:86:e0:2e:70:92:
                    7e:c9:52:ea:51:e3:dd:d2:94:46:2b:ce:17:cf:27:
                    0f:ba:5d:8c:a0:4f:e9:21:98:91:38:d3:d7:5a:f5:
                    8d:f0:08:e6:26:3c:b3:2f:4a:08:c6:e1:c3:3c:36:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9C:8C:06:15:0F:06:A5:2E:E5:AC:85:42:F9:B3:9C:27:29:F7:30
            X509v3 Authority Key Identifier:
                keyid:41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131392e302f32342d3234203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:39:25:4f:99:aa:51:69:a6:47:19:52:7b:c2:a3:f0:b8:02:
         d2:d2:9c:d2:d9:c7:44:df:5d:cd:84:bd:58:5c:90:e7:28:25:
         7b:30:6f:83:e7:30:72:ac:99:41:bc:61:18:fb:7b:9e:11:45:
         a9:4b:c3:89:2b:d7:37:25:79:e0:e5:ff:39:7f:7c:fe:91:fe:
         5a:73:8e:1d:70:a6:35:7d:78:8e:ed:1c:bf:de:e4:06:bc:7b:
         23:7a:71:36:c7:fd:e9:6a:27:0e:25:88:2d:ee:d6:86:49:c9:
         85:4d:27:31:dd:d9:d3:79:72:b3:4c:34:9e:8e:01:9d:a7:69:
         f9:69:04:72:5d:f1:6c:da:88:69:6f:54:3d:bb:0c:37:e5:4b:
         27:7a:3a:4b:6c:2e:91:91:c3:62:3d:af:4f:dc:e9:73:0a:3a:
         04:ac:88:7a:8b:5f:e2:9d:a1:14:e1:39:43:3b:15:ae:d8:16:
         2e:b0:c3:87:5d:a9:e9:78:17:88:61:86:22:47:fc:66:60:e4:
         2f:93:89:a2:fa:d9:0f:f5:fa:74:a5:09:cb:ed:95:2d:18:f6:
         2a:da:72:fb:09:6f:48:df:a4:04:c7:8e:a5:9e:4f:17:b5:0e:
         92:b9:b1:9a:02:8d:a1:7e:a2:de:ce:9d:b6:2b:ac:f1:54:ba:
         81:f2:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 20:14:33 2026 by rpki-client