Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa
File:                     3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa (raw, json)
Hash identifier:          jB2uzF2F1jOjVsE/FYVF7GMY8fqmBqe5/xCtz+AdHrE=
Subject key identifier:   E9:27:2F:0A:CD:5B:3D:0F:D2:2A:69:54:92:8E:21:59:28:AC:1C:60
Certificate issuer:       /CN=70283050DD72A7A70DA44A0C786C2D36C246420E
Certificate serial:       4C53E33F8DB8B87DA64C4534D49E68E605F4E8D8
Authority key identifier: 70:28:30:50:DD:72:A7:A7:0D:A4:4A:0C:78:6C:2D:36:C2:46:42:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa
Signing time:             Mon 03 Nov 2025 00:48:40 +0000
ROA not before:           Mon 03 Nov 2025 00:43:40 +0000
ROA not after:            Mon 02 Nov 2026 00:48:40 +0000
asID:                     271215
IP address blocks:        179.48.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.crl
                          rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 16:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:53:e3:3f:8d:b8:b8:7d:a6:4c:45:34:d4:9e:68:e6:05:f4:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70283050DD72A7A70DA44A0C786C2D36C246420E
        Validity
            Not Before: Nov  3 00:43:40 2025 GMT
            Not After : Nov  2 00:48:40 2026 GMT
        Subject: CN=E9272F0ACD5B3D0FD22A6954928E215928AC1C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:50:02:5b:ea:46:0a:42:c5:53:91:c0:50:
                    4d:f3:d6:eb:ea:72:35:34:8b:78:f8:65:b5:9e:3b:
                    1b:ea:b5:cd:e4:a3:6c:6f:10:6f:fa:37:b4:c5:41:
                    ab:38:49:c2:4f:35:2a:c6:10:89:d5:35:68:0c:01:
                    ce:d7:0a:6a:9f:db:ba:bc:a7:fe:b3:7e:64:74:7f:
                    43:fd:64:71:ad:f7:e9:f2:3a:98:c7:4b:e4:53:f0:
                    1d:0a:d7:88:73:1f:02:17:fa:b9:a7:18:1b:99:71:
                    c8:5d:7b:8a:53:3c:4c:d6:33:32:d8:8c:87:07:15:
                    bd:0a:a9:21:d6:e3:08:19:bc:81:47:e8:b8:77:b8:
                    a8:13:e2:b4:9f:f9:84:3b:7a:b9:5c:17:e3:b0:fa:
                    56:b8:10:52:b3:61:13:b5:ef:be:3e:b3:f1:09:4f:
                    00:92:02:bf:b3:55:cb:ed:0b:98:32:30:42:db:e3:
                    ca:70:fc:73:49:ef:37:b9:b7:34:7e:c1:8b:b1:17:
                    d4:e9:a8:0e:19:22:3a:16:f2:fd:6a:7f:4f:67:52:
                    c6:65:5e:1a:10:cd:26:13:fd:14:52:84:f6:28:67:
                    d7:07:96:3a:33:ba:a8:2a:3a:92:77:c7:fb:f0:c6:
                    27:fa:5d:37:00:0f:d6:ed:b0:d2:f9:5b:1e:e3:4e:
                    35:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:2F:0A:CD:5B:3D:0F:D2:2A:69:54:92:8E:21:59:28:AC:1C:60
            X509v3 Authority Key Identifier:
                keyid:70:28:30:50:DD:72:A7:A7:0D:A4:4A:0C:78:6C:2D:36:C2:46:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/3137392e34382e3132342e302f32322d3234203d3e20323731323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:b6:e9:64:1d:48:af:34:b0:17:fd:77:de:59:16:08:20:c4:
         30:df:43:88:1b:55:fc:98:33:7c:19:1d:7d:63:3a:46:c3:c9:
         5d:5b:c6:a9:c2:95:ce:a5:ff:20:e6:aa:f9:cf:c7:b4:f8:c8:
         cb:92:a6:92:e8:5f:7a:88:b6:cd:92:ee:3d:90:42:63:16:44:
         28:5c:94:8d:7d:c3:bd:1a:dc:5b:72:0f:89:ee:51:ce:70:8e:
         f1:10:36:c3:c9:3f:d9:29:2a:2c:1a:ef:92:c2:4e:78:6c:06:
         bc:9a:9a:9a:71:13:bc:99:f7:6f:29:24:3d:cd:1c:05:16:26:
         c2:63:24:fc:93:3e:17:c9:60:47:54:05:db:6b:90:dc:b6:6e:
         57:01:5f:96:17:ea:b8:02:2b:fa:13:03:bb:93:99:d0:03:f6:
         70:b1:3f:4d:89:8c:1e:95:70:16:e9:b7:25:84:0b:0d:ab:76:
         de:85:68:bb:d1:4f:ac:e5:c7:cc:60:9c:1b:e2:66:84:ac:33:
         86:0f:29:ca:6c:0b:52:75:01:9e:d9:99:76:24:9b:85:69:07:
         35:54:75:99:f7:e3:b4:af:27:a5:14:d9:a3:3d:e4:c0:d4:12:
         4d:59:ea:4e:7d:77:76:59:d1:71:fc:02:7d:2d:18:f0:0f:df:
         a4:c4:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:30 2025 by rpki-client