Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa
File:                     3137392e36332e36302e302f32322d3234203d3e20323731353830.roa (raw, json)
Hash identifier:          301mDY48vbEI952fMM27K8WcbY0TohcVPRNBPW8gBXs=
Subject key identifier:   93:B5:F1:8B:7D:B1:D8:9B:DE:34:E6:E0:49:8B:5E:4A:E4:19:49:06
Certificate issuer:       /CN=4CDB09F2110BB09797693F779998E3BBB059C966
Certificate serial:       1AB2A98C2AD139F70E55AE228D8E8678112BF42D
Authority key identifier: 4C:DB:09:F2:11:0B:B0:97:97:69:3F:77:99:98:E3:BB:B0:59:C9:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CDB09F2110BB09797693F779998E3BBB059C966.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa
Signing time:             Fri 24 Oct 2025 18:59:29 +0000
ROA not before:           Fri 24 Oct 2025 18:54:29 +0000
ROA not after:            Fri 23 Oct 2026 18:59:29 +0000
asID:                     271580
IP address blocks:        179.63.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/4CDB09F2110BB09797693F779998E3BBB059C966.crl
                          rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/4CDB09F2110BB09797693F779998E3BBB059C966.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CDB09F2110BB09797693F779998E3BBB059C966.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b2:a9:8c:2a:d1:39:f7:0e:55:ae:22:8d:8e:86:78:11:2b:f4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDB09F2110BB09797693F779998E3BBB059C966
        Validity
            Not Before: Oct 24 18:54:29 2025 GMT
            Not After : Oct 23 18:59:29 2026 GMT
        Subject: CN=93B5F18B7DB1D89BDE34E6E0498B5E4AE4194906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:d5:23:85:e6:87:bc:21:db:70:09:db:03:
                    f2:dc:25:34:6c:5d:ae:7c:b5:89:77:38:7f:4d:c5:
                    df:f3:64:33:99:f9:73:f8:75:3a:e5:84:fd:79:32:
                    b3:a1:57:7e:89:b4:1f:82:fc:1b:2a:0f:a9:aa:77:
                    82:48:75:9c:80:95:16:e9:8a:60:f4:68:a9:a4:69:
                    2a:e1:e3:d5:82:b6:93:d9:f1:99:6b:b0:ea:55:f4:
                    f9:cf:e8:c4:f1:b4:6a:07:28:03:d6:a3:13:ee:6a:
                    5d:4d:87:15:eb:97:59:d7:b9:18:69:8a:5c:b4:90:
                    f3:05:cc:ea:77:90:a1:9a:73:8f:28:28:40:4e:a5:
                    c7:a9:c9:d8:e0:ba:2c:bb:ce:a1:c8:ac:9d:30:09:
                    97:6c:f7:0b:dd:82:41:6f:68:82:6c:64:37:fc:81:
                    15:20:c5:1d:f4:6d:83:09:a3:fc:43:36:54:e6:9d:
                    79:01:3e:98:6a:f2:d0:c9:66:23:89:eb:5b:42:3e:
                    9d:13:bc:0d:e2:b7:ab:a9:83:19:02:c6:f6:e6:0d:
                    ce:94:76:8b:c0:25:7f:94:7b:f9:fb:d8:97:1d:49:
                    32:22:ac:8f:2f:30:fd:db:32:35:cb:db:f8:4e:0a:
                    d9:25:f4:36:42:03:33:95:27:9c:56:8a:9e:8f:e1:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B5:F1:8B:7D:B1:D8:9B:DE:34:E6:E0:49:8B:5E:4A:E4:19:49:06
            X509v3 Authority Key Identifier:
                keyid:4C:DB:09:F2:11:0B:B0:97:97:69:3F:77:99:98:E3:BB:B0:59:C9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/4CDB09F2110BB09797693F779998E3BBB059C966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CDB09F2110BB09797693F779998E3BBB059C966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:ec:34:06:f4:d2:84:10:8f:35:ad:51:4f:59:fc:1b:d0:
         13:38:aa:ef:fc:e0:b3:39:6c:bc:66:fc:f5:cb:ad:f8:fb:1b:
         b1:23:e8:a4:8f:69:d8:df:56:dd:d7:5e:ef:20:d0:f2:df:18:
         80:b0:7e:02:d2:37:88:90:57:42:97:34:01:1f:e1:ea:5b:d4:
         64:27:0d:5f:35:d7:bb:a6:9f:20:2c:4e:73:7f:0f:b1:7d:2f:
         de:69:36:bc:f8:a3:41:95:df:e4:ce:d6:98:14:80:0f:a6:3d:
         e5:d6:3a:a5:a8:ef:63:2a:c0:46:23:e6:6f:a4:97:85:15:bd:
         78:e4:4f:04:d1:62:ba:20:4d:56:f2:e0:0e:73:05:6e:f9:2f:
         38:4d:b9:5e:22:59:87:77:ba:6c:e5:e4:a0:c5:25:8c:04:76:
         d3:c7:f1:ef:96:97:14:1f:3d:2b:7b:93:45:26:2e:c8:f8:c2:
         29:70:0b:ee:3e:b4:77:02:5c:c2:12:c3:a1:45:0f:41:8a:76:
         29:2c:dd:17:c0:e5:b2:e0:ab:15:0a:b3:3d:cd:59:ac:71:2c:
         f5:e1:20:10:4e:db:5b:e4:59:3b:f6:10:46:09:09:e8:03:d4:
         5d:85:f4:6d:40:ad:fc:84:3b:57:48:bf:dd:5a:73:83:66:7c:
         81:78:5c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:43:44 2025 by rpki-client