Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa
File:                     3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa (raw, json)
Hash identifier:          YWW0AAgVOqTSmjbfKxYTyHOOZyiB/VcWVlZqbXMNbtQ=
Subject key identifier:   13:55:14:84:FC:CC:21:E3:FE:FE:10:5C:F8:FC:1B:18:E6:CA:B7:4C
Certificate issuer:       /CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
Certificate serial:       347941994A9437D6A68C1F82DD8604196F6DD869
Authority key identifier: EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa
Signing time:             Thu 23 Oct 2025 18:04:59 +0000
ROA not before:           Thu 23 Oct 2025 17:59:59 +0000
ROA not after:            Thu 22 Oct 2026 18:04:59 +0000
asID:                     264920
IP address blocks:        179.48.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl
                          rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 16:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:79:41:99:4a:94:37:d6:a6:8c:1f:82:dd:86:04:19:6f:6d:d8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
        Validity
            Not Before: Oct 23 17:59:59 2025 GMT
            Not After : Oct 22 18:04:59 2026 GMT
        Subject: CN=13551484FCCC21E3FEFE105CF8FC1B18E6CAB74C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:4e:6b:f9:e2:fe:88:25:97:30:cb:3b:94:
                    45:09:60:02:b9:a8:ec:cd:31:a1:53:30:a2:00:bd:
                    d6:cb:c5:ae:e6:00:a5:bd:4e:2d:1f:64:8c:e1:cc:
                    ff:ac:71:f1:2c:7e:ba:18:15:dc:99:9e:b2:8c:6c:
                    4b:e8:3b:c1:d9:cd:95:01:67:6c:6a:71:44:ba:bd:
                    2d:b1:ff:ff:ed:2b:b6:74:3c:c6:55:cd:40:67:c7:
                    50:a0:42:13:77:df:b5:e7:3d:37:09:0e:3c:ca:ef:
                    bb:f6:fa:b9:f4:70:bd:62:3a:b5:e8:4c:c4:dc:56:
                    f8:54:5a:f5:ae:df:24:8d:44:dd:a4:ac:f6:81:c7:
                    22:a7:a2:d7:dc:70:12:e0:3a:11:26:b1:04:e3:92:
                    b2:55:50:30:24:a8:14:2a:71:fa:71:81:df:d7:d3:
                    60:04:4c:7c:7c:6c:22:ea:89:55:9e:ea:cd:af:c9:
                    2c:4f:22:fd:7a:46:50:31:9c:f9:3d:b4:5c:ca:86:
                    ee:f5:b8:8f:60:fb:a2:3e:17:29:e4:d1:4a:4b:d0:
                    97:94:74:be:33:26:f8:87:16:d3:12:de:92:15:d4:
                    19:2b:82:86:8b:0d:f3:03:c6:11:a4:a3:ce:c7:7f:
                    bb:ca:fb:5e:29:44:ff:67:af:a4:9a:32:43:ce:a9:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:55:14:84:FC:CC:21:E3:FE:FE:10:5C:F8:FC:1B:18:E6:CA:B7:4C
            X509v3 Authority Key Identifier:
                keyid:EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:99:38:44:5b:2d:6e:4b:9d:43:12:25:7e:d4:71:81:ad:
         67:d3:9b:fe:08:f7:fb:88:2d:94:77:cd:8b:63:40:5e:d4:8a:
         5e:28:fd:bc:8a:ed:82:35:64:a5:07:6e:7e:8b:36:2d:af:1e:
         3c:55:09:16:07:48:46:58:97:85:9a:9f:4b:38:71:94:1b:96:
         90:26:79:eb:dd:f8:ee:c4:e9:a5:bf:bb:17:ce:e8:29:ac:85:
         01:cd:73:0b:0a:9b:97:55:99:a0:0d:a7:d4:85:20:d0:95:1b:
         97:97:87:fb:c9:1f:0a:55:6f:39:e4:77:9a:b7:76:93:2f:10:
         97:ae:42:8f:41:63:69:9f:72:71:a8:58:35:d8:68:62:0b:b1:
         71:82:7a:f4:1f:24:7d:8b:f7:6b:ae:71:d8:b9:21:0e:f2:51:
         e6:74:5c:b0:fd:2d:4f:66:57:76:a4:28:a5:5d:8c:54:69:53:
         a2:9c:02:c9:e8:57:7f:7e:13:4c:f1:7b:d1:19:0e:21:ad:2c:
         88:a4:a0:3e:18:ce:be:57:90:fe:d6:20:93:80:7c:33:e5:fe:
         21:16:0d:9d:60:07:a0:e3:1b:e3:1c:a6:38:9b:dc:e7:fb:ea:
         f1:72:52:58:2a:23:78:69:13:84:8e:00:29:40:b4:15:a3:b2:
         6b:c0:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:58 2025 by rpki-client