Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131362e302f32342d3234203d3e20323731333235.roa
File:                     3137392e302e3131362e302f32342d3234203d3e20323731333235.roa (raw, json)
Hash identifier:          HKCIeW3RMY3xnCGqKDM6HlLG9aefqTymbNLhUQggW+k=
Subject key identifier:   99:89:84:47:13:1D:70:81:59:3D:15:E9:CD:2A:3D:9E:F8:50:32:87
Certificate issuer:       /CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
Certificate serial:       108F45B8F253835AFD6D7C622BFFD6CCDFCA90F7
Authority key identifier: 09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131362e302f32342d3234203d3e20323731333235.roa
Signing time:             Fri 18 Jul 2025 02:33:21 +0000
ROA not before:           Fri 18 Jul 2025 02:28:21 +0000
ROA not after:            Fri 17 Jul 2026 02:33:21 +0000
asID:                     271325
IP address blocks:        179.0.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8f:45:b8:f2:53:83:5a:fd:6d:7c:62:2b:ff:d6:cc:df:ca:90:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
        Validity
            Not Before: Jul 18 02:28:21 2025 GMT
            Not After : Jul 17 02:33:21 2026 GMT
        Subject: CN=99898447131D7081593D15E9CD2A3D9EF8503287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:9f:94:5d:2b:a1:67:ec:a0:19:e1:9b:78:
                    ec:56:96:92:f5:ea:42:10:7f:58:61:6d:eb:ee:32:
                    2f:d7:1d:9b:9b:4d:08:0b:98:e2:b2:d7:e7:f2:c0:
                    73:5e:35:8b:67:42:cc:4a:2d:b1:eb:53:cb:08:70:
                    dd:87:3d:e8:06:4c:07:b4:1d:fa:f2:29:a5:fc:bc:
                    e3:ee:d4:4a:90:94:7f:d6:5d:d4:91:6b:ed:92:e7:
                    e9:a0:8c:a9:f9:78:94:85:30:59:e0:14:5a:2f:33:
                    6b:bb:f2:2c:83:9e:0c:5d:38:5a:d1:09:8a:26:f0:
                    d3:97:f6:a8:ec:d6:03:5b:92:b3:ec:24:17:06:bf:
                    c2:c1:22:b3:9e:ba:a5:c7:d8:dc:d9:96:5e:7f:85:
                    3c:bd:7c:06:93:1c:db:45:76:b0:9e:5b:f9:fe:e5:
                    5a:80:2c:b9:d6:51:00:ff:7d:f3:4f:28:4f:d5:0f:
                    5f:e1:72:ac:4b:8c:52:ba:2f:cf:ba:41:58:45:81:
                    ca:05:8c:65:96:c0:cd:80:b3:d5:6f:fb:dc:c9:a4:
                    8a:dd:09:84:38:f9:a1:d5:d8:38:51:01:d8:47:30:
                    9b:27:f4:7f:1e:c4:b1:96:0d:fc:9b:8b:85:fa:a9:
                    24:59:10:38:03:00:80:b4:bf:50:fd:34:7c:8e:4c:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:89:84:47:13:1D:70:81:59:3D:15:E9:CD:2A:3D:9E:F8:50:32:87
            X509v3 Authority Key Identifier:
                keyid:09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131362e302f32342d3234203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b3:a9:90:ab:03:ec:10:08:96:b2:e6:13:32:e5:bb:38:a5:
         c6:36:54:bb:d4:61:86:1c:36:50:f3:dd:fb:b6:1d:c6:e4:b6:
         50:0b:11:90:b5:f1:5d:e4:92:56:2c:8a:99:50:4b:58:65:a7:
         8f:be:d1:c2:30:27:8c:07:60:26:de:16:5b:62:86:fe:83:8e:
         ac:91:77:19:0a:ca:0b:44:af:ee:39:9b:db:1a:c7:2d:d7:47:
         65:95:ee:aa:49:e4:f0:3a:65:39:da:a8:2e:db:57:9b:e3:f3:
         e6:aa:3a:c8:53:01:6f:f1:68:d4:0f:1d:e5:ca:7f:f9:de:19:
         18:57:e0:c0:5a:49:bb:cd:b7:d0:c6:c9:3e:ff:a7:26:d1:93:
         c2:6a:ad:e7:5d:b8:59:3d:9e:b8:1d:1a:ec:ac:e0:56:d7:2f:
         49:91:56:fd:61:03:7c:0f:f9:1b:b0:81:f6:15:d0:e9:6c:fd:
         3e:be:84:6d:da:99:2e:56:c8:72:be:c4:fb:6e:20:90:39:60:
         0f:08:8c:63:24:e2:3e:95:5a:85:94:df:c2:52:56:1e:01:3a:
         1a:73:b1:34:92:1d:e6:3f:f1:a3:38:6d:a9:17:68:63:a9:80:
         10:92:d3:2a:9c:a7:55:33:0f:b6:f3:64:4b:8c:45:68:4d:40:
         66:2b:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:13 2025 by rpki-client