Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa
File:                     3137392e302e3131382e302f32332d3233203d3e20323731333235.roa (raw, json)
Hash identifier:          Q3Lz0svBdiEQObYY6a7VbB+xQo9KGiexw4EkyoDjx6s=
Subject key identifier:   10:70:E6:A2:29:67:69:7D:48:CB:FB:D7:46:C6:53:3E:0E:1A:9E:0D
Certificate issuer:       /CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
Certificate serial:       5A45D5FDC786E160980A9AEF8D9D8251DF894F81
Authority key identifier: 09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa
Signing time:             Fri 18 Jul 2025 02:33:21 +0000
ROA not before:           Fri 18 Jul 2025 02:28:21 +0000
ROA not after:            Fri 17 Jul 2026 02:33:21 +0000
asID:                     271325
IP address blocks:        179.0.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 08:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:45:d5:fd:c7:86:e1:60:98:0a:9a:ef:8d:9d:82:51:df:89:4f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
        Validity
            Not Before: Jul 18 02:28:21 2025 GMT
            Not After : Jul 17 02:33:21 2026 GMT
        Subject: CN=1070E6A22967697D48CBFBD746C6533E0E1A9E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:e9:13:28:7f:db:a9:df:e1:c7:91:07:c8:
                    bf:5f:e4:31:5b:25:f8:63:30:24:59:b0:6f:fc:40:
                    13:32:9e:fd:0d:a7:1c:e5:91:f6:57:a4:ae:61:a1:
                    49:c8:65:68:14:49:5b:2d:57:bb:5e:f0:33:4f:65:
                    4f:a1:bd:7e:9d:b4:5d:c5:1b:47:81:00:2c:b2:32:
                    55:b3:d1:62:89:58:bc:f4:0a:7e:3e:01:d7:97:bc:
                    d8:da:dd:a4:6c:13:8a:56:ec:d2:c6:fc:df:73:8c:
                    7c:dc:d5:8b:c2:82:ae:06:f6:1a:99:fb:86:16:3a:
                    9a:0b:76:41:04:7c:81:dc:b5:da:5a:c5:b8:6c:8a:
                    35:4d:78:71:48:1c:f9:da:a3:c2:bf:e8:fd:6a:54:
                    8f:cf:f9:34:af:55:25:e3:1e:a7:e2:3b:bc:ea:3c:
                    77:f4:60:5d:a4:25:ee:c8:ed:42:0c:11:d5:63:b1:
                    f7:ac:66:df:8f:65:84:1e:75:e2:1f:da:86:6d:09:
                    8d:e0:81:29:92:f1:d2:b5:6f:32:77:37:f4:50:35:
                    56:3d:04:05:e1:3e:ec:06:f5:75:06:a2:b4:37:83:
                    df:ac:00:8c:96:0b:23:51:47:33:54:f0:5d:40:6c:
                    b4:b7:ce:d5:18:ec:d2:8f:e7:8b:4c:92:52:b6:61:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:E6:A2:29:67:69:7D:48:CB:FB:D7:46:C6:53:3E:0E:1A:9E:0D
            X509v3 Authority Key Identifier:
                keyid:09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32332d3233203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:60:ac:5c:11:de:d5:71:e0:54:ad:bb:56:76:b2:19:e1:15:
         6b:17:0b:56:21:c4:3c:65:23:d7:33:61:6f:98:fc:a3:3a:07:
         31:15:e0:e1:da:54:1e:7f:2a:03:fe:1a:25:e2:2c:0f:db:42:
         2d:2b:20:18:69:15:7e:b1:1f:be:90:16:56:fa:b6:48:63:4a:
         a1:f3:5a:44:64:03:5b:14:98:79:fc:17:27:f6:85:88:4a:6c:
         47:06:8a:a6:6f:7f:a2:ba:83:8b:39:c7:41:64:3f:fd:39:86:
         90:8c:e9:19:62:18:b9:d3:2a:e6:ee:6c:28:55:b4:93:38:6f:
         94:ab:b9:48:93:8a:56:15:f2:9a:df:b0:9f:85:69:80:cf:68:
         e2:f3:2c:17:c5:c1:b6:6d:0a:3a:2f:9f:55:c7:cb:e1:16:8c:
         91:28:30:4e:47:80:6d:f6:60:33:1e:c5:90:3c:77:c5:8b:64:
         9d:45:e2:92:4b:f3:3c:09:a4:da:6f:94:3c:bc:cb:ef:a1:04:
         4c:f7:10:62:ff:c5:bd:6b:5c:f5:d6:13:45:48:b5:5f:9d:c8:
         3d:1c:7c:64:5c:5e:7b:aa:42:d6:70:ab:35:d2:5f:f8:03:f4:
         65:12:a6:a0:f9:6d:83:3e:19:61:15:60:6d:7b:7c:16:08:b0:
         13:6a:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:26 2025 by rpki-client