Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38352e302f32342d3234203d3e20323634393936.roa
File:                     3137302e38342e38352e302f32342d3234203d3e20323634393936.roa (raw, json)
Hash identifier:          INNqVFlE+gHJue30FRkT5XoagYkcIVLwCG+F0fp+36k=
Subject key identifier:   FF:B6:31:5D:94:92:BD:5C:C8:2E:C8:8A:9D:2E:DD:44:67:6B:61:9C
Certificate issuer:       /CN=827D965704E253482E03B27A810CA99521D92AE0
Certificate serial:       5A5142A3D6A5D38F7A834B769E8BD784D0A75251
Authority key identifier: 82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38352e302f32342d3234203d3e20323634393936.roa
Signing time:             Fri 28 Aug 2026 18:30:59 +0000
ROA not before:           Fri 28 Aug 2026 18:25:59 +0000
ROA not after:            Fri 27 Aug 2027 18:30:59 +0000
asID:                     264996
IP address blocks:        170.84.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:51:42:a3:d6:a5:d3:8f:7a:83:4b:76:9e:8b:d7:84:d0:a7:52:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827D965704E253482E03B27A810CA99521D92AE0
        Validity
            Not Before: Aug 28 18:25:59 2026 GMT
            Not After : Aug 27 18:30:59 2027 GMT
        Subject: CN=FFB6315D9492BD5CC82EC88A9D2EDD44676B619C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:67:2e:a1:9e:4c:c7:82:1f:0d:a2:19:5d:
                    ec:7e:64:b5:c7:24:d3:4c:fe:d3:c4:53:1c:37:be:
                    e9:77:cc:49:61:42:ce:55:a0:00:00:f2:55:aa:20:
                    65:bb:39:9c:18:87:1e:95:2d:09:e0:be:e6:63:c2:
                    88:31:f8:ea:fa:c0:99:9a:d8:f8:52:e3:9b:64:4f:
                    08:73:4b:85:fe:61:4e:f9:a0:eb:8e:85:bb:63:67:
                    7e:2c:81:b2:ef:f2:77:f7:aa:a3:95:93:64:f4:b0:
                    bc:c4:b4:e5:07:6c:60:cc:d2:bd:3b:d1:2c:a7:8e:
                    40:0b:b4:e3:d3:d2:7e:dc:a4:10:ef:3f:26:c1:45:
                    7a:95:9a:53:50:04:85:a7:b3:de:7d:dd:24:85:c3:
                    ae:50:64:2e:ac:cc:32:ac:0e:f6:c5:d8:7e:9f:47:
                    67:07:8f:37:2e:f3:75:9e:0b:24:ca:49:96:46:3d:
                    e6:51:68:c4:08:c6:f5:3c:90:6b:88:1a:84:ab:03:
                    3d:bb:f8:a5:7a:89:7b:3a:5e:9d:27:fb:a7:8f:96:
                    ce:73:29:1e:91:e3:f6:d9:49:8c:d2:0b:86:11:84:
                    b6:71:d3:64:e2:85:f1:7a:a8:69:e6:bf:e1:14:5a:
                    3e:f6:37:4e:71:c5:d8:2c:9d:5e:30:53:68:96:ac:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B6:31:5D:94:92:BD:5C:C8:2E:C8:8A:9D:2E:DD:44:67:6B:61:9C
            X509v3 Authority Key Identifier:
                keyid:82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38352e302f32342d3234203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:38:a9:dd:5f:16:6e:d3:37:fa:8d:1a:34:de:78:7a:6c:83:
         4b:7f:eb:c8:00:4e:0a:71:4e:21:80:02:3a:b7:93:0a:2b:31:
         93:21:fd:fd:a8:e6:4c:1c:d9:a3:26:e4:22:dc:d0:e3:44:21:
         74:a8:cd:a9:6c:74:c5:a0:71:7f:e3:61:1c:4a:13:69:f2:9a:
         3d:42:83:9c:ac:53:a2:57:8e:18:82:79:86:49:56:0f:33:42:
         bb:d2:6a:ff:d5:87:ba:6d:a5:38:e8:42:39:37:95:bc:d7:9b:
         a2:0b:06:92:86:8a:75:42:e9:a6:ef:be:4a:e3:93:17:a4:66:
         8e:86:f4:54:b5:a1:6b:ec:ac:e4:0e:ae:a9:9b:6e:d4:c5:ca:
         4d:e3:aa:4b:07:22:a9:a5:54:c7:ae:56:34:69:cd:3a:da:39:
         fe:66:2c:50:9a:d0:f5:a2:bc:7f:0a:a8:be:5f:52:2a:ad:48:
         5e:e4:e8:9d:9d:f4:59:e7:02:9d:a0:b1:54:52:c4:a2:da:5d:
         30:06:a4:46:e9:15:d3:99:12:19:97:d6:93:aa:33:1b:ed:fd:
         02:77:a8:76:40:d9:e6:91:5f:03:a3:43:6c:ae:11:e2:36:00:
         dc:89:b4:4e:65:c2:33:c2:16:07:49:eb:4d:d1:7c:a8:40:3e:
         66:80:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:06:10 2026 by rpki-client