Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38372e302f32342d3234203d3e20323634393936.roa
File:                     3137302e38342e38372e302f32342d3234203d3e20323634393936.roa (raw, json)
Hash identifier:          bPCRgqIkEhlooYjbIYOInnMsc9aq7IdU3SB9pOqLYFM=
Subject key identifier:   5A:A4:11:02:29:2A:D1:FA:93:57:86:27:DC:80:60:D3:64:46:6C:AA
Certificate issuer:       /CN=827D965704E253482E03B27A810CA99521D92AE0
Certificate serial:       0D58407C6F0AFDB09807731122CB810CC2DD7CDB
Authority key identifier: 82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38372e302f32342d3234203d3e20323634393936.roa
Signing time:             Fri 28 Aug 2026 18:30:55 +0000
ROA not before:           Fri 28 Aug 2026 18:25:55 +0000
ROA not after:            Fri 27 Aug 2027 18:30:55 +0000
asID:                     264996
IP address blocks:        170.84.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 18:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:58:40:7c:6f:0a:fd:b0:98:07:73:11:22:cb:81:0c:c2:dd:7c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827D965704E253482E03B27A810CA99521D92AE0
        Validity
            Not Before: Aug 28 18:25:55 2026 GMT
            Not After : Aug 27 18:30:55 2027 GMT
        Subject: CN=5AA41102292AD1FA93578627DC8060D364466CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:e1:09:20:a3:0c:6f:0f:a8:ad:a4:51:3a:
                    2c:2f:e1:ed:b0:66:7c:6b:e0:da:0f:08:27:b0:aa:
                    f9:4f:8d:7a:2a:d0:70:4c:d5:95:03:8c:31:e8:90:
                    69:90:48:4f:3f:2d:88:b6:48:eb:6a:0a:b9:15:31:
                    af:35:b4:bc:b2:e7:7f:8b:6b:8d:4e:84:54:34:21:
                    fe:2f:86:38:cf:18:c1:26:74:c3:4c:7e:a4:44:f7:
                    20:5e:51:9e:f3:56:43:75:1b:61:f9:52:6b:88:06:
                    df:5a:a5:e5:45:88:be:c3:92:43:94:e1:ae:07:da:
                    68:46:1c:95:63:b2:50:e5:f5:43:09:48:2f:13:63:
                    80:5f:60:50:73:6e:56:47:e9:2f:7f:60:e5:51:22:
                    61:0e:8f:9a:f0:2a:73:e9:e5:0c:6d:4e:f7:03:24:
                    55:a0:4c:a1:36:7f:43:3e:30:64:2a:e0:39:f8:42:
                    4f:ab:91:71:28:83:cb:7f:4b:53:d5:68:15:1e:06:
                    7f:d4:bd:e4:60:6a:72:d4:53:6d:a2:5c:e3:e9:f4:
                    66:34:74:03:2c:7b:c1:82:e2:96:95:2c:da:d2:25:
                    b1:4c:fc:4e:6c:43:37:82:93:1a:9c:0f:3b:0e:08:
                    2d:68:b5:9f:0f:0f:08:4f:14:27:0d:f9:3f:24:07:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A4:11:02:29:2A:D1:FA:93:57:86:27:DC:80:60:D3:64:46:6C:AA
            X509v3 Authority Key Identifier:
                keyid:82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38372e302f32342d3234203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:37:c1:ae:e5:38:ee:fe:1b:b3:0a:13:7b:cd:0f:4c:dc:
         b8:95:b9:c6:05:88:36:97:97:3c:02:9b:59:46:36:25:51:77:
         4b:6b:9c:d6:8e:35:a2:79:9c:0f:67:36:4d:5b:ce:77:93:81:
         07:11:71:07:b5:52:4a:5f:7d:63:bf:1d:37:76:a3:58:4f:13:
         49:f5:52:0b:af:31:6a:f4:f9:95:fd:e3:b3:f6:4e:f0:9b:f7:
         43:8c:52:1f:55:1d:aa:be:f1:90:f5:bb:86:3a:df:97:b5:85:
         eb:dd:23:8d:eb:aa:44:91:60:3f:e6:7f:d4:fb:af:91:29:24:
         3a:66:79:da:aa:96:e4:98:bb:69:0c:3a:52:80:65:98:13:8c:
         97:21:cd:b5:13:31:92:2d:41:97:6e:81:1e:b2:21:62:c4:89:
         9b:47:b5:f7:90:2e:b0:fd:73:63:96:f6:c8:d1:b6:3b:30:73:
         b6:f6:fc:03:fc:68:29:18:00:fc:df:a4:e9:5e:0d:b7:1c:d9:
         1a:87:ff:26:1c:d1:fc:46:e4:14:77:52:13:44:dd:7a:e6:d7:
         1e:4a:98:05:43:59:f8:bd:11:de:32:05:b8:94:ad:0b:4c:f1:
         36:d2:d1:08:18:88:82:87:fc:65:72:f2:b0:4e:06:a6:02:c8:
         2c:f5:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:55:58 2026 by rpki-client