Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32342d3234203d3e20323634313132.roa
File:                     3137302e38332e3136302e302f32342d3234203d3e20323634313132.roa (raw, json)
Hash identifier:          0naoXf9CfiPyZjColrHiOIkNRztETW8BNipZ0usHWNA=
Subject key identifier:   13:DD:D9:7B:D0:12:48:28:C9:A8:DC:48:2A:FE:40:2E:E6:EE:09:96
Certificate issuer:       /CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
Certificate serial:       52E0C540EE840D793F6F1627612517246980F5F7
Authority key identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32342d3234203d3e20323634313132.roa
Signing time:             Fri 05 Jun 2026 02:00:56 +0000
ROA not before:           Fri 05 Jun 2026 01:55:56 +0000
ROA not after:            Fri 04 Jun 2027 02:00:56 +0000
asID:                     264112
IP address blocks:        170.83.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e0:c5:40:ee:84:0d:79:3f:6f:16:27:61:25:17:24:69:80:f5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
        Validity
            Not Before: Jun  5 01:55:56 2026 GMT
            Not After : Jun  4 02:00:56 2027 GMT
        Subject: CN=13DDD97BD0124828C9A8DC482AFE402EE6EE0996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:19:66:7c:6a:8a:2f:68:bb:cc:68:47:6c:
                    4e:11:d0:11:67:82:72:10:3d:83:40:e8:e9:5e:e8:
                    5a:63:4b:ee:b1:fe:b1:dc:10:7e:20:ad:c0:d5:3b:
                    b5:4a:97:0c:89:93:3a:fd:1f:78:9e:85:f5:76:c8:
                    b3:49:43:0a:5b:25:7d:78:06:f3:5b:d0:96:19:26:
                    8e:e5:c4:de:36:77:a0:4d:e4:a5:1a:e5:af:d1:95:
                    06:1a:21:a7:0b:ce:e8:21:cf:c2:05:8d:30:85:84:
                    cf:31:8f:64:df:bf:ed:f0:f3:1e:d4:54:e3:6c:dc:
                    42:ed:d1:e9:a9:28:c2:65:9c:86:70:3d:2b:0c:f0:
                    c9:e8:6b:9c:68:34:7e:11:00:27:ab:9e:b2:e7:e8:
                    8b:7f:62:de:6f:39:1c:9c:56:7d:70:da:93:f8:89:
                    63:90:19:5c:a3:c0:9d:ab:ba:5a:4e:46:e1:8e:74:
                    b8:93:99:bf:1f:bd:77:2e:f5:8f:97:ea:fc:e7:e9:
                    a5:98:00:6a:6e:34:c5:3a:9a:2c:92:51:be:5e:dd:
                    5d:f2:03:96:4d:cf:16:4b:d4:9e:30:b6:3a:8a:82:
                    87:ef:7c:de:28:04:9e:1f:b5:41:a4:ab:e8:d0:73:
                    6c:ae:fc:91:f7:5f:db:3d:bf:ad:bc:37:66:d6:0a:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DD:D9:7B:D0:12:48:28:C9:A8:DC:48:2A:FE:40:2E:E6:EE:09:96
            X509v3 Authority Key Identifier:
                keyid:A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32342d3234203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:90:f3:6d:6f:9b:3a:55:25:fb:75:0a:0c:41:6d:f6:22:c3:
         61:ce:a6:0b:39:f8:14:06:e4:bb:72:e9:4f:f1:70:88:e5:9b:
         70:61:aa:54:5e:c0:13:1d:13:0b:0b:23:b8:42:af:5e:66:a5:
         c1:6b:60:a3:f0:6e:f1:67:e1:67:bb:18:9c:72:f4:e2:ae:03:
         33:8d:14:fc:c5:00:1c:d6:6d:3c:bc:f8:83:ae:73:99:c2:80:
         e7:37:44:b2:9c:96:57:95:00:69:f2:63:17:fa:4d:6f:a3:8b:
         10:85:64:dc:a8:f5:6d:28:3a:b1:a0:b1:f4:64:19:cb:bc:bd:
         e9:f1:b1:41:8f:c8:dc:2e:cd:f4:63:5c:5e:65:3e:ad:99:9e:
         82:bc:20:02:33:c7:97:a9:c0:7a:16:c8:64:ba:58:38:8b:67:
         45:f6:4b:fa:bf:f3:37:8f:79:a6:e6:79:c0:64:08:dc:75:28:
         46:cb:03:74:f3:bb:ab:3b:f3:c1:a7:10:69:17:79:b0:77:ee:
         a3:12:a1:6d:e7:e9:b1:10:3b:91:08:fc:09:ad:70:e3:5b:50:
         ea:a4:43:fd:10:d2:73:d8:a0:b7:06:a0:4c:0d:e5:cb:ae:0b:
         b5:71:67:81:2f:0e:fb:2c:3c:95:49:64:66:e4:04:8c:d6:cf:
         8e:ee:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:13:26 2026 by rpki-client