Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136322e302f32342d3234203d3e20323634313132.roa
File:                     3137302e38332e3136322e302f32342d3234203d3e20323634313132.roa (raw, json)
Hash identifier:          0MI2h/BTaDp/v2dgB3ad/xrkZcscbI99fKh2XDzX7fA=
Subject key identifier:   51:F8:ED:22:75:3A:0D:CB:90:DA:FB:CA:22:D1:AA:A4:8B:0C:52:92
Certificate issuer:       /CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
Certificate serial:       389215F6DF72DCED2CA01466411A969B3BE5EE14
Authority key identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136322e302f32342d3234203d3e20323634313132.roa
Signing time:             Fri 05 Jun 2026 02:01:02 +0000
ROA not before:           Fri 05 Jun 2026 01:56:02 +0000
ROA not after:            Fri 04 Jun 2027 02:01:02 +0000
asID:                     264112
IP address blocks:        170.83.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:92:15:f6:df:72:dc:ed:2c:a0:14:66:41:1a:96:9b:3b:e5:ee:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
        Validity
            Not Before: Jun  5 01:56:02 2026 GMT
            Not After : Jun  4 02:01:02 2027 GMT
        Subject: CN=51F8ED22753A0DCB90DAFBCA22D1AAA48B0C5292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:92:66:6e:40:5f:70:70:06:b3:06:e1:df:
                    fc:98:a4:84:97:a8:da:4c:7a:9c:0e:5e:be:f3:f6:
                    ff:ae:63:f4:65:89:94:da:a2:a9:88:4d:34:13:ec:
                    dc:17:97:4d:07:6b:07:9d:8b:e9:4a:14:b3:d6:c1:
                    d4:10:d8:38:19:bd:0f:d6:d5:3d:13:44:10:fa:41:
                    03:6e:1e:ac:43:4c:e6:bb:87:0c:ce:b0:60:72:61:
                    05:f8:78:44:7b:fb:48:9d:6e:28:20:9a:e1:a6:6f:
                    a2:62:65:f2:51:3b:e2:d0:fd:eb:98:ab:ec:52:10:
                    b7:db:43:48:ea:f3:24:02:6c:67:72:77:ea:cc:82:
                    f8:4a:9d:f7:19:20:6f:61:cf:46:9f:4d:3d:dd:39:
                    55:18:54:a2:16:ee:4f:35:68:84:d9:12:5e:5d:7d:
                    9e:54:40:88:85:3a:9d:66:54:11:a1:47:40:a5:fd:
                    dc:c5:e8:36:f4:f2:8b:54:95:78:cd:20:62:af:00:
                    d7:a2:b4:3f:08:09:6d:9d:91:78:d9:fd:ab:87:6c:
                    39:a8:00:72:bd:d7:b9:c9:47:ff:5b:89:e6:43:df:
                    5a:2b:e0:9b:78:cf:77:d4:5b:1c:b2:7e:af:7f:1e:
                    82:fc:e2:cb:1a:bc:ef:9b:17:a3:44:8d:61:7f:54:
                    3b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F8:ED:22:75:3A:0D:CB:90:DA:FB:CA:22:D1:AA:A4:8B:0C:52:92
            X509v3 Authority Key Identifier:
                keyid:A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136322e302f32342d3234203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:95:49:23:e1:91:e9:b0:57:96:2c:df:14:c2:da:31:2f:
         ab:ff:59:f4:29:38:d3:d4:5e:0e:79:54:84:e3:34:b2:16:1f:
         ed:0d:41:16:1a:11:d0:39:a7:3c:55:40:1a:fa:f6:d2:63:df:
         52:c9:a1:6c:7e:87:5c:ee:34:5a:ed:6a:5b:70:ae:2d:b7:24:
         21:fa:ab:0d:bc:e1:65:0f:82:c9:78:33:2f:74:fb:cd:93:2d:
         0f:21:ad:40:3b:77:33:bd:fc:46:d8:28:b3:91:3f:d9:73:d3:
         2f:99:ac:57:3a:ab:a8:c0:fd:fe:4b:10:8a:ff:26:4b:34:f7:
         bb:35:29:d4:59:a9:ea:b3:ca:31:1b:72:49:c4:f3:66:33:06:
         44:7a:0d:a6:6f:54:e4:65:49:19:fb:25:8b:06:8b:3a:ab:e4:
         a3:db:c8:40:c2:aa:59:17:a4:13:33:d2:90:52:b2:e8:60:a9:
         c5:5a:86:71:fb:7f:a6:5e:d7:ce:51:e0:9e:f2:4e:8a:b6:42:
         48:d7:6c:b6:92:b2:35:b1:3c:fd:91:4f:36:20:55:0a:22:3b:
         08:56:08:76:5e:81:fe:0f:2b:05:a0:fa:46:9b:fe:e0:11:f0:
         96:f3:a8:d6:f7:89:4f:e0:27:f2:40:83:62:4b:88:2d:5b:c8:
         44:9d:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:13:26 2026 by rpki-client