Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa
File:                     3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa (raw, json)
Hash identifier:          i6PzckFJ513eRbCT3p8Igb6VaQ85wiiubjCujE0mXZo=
Subject key identifier:   82:B4:3E:5D:EE:F0:FC:9E:26:88:7B:B2:EE:4E:F5:14:C0:CC:3E:56
Certificate issuer:       /CN=62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5
Certificate serial:       3CAD8BD022E08A3DE5AF66EE2F4A7DE5291B024D
Authority key identifier: 62:36:5D:DB:5E:71:80:DE:CD:F6:ED:E9:FA:D3:D5:10:FF:09:84:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa
Signing time:             Sat 04 Apr 2026 15:08:54 +0000
ROA not before:           Sat 04 Apr 2026 15:03:54 +0000
ROA not after:            Sat 03 Apr 2027 15:08:54 +0000
asID:                     264300
IP address blocks:        170.244.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.crl
                          rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 18:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ad:8b:d0:22:e0:8a:3d:e5:af:66:ee:2f:4a:7d:e5:29:1b:02:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5
        Validity
            Not Before: Apr  4 15:03:54 2026 GMT
            Not After : Apr  3 15:08:54 2027 GMT
        Subject: CN=82B43E5DEEF0FC9E26887BB2EE4EF514C0CC3E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:e5:58:73:30:8d:08:e0:29:b2:2a:d6:8d:
                    a6:35:6c:6e:a1:7d:85:88:2d:92:a9:d9:87:18:ab:
                    1a:bb:d3:55:de:9a:b3:68:72:c9:23:b9:eb:a4:38:
                    4d:7e:b5:2d:b1:fd:22:6e:6c:a6:d3:95:eb:1a:80:
                    c5:09:89:54:20:49:a8:9b:31:54:44:a9:ce:da:3a:
                    fc:da:38:c0:e1:3b:78:5e:b0:1d:b6:36:76:c3:26:
                    b0:94:92:4a:cf:ef:5c:3d:df:ca:d9:e6:74:f6:5e:
                    d3:0d:9f:6a:f9:11:4a:e2:86:f8:ec:7a:0f:5f:d5:
                    82:cb:c9:d1:17:ae:cf:e5:e2:e0:58:62:12:41:6d:
                    5a:fc:b6:c9:91:8e:63:1c:ee:a8:d8:dc:cd:6b:2d:
                    61:0f:02:0c:3a:30:fe:9d:66:fd:b5:ae:13:ee:c9:
                    32:1c:80:d7:dc:e1:7e:23:2f:8d:1c:6c:23:aa:07:
                    0e:50:c4:57:14:28:e2:84:9b:17:ec:8a:3d:0d:29:
                    6a:36:da:58:a9:5c:51:c4:40:d5:07:c4:19:67:80:
                    58:47:01:85:46:94:cb:47:8b:f6:62:3f:7c:d0:5b:
                    61:62:54:a7:79:e1:16:51:45:93:7e:16:86:01:71:
                    77:81:fd:d0:db:fc:ad:70:7f:4d:81:50:d5:50:a4:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:3E:5D:EE:F0:FC:9E:26:88:7B:B2:EE:4E:F5:14:C0:CC:3E:56
            X509v3 Authority Key Identifier:
                keyid:62:36:5D:DB:5E:71:80:DE:CD:F6:ED:E9:FA:D3:D5:10:FF:09:84:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:79:3c:af:a3:13:9a:e1:fa:4c:6c:52:8c:22:65:bd:e4:44:
         57:0a:70:88:91:74:33:b1:1f:a6:c8:a8:a4:7e:76:30:14:df:
         3a:d0:dd:75:27:cf:90:c4:ab:fe:bd:72:0f:1e:55:84:d7:25:
         c4:dd:5e:92:e2:29:36:33:00:fa:ee:36:5d:f6:5f:2e:39:aa:
         09:e8:99:87:0f:18:00:c1:db:3d:9d:ad:34:5f:72:80:8c:f9:
         98:1a:75:0c:da:38:c3:c0:a3:12:61:11:15:80:ff:2f:7a:fd:
         ad:d3:bc:5d:03:a8:75:5e:db:f6:68:89:66:cd:db:23:5b:5b:
         07:72:76:6a:03:3c:70:e0:cf:dd:0d:03:2f:ce:78:cc:59:45:
         dc:31:52:80:48:7d:b6:f5:73:85:87:40:28:76:f7:e8:e9:ad:
         6f:8c:26:19:01:97:9e:6f:be:de:29:08:2b:ad:b5:23:78:6b:
         de:c9:bb:8e:ea:c6:87:ba:6d:00:f3:13:90:71:b9:99:86:c0:
         f9:95:4e:64:0e:26:69:51:5c:87:58:ef:9d:aa:7e:4f:3e:b1:
         6e:8d:76:87:e3:f3:e7:2b:d6:0b:91:53:3c:bf:2b:ea:6d:44:
         5d:b2:85:3f:98:1f:d4:df:08:16:fd:df:8e:cf:91:5d:e6:6e:
         61:05:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:51:17 2026 by rpki-client