Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
File:                     3137302e3233332e35322e302f32322d3234203d3e203532353437.roa (raw, json)
Hash identifier:          bXaElWTx6rRPhkbXkGdwdRS4LK7ib0S7LwqyJvkVPL0=
Subject key identifier:   AC:0A:57:CE:A9:F6:3C:00:8C:64:06:95:ED:E3:2B:C5:34:50:24:9C
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       15F46A87B99453A72473500DEE4284E53846C690
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
Signing time:             Wed 01 Apr 2026 19:08:39 +0000
ROA not before:           Wed 01 Apr 2026 19:03:39 +0000
ROA not after:            Wed 31 Mar 2027 19:08:39 +0000
asID:                     52547
IP address blocks:        170.233.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f4:6a:87:b9:94:53:a7:24:73:50:0d:ee:42:84:e5:38:46:c6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr  1 19:03:39 2026 GMT
            Not After : Mar 31 19:08:39 2027 GMT
        Subject: CN=AC0A57CEA9F63C008C640695EDE32BC53450249C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:00:71:df:d4:b2:50:9f:3e:c9:39:bc:0d:
                    e9:6a:7a:67:17:a2:96:e9:48:8f:bb:41:8f:6b:19:
                    1c:8f:1f:22:c8:09:bb:bf:f8:8d:32:43:2e:13:ea:
                    e9:d6:a1:cf:45:57:b8:6e:a7:6e:3d:78:9a:da:73:
                    ab:99:a5:2d:95:53:77:48:c3:b7:c1:b6:5c:48:db:
                    00:0f:bd:cc:ec:31:f8:b0:e1:0e:65:b8:cc:af:12:
                    c0:42:78:70:cd:5f:c6:8c:ca:2a:71:c6:cd:dc:cc:
                    82:7d:3e:23:2b:7c:a4:9e:b4:a1:2d:61:07:ec:d4:
                    cd:db:7a:03:bc:4b:0d:b2:9a:77:a7:a4:96:54:2c:
                    72:a3:88:64:ec:29:d4:89:69:55:de:4d:e9:c1:74:
                    cd:b1:a3:cf:18:d9:68:ba:62:49:74:b2:73:fc:fb:
                    21:32:df:55:cf:b3:f4:71:83:91:54:20:6e:33:b5:
                    5f:c7:c5:58:63:e4:85:a2:7d:2c:ff:68:3a:45:df:
                    2c:ed:22:05:c3:69:02:91:f4:70:79:95:a6:73:81:
                    ba:18:4c:ca:c9:52:5d:6f:29:54:44:09:ac:a0:57:
                    84:18:c9:2d:fe:fe:2a:0b:b9:77:ed:af:91:2f:e6:
                    eb:30:b4:f2:6b:e9:88:e2:68:eb:e0:c6:68:26:8f:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0A:57:CE:A9:F6:3C:00:8C:64:06:95:ED:E3:2B:C5:34:50:24:9C
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:68:08:9e:04:a2:0b:c0:ea:e1:e5:12:bb:4a:9c:dc:c4:
         e8:0f:ef:76:fa:5e:1b:9c:79:77:2f:5e:4a:71:4e:01:7a:b1:
         17:bf:18:d4:53:26:03:0e:52:74:db:a3:ab:f0:06:7d:3b:19:
         df:2e:8d:61:2f:90:90:21:87:8e:58:61:f4:ce:42:62:c7:bb:
         42:c7:84:ba:1b:ef:ab:76:99:26:83:3b:10:82:ca:04:10:7a:
         39:cb:74:4b:fd:b9:1d:ab:d2:86:ff:82:ea:d0:66:47:46:23:
         f0:5d:2b:7c:f4:c1:8e:09:8b:aa:97:d2:07:f0:01:86:45:bf:
         e0:74:1a:63:85:06:dc:e4:36:b0:48:2a:09:81:ba:ca:5f:a0:
         0b:1c:14:db:5d:b3:f0:b5:05:84:1e:4f:f7:08:f3:ca:41:4f:
         f5:d1:f7:db:6d:b8:79:6f:df:f7:ff:f7:73:a9:26:2e:a9:d7:
         f2:7f:81:67:4d:74:d4:4b:b9:5f:a3:d6:b9:9f:6a:46:eb:bc:
         f5:73:78:94:f8:a4:2c:1c:b5:15:b9:56:dd:01:86:2d:92:ef:
         18:fc:cf:43:8d:36:60:08:1d:bb:b8:51:87:4d:f9:f8:61:d0:
         22:b8:db:16:c8:dd:6a:68:fd:43:79:56:4e:12:d0:08:01:70:
         5e:c0:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:51:24 2026 by rpki-client