Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234352e302f32342d3234203d3e20323632333639.roa
File:                     3137302e3234372e3234352e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          UBViUOx7yU6hth+EwPL9A53IG/SVRvrA9hWj3h5XHd8=
Subject key identifier:   42:E3:20:C1:87:59:0B:E1:82:7C:75:8C:2D:80:99:97:66:D6:61:6D
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       523F50185CA934534F15CB1DBC911FCD079FF53C
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234352e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:26 +0000
ROA not before:           Fri 28 Aug 2026 19:01:26 +0000
ROA not after:            Fri 27 Aug 2027 19:06:26 +0000
asID:                     262369
IP address blocks:        170.247.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:50:18:5c:a9:34:53:4f:15:cb:1d:bc:91:1f:cd:07:9f:f5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:26 2026 GMT
            Not After : Aug 27 19:06:26 2027 GMT
        Subject: CN=42E320C187590BE1827C758C2D80999766D6616D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:00:6f:33:a4:9e:10:87:f0:fb:a0:6a:62:fd:
                    ff:a9:97:8c:e8:9f:76:5b:3e:b4:ba:19:3f:aa:45:
                    b6:08:54:34:fa:3a:f3:ba:80:86:44:cc:41:92:71:
                    14:69:af:8d:af:03:fa:a3:11:d2:89:e8:56:ec:71:
                    74:eb:3d:db:f0:6e:5d:5a:57:62:36:3a:c4:01:22:
                    00:b9:f7:00:b4:d6:65:1d:20:66:ad:ab:a5:87:0c:
                    21:39:4a:2d:ad:30:0e:26:02:91:8c:63:43:b4:43:
                    a9:dd:e1:75:38:4f:4d:9f:e9:ed:01:a7:c7:06:9d:
                    04:15:42:05:60:86:ed:15:4e:e5:f1:93:d2:53:18:
                    46:a2:ff:22:a3:bc:08:f0:6a:db:df:b9:6b:77:fa:
                    71:78:d4:04:70:33:72:f4:0e:0e:52:06:9c:6c:d8:
                    61:d3:b2:9c:45:a0:b8:f9:82:94:96:61:b3:9c:07:
                    dc:9e:79:9d:90:54:9e:cc:8e:da:7b:55:6a:52:9f:
                    8a:2a:fa:c9:36:22:31:93:df:8c:02:df:2f:0f:e7:
                    77:37:39:57:47:68:72:35:de:66:74:7c:da:e9:42:
                    d8:78:ef:9c:0d:7f:01:06:bf:57:4b:a5:5b:8a:4d:
                    46:01:ea:21:0e:0e:a5:b9:09:4f:4c:b6:7b:23:b0:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E3:20:C1:87:59:0B:E1:82:7C:75:8C:2D:80:99:97:66:D6:61:6D
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234352e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:7d:e8:2a:e8:dc:9f:5f:7a:e5:50:e4:78:d8:6f:56:8e:31:
         91:e9:e4:53:5e:fc:2d:09:e1:22:95:86:1f:35:95:71:63:bf:
         ac:34:db:6c:84:cb:5c:79:1d:95:48:04:e4:26:6b:03:b5:14:
         a4:d1:23:9d:f3:66:22:91:44:66:ab:13:8a:69:c2:50:7e:07:
         4d:a1:d1:fa:9f:0d:e2:66:2e:8a:89:34:da:71:9a:fd:95:e1:
         2a:06:aa:a0:82:14:ea:c2:75:47:7e:58:82:6d:69:10:c8:9e:
         5b:4c:15:08:3a:90:18:39:c7:9c:fa:8e:88:05:42:b9:b9:83:
         42:3b:ca:cc:5c:d9:ba:4e:59:85:78:89:07:7f:38:cb:0c:bd:
         dc:cc:1f:28:07:b4:1d:12:f5:68:f1:49:39:60:4d:30:c6:45:
         45:7b:4f:4a:3b:7e:8a:7f:b3:07:dd:b1:c6:c1:73:b2:95:1b:
         a1:b9:52:ca:89:96:f3:29:df:57:9c:15:83:aa:80:47:4c:54:
         84:e2:62:df:57:ff:52:77:ea:e7:e6:b3:94:2a:25:c8:2b:36:
         f7:c5:81:b0:e9:f6:1f:7b:db:42:ac:9e:8e:72:18:48:12:ea:
         9d:f3:b2:62:3a:02:96:80:4d:b8:f9:c1:b0:71:0e:f1:10:38:
         0d:4a:04:ec
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUj9QGFypNFNPFcsdvJEfzQef9TwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwQkVBMDU5QUJFRUJDMUY1NDRFQTFGM0ZBNjM1Q0Y3
MkE4NDY1NzAeFw0yNjA4MjgxOTAxMjZaFw0yNzA4MjcxOTA2MjZaMDMxMTAvBgNV
BAMTKDQyRTMyMEMxODc1OTBCRTE4MjdDNzU4QzJEODA5OTk3NjZENjYxNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAG8zpJ4Qh/D7oGpi/f+pl4zo
n3ZbPrS6GT+qRbYIVDT6OvO6gIZEzEGScRRpr42vA/qjEdKJ6FbscXTrPdvwbl1a
V2I2OsQBIgC59wC01mUdIGatq6WHDCE5Si2tMA4mApGMY0O0Q6nd4XU4T02f6e0B
p8cGnQQVQgVghu0VTuXxk9JTGEai/yKjvAjwatvfuWt3+nF41ARwM3L0Dg5SBpxs
2GHTspxFoLj5gpSWYbOcB9yeeZ2QVJ7Mjtp7VWpSn4oq+sk2IjGT34wC3y8P53c3
OVdHaHI13mZ0fNrpQth475wNfwEGv1dLpVuKTUYB6iEODqW5CU9MtnsjsH9pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQuMgwYdZC+GCfHWMLYCZl2bWYW0wHwYDVR0j
BBgwFoAUhwvqBZq+68H1ROofP6Y1z3KoRlcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMC84NzBCRUEwNTlBQkVFQkMxRjU0NEVBMUYzRkE2MzVDRjcyQTg0NjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEJFQTA1OUFCRUVCQzFG
NTQ0RUExRjNGQTYzNUNGNzJBODQ2NTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr39TANBgkqhkiG9w0BAQsFAAOCAQEAhn3o
Kujcn1965VDkeNhvVo4xkenkU178LQnhIpWGHzWVcWO/rDTbbITLXHkdlUgE5CZr
A7UUpNEjnfNmIpFEZqsTimnCUH4HTaHR+p8N4mYuiok02nGa/ZXhKgaqoIIU6sJ1
R35Ygm1pEMieW0wVCDqQGDnHnPqOiAVCubmDQjvKzFzZuk5ZhXiJB384ywy93Mwf
KAe0HRL1aPFJOWBNMMZFRXtPSjt+in+zB92xxsFzspUboblSyomW8ynfV5wVg6qA
R0xUhOJi31f/Unfq5+azlColyCs298WBsOn2H3vbQqyejnIYSBLqnfOyYjoCloBN
uPnBsHEO8RA4DUoE7A==
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:31:31 2026 by rpki-client