Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234362e302f32332d3233203d3e20323632333639.roa
File:                     3137302e3234372e3234362e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier:          D3sYFeIdEvFw+4kXPAYP6ZBA6zgXAeM99dcnTRgqdxw=
Subject key identifier:   A5:B6:9E:14:5C:5A:E4:EE:5F:25:23:0C:A6:CA:BB:20:F3:40:1B:AF
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       105F29E5156504DA8E49D39C0D034EECC9957CC7
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234362e302f32332d3233203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:14:59 +0000
ROA not before:           Fri 28 Aug 2026 19:09:59 +0000
ROA not after:            Fri 27 Aug 2027 19:14:59 +0000
asID:                     262369
IP address blocks:        170.247.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5f:29:e5:15:65:04:da:8e:49:d3:9c:0d:03:4e:ec:c9:95:7c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:09:59 2026 GMT
            Not After : Aug 27 19:14:59 2027 GMT
        Subject: CN=A5B69E145C5AE4EE5F25230CA6CABB20F3401BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:0f:77:fd:4c:1c:27:75:4b:61:ba:4b:70:
                    08:23:c3:e8:5c:c5:17:59:b6:88:53:c7:00:84:e9:
                    b5:65:f8:45:0d:e8:4b:7d:89:b7:50:3d:46:d9:6c:
                    5b:a8:67:c3:53:db:72:e4:85:38:89:12:a2:16:03:
                    de:90:7c:7c:06:65:5e:07:a1:39:e3:21:49:ea:13:
                    24:07:78:f4:31:90:67:f4:92:66:67:bf:70:e9:df:
                    5c:52:3f:cb:29:7f:23:37:ca:4b:c0:cd:04:1c:4b:
                    2f:09:4e:17:41:4f:49:9b:5d:11:83:ef:7f:24:8f:
                    e6:f9:61:fc:85:7e:13:42:cf:51:70:c8:69:e5:8a:
                    fe:21:c6:1e:ab:f4:82:8e:44:79:0b:50:a1:4b:c9:
                    35:32:5d:fe:9e:21:5e:bc:c8:cc:4c:92:a2:cc:ab:
                    ea:13:40:53:0e:2c:0d:86:85:7d:1c:6f:3e:7b:48:
                    ad:33:db:f8:14:01:a3:9e:68:76:e1:5b:e2:61:07:
                    fa:7e:82:4f:2f:c4:a0:5f:5c:cd:9b:2c:b7:78:a3:
                    3a:2b:79:d5:d0:bf:88:f4:ff:ae:fd:5d:a3:f3:80:
                    54:3d:7c:d3:59:af:1b:c1:4e:9f:7b:d0:bc:26:a9:
                    db:4f:9b:2e:80:b8:d0:63:60:ba:00:9d:36:6e:a7:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B6:9E:14:5C:5A:E4:EE:5F:25:23:0C:A6:CA:BB:20:F3:40:1B:AF
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234362e302f32332d3233203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:08:f6:dc:47:fd:cb:38:d0:88:13:96:fc:71:f0:d6:ec:ea:
         14:7d:a2:67:d5:c6:97:12:27:9f:04:80:cb:86:05:9e:7f:37:
         63:7b:59:8d:b1:72:a9:e6:ef:23:c2:db:4d:3a:b5:f3:10:32:
         99:33:78:14:eb:c9:bc:e3:5c:e3:6b:5d:8b:f8:2e:6c:dd:f7:
         38:27:6a:88:c3:e8:95:b6:a4:f0:cb:d7:ec:d6:1e:48:a7:12:
         20:b8:6a:75:a8:35:96:77:55:53:e9:93:d9:af:77:38:72:98:
         4b:4f:99:19:52:0e:8d:86:ca:57:5e:94:4c:1a:bf:e9:a0:0c:
         69:83:90:91:85:50:b6:db:fe:3f:fc:7b:6e:6a:cc:f2:3a:48:
         3b:67:b6:7a:25:6e:f3:93:8a:34:c4:46:37:9f:10:92:ca:5e:
         e4:60:b2:24:85:58:47:d6:e7:41:77:e7:16:f0:69:00:5b:77:
         e1:37:08:bf:77:79:96:3d:05:1a:fe:76:5f:1e:b7:bc:01:7f:
         4c:15:51:46:3d:3c:58:d5:20:8d:c8:e0:80:a0:c2:60:02:ee:
         14:26:34:08:9d:e5:9d:af:ad:f7:ff:fd:b9:aa:a9:a3:22:1b:
         67:a1:df:b6:51:e1:df:7e:79:52:66:22:22:ec:b1:10:33:4d:
         2b:12:91:6f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEF8p5RVlBNqOSdOcDQNO7MmVfMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwQkVBMDU5QUJFRUJDMUY1NDRFQTFGM0ZBNjM1Q0Y3
MkE4NDY1NzAeFw0yNjA4MjgxOTA5NTlaFw0yNzA4MjcxOTE0NTlaMDMxMTAvBgNV
BAMTKEE1QjY5RTE0NUM1QUU0RUU1RjI1MjMwQ0E2Q0FCQjIwRjM0MDFCQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucA93/UwcJ3VLYbpLcAgjw+hc
xRdZtohTxwCE6bVl+EUN6Et9ibdQPUbZbFuoZ8NT23LkhTiJEqIWA96QfHwGZV4H
oTnjIUnqEyQHePQxkGf0kmZnv3Dp31xSP8spfyM3ykvAzQQcSy8JThdBT0mbXRGD
738kj+b5YfyFfhNCz1FwyGnliv4hxh6r9IKORHkLUKFLyTUyXf6eIV68yMxMkqLM
q+oTQFMOLA2GhX0cbz57SK0z2/gUAaOeaHbhW+JhB/p+gk8vxKBfXM2bLLd4ozor
edXQv4j0/679XaPzgFQ9fNNZrxvBTp970LwmqdtPmy6AuNBjYLoAnTZup0i1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpbaeFFxa5O5fJSMMpsq7IPNAG68wHwYDVR0j
BBgwFoAUhwvqBZq+68H1ROofP6Y1z3KoRlcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMC84NzBCRUEwNTlBQkVFQkMxRjU0NEVBMUYzRkE2MzVDRjcyQTg0NjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEJFQTA1OUFCRUVCQzFG
NTQ0RUExRjNGQTYzNUNGNzJBODQ2NTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzQzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar39jANBgkqhkiG9w0BAQsFAAOCAQEAkAj2
3Ef9yzjQiBOW/HHw1uzqFH2iZ9XGlxInnwSAy4YFnn83Y3tZjbFyqebvI8LbTTq1
8xAymTN4FOvJvONc42tdi/gubN33OCdqiMPolbak8MvX7NYeSKcSILhqdag1lndV
U+mT2a93OHKYS0+ZGVIOjYbKV16UTBq/6aAMaYOQkYVQttv+P/x7bmrM8jpIO2e2
eiVu85OKNMRGN58Qkspe5GCyJIVYR9bnQXfnFvBpAFt34TcIv3d5lj0FGv52Xx63
vAF/TBVRRj08WNUgjcjggKDCYALuFCY0CJ3lna+t9//9uaqpoyIbZ6HftlHh3355
UmYiIuyxEDNNKxKRbw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 05:17:36 2026 by rpki-client