Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234362e302f32342d3234203d3e20323632333639.roa
File:                     3137302e3234372e3234362e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          AWSPVc8Zzf9xZ8t7DcJ1ZcHqOAIumSkKSXu24iJJEoA=
Subject key identifier:   2C:29:B4:B4:3B:FE:87:A7:2A:69:16:EF:E4:B0:B8:C6:A3:0D:0B:4E
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       1D71D71A0DAB5D5188BBE008F6F3D637E2425C3F
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234362e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:25 +0000
ROA not before:           Fri 28 Aug 2026 19:01:25 +0000
ROA not after:            Fri 27 Aug 2027 19:06:25 +0000
asID:                     262369
IP address blocks:        170.247.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:71:d7:1a:0d:ab:5d:51:88:bb:e0:08:f6:f3:d6:37:e2:42:5c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:25 2026 GMT
            Not After : Aug 27 19:06:25 2027 GMT
        Subject: CN=2C29B4B43BFE87A72A6916EFE4B0B8C6A30D0B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c2:8e:c5:cc:a4:6b:e9:08:aa:0f:41:56:e9:
                    39:d1:dc:09:e2:21:08:f9:f5:25:4e:67:ab:29:5c:
                    45:83:6d:6a:81:d8:3b:ac:08:58:a6:c3:e5:90:cd:
                    5a:4a:80:dc:27:79:2b:02:6f:e6:8a:43:04:64:23:
                    4a:4d:e9:63:8e:18:85:2c:5f:bb:9e:a8:d2:9c:02:
                    92:f1:32:7a:9c:00:8b:bf:21:b1:aa:60:82:49:ca:
                    51:66:39:a9:71:94:b3:06:3a:17:75:ec:2a:0d:23:
                    bf:39:3a:ac:a8:90:75:c9:b6:71:a2:7e:82:77:ce:
                    c5:a8:ec:52:92:65:a2:e8:41:bc:b3:66:78:5c:56:
                    66:15:86:ad:f9:5f:85:0b:0d:6c:8b:90:98:2a:ee:
                    f1:23:00:dd:4d:84:ac:e3:3e:b6:33:f6:09:fc:09:
                    96:b8:58:81:19:cb:0b:7b:df:c3:af:af:0d:79:20:
                    be:ae:ef:d1:93:03:99:27:a8:b2:3f:aa:3c:88:ef:
                    0d:c8:03:7b:4e:d9:19:8b:4e:ef:5f:49:47:06:13:
                    f4:5c:37:73:eb:10:d6:f7:72:5f:90:f8:23:6a:5d:
                    f0:d6:20:c0:3d:45:4e:6e:27:4c:d3:79:20:05:b1:
                    8b:5c:d7:6a:f7:c2:39:63:ef:f7:dc:d3:57:80:db:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:B4:B4:3B:FE:87:A7:2A:69:16:EF:E4:B0:B8:C6:A3:0D:0B:4E
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234362e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:15:08:50:d5:2f:c8:93:9b:6c:d0:d4:d7:ca:f1:7f:a4:dc:
         56:23:0f:0f:68:e0:83:ee:3c:f9:87:76:d9:40:41:84:20:e4:
         d3:d8:28:c0:9b:02:b2:8a:1d:58:83:59:a8:dc:1a:cf:88:ef:
         b4:41:5e:f7:95:28:e9:7a:e3:55:ed:5f:35:f9:25:ca:55:e2:
         3f:0a:97:05:60:8b:ec:a5:54:a7:40:58:df:de:9a:f2:44:78:
         b4:88:e6:06:df:94:d7:cb:d3:f9:8b:0a:ee:2c:a0:e4:89:e4:
         63:4f:6f:9b:44:e4:0a:ff:a4:bb:38:5c:41:73:0a:21:ad:92:
         00:b4:fd:c3:d5:e8:a9:86:58:e3:b1:c4:2b:74:fa:45:54:29:
         e4:1c:40:e0:53:0f:1c:46:49:bd:09:b5:a7:22:eb:1c:45:42:
         2a:1a:b8:78:44:fc:24:22:e2:28:4f:59:55:78:02:ad:23:63:
         84:b9:96:6b:2a:26:75:24:28:8e:6a:ce:27:2a:e0:5f:db:21:
         6b:53:dd:6e:bd:17:33:cd:82:4e:6d:5a:3e:fe:66:04:c9:b8:
         4a:65:48:27:b9:f2:6b:f7:41:9a:6e:ec:31:4e:6f:30:85:3f:
         c4:19:03:ae:94:cf:1c:79:da:34:86:5c:e0:32:d9:ae:d7:68:
         d5:b1:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:06:16 2026 by rpki-client