Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234372e302f32342d3234203d3e20323632333639.roa
File:                     3137302e3234372e3234372e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          v7x3h2WEjjv8ooy2M+xb5pAipq4S+l5DHmkX12PWjyk=
Subject key identifier:   04:42:8C:B3:A1:75:9B:18:B1:FE:90:01:79:F5:B3:73:11:A7:48:77
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       0207467E62396BF05D35E3BFE9C9F4C4BB0F47D9
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234372e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:24 +0000
ROA not before:           Fri 28 Aug 2026 19:01:24 +0000
ROA not after:            Fri 27 Aug 2027 19:06:24 +0000
asID:                     262369
IP address blocks:        170.247.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:07:46:7e:62:39:6b:f0:5d:35:e3:bf:e9:c9:f4:c4:bb:0f:47:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:24 2026 GMT
            Not After : Aug 27 19:06:24 2027 GMT
        Subject: CN=04428CB3A1759B18B1FE900179F5B37311A74877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:35:c3:d8:e0:3a:25:fa:9b:d3:f5:85:32:
                    21:48:aa:24:17:fc:dd:c4:7e:19:ac:5b:3d:33:62:
                    75:bd:e2:5d:97:3b:f8:de:d6:dc:db:c1:45:8f:25:
                    70:fe:d7:d3:57:4f:84:d3:9e:03:54:8a:5f:f5:f7:
                    45:9c:2c:f5:f5:20:d3:6f:d7:86:fd:53:28:92:2f:
                    d2:89:59:2f:bc:bd:e3:05:3c:ba:4c:2d:3b:d1:d8:
                    bc:66:6d:25:54:43:53:b6:bf:01:f9:f4:1e:c7:b0:
                    f6:22:62:78:ac:af:70:43:f1:5b:18:84:6a:a4:e8:
                    20:43:8a:29:63:25:84:ca:80:a2:15:35:1f:bc:60:
                    e7:d6:7f:8d:0a:25:13:62:bf:67:c0:d7:40:21:10:
                    32:f4:98:7c:8b:da:d5:c3:d9:08:81:e4:8e:b0:44:
                    04:74:80:09:65:c1:8f:c7:86:11:48:c8:80:9c:c8:
                    8f:69:4a:15:05:5d:e9:31:a3:6e:d1:e8:16:1c:03:
                    8e:35:86:18:22:35:b1:53:d8:33:7b:53:3e:c1:fe:
                    f9:4b:6b:9b:fc:c4:39:95:30:94:24:35:05:bb:c9:
                    b5:88:7a:b2:d8:85:c7:ef:91:eb:b5:56:52:d2:ca:
                    ff:b0:aa:95:b0:bc:5f:4d:0a:46:58:9f:86:dc:c1:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:42:8C:B3:A1:75:9B:18:B1:FE:90:01:79:F5:B3:73:11:A7:48:77
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3234372e3234372e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:85:47:3d:90:17:75:5b:91:83:89:2d:cf:3f:5c:23:e5:aa:
         56:82:66:25:d1:1f:eb:79:7d:70:dc:b2:e5:6e:6c:47:1b:32:
         22:a9:22:e3:01:45:b9:fb:d3:20:7d:7d:e7:44:ac:17:56:62:
         b2:a0:91:0a:c1:da:9f:8b:af:03:4e:10:8f:e0:f2:d1:8b:bf:
         2e:ab:c1:f4:5b:3b:89:9f:a1:5e:f1:25:35:4f:c3:9f:7e:0d:
         d8:08:2d:de:17:93:d0:3e:e4:5b:63:d5:22:e8:07:cb:3e:d3:
         88:30:b3:12:02:94:0e:08:75:50:68:26:a9:c3:5a:dd:23:13:
         ab:12:d7:a4:c8:d6:02:b5:96:5a:95:cc:0e:99:fb:85:ba:1f:
         8a:db:86:f5:1a:f3:d3:63:52:f5:88:6f:cf:75:19:38:11:f0:
         48:c8:34:5a:1a:0c:56:70:99:47:eb:e3:0d:40:ed:6e:76:1c:
         7c:29:c7:7f:f6:ad:df:fa:c7:43:8e:79:e8:2b:ad:dd:bf:b1:
         94:3d:b6:7d:4c:fe:0d:c0:70:48:60:da:33:22:73:9c:62:e5:
         c3:e7:ee:b1:d8:ab:21:95:68:45:fa:96:8c:40:fe:1e:e6:2d:
         5c:b8:d6:28:87:fe:20:30:d3:9f:67:21:ff:91:fd:c3:35:e1:
         f1:0e:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:31:24 2026 by rpki-client