Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3235342e3138372e302f32342d3234203d3e20323632333639.roa
File:                     3137302e3235342e3138372e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          4XJ1fybN1jgG0dbNbk9MoARA7W9mDromEbvJjgUIzvU=
Subject key identifier:   D7:0B:4D:D1:2F:C2:DD:79:0A:F3:B0:EF:F2:C2:DB:56:13:85:0A:96
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       4BE0E5F918E28B06B160875A0B0B090F799A1991
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3235342e3138372e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:25 +0000
ROA not before:           Fri 28 Aug 2026 19:01:25 +0000
ROA not after:            Fri 27 Aug 2027 19:06:25 +0000
asID:                     262369
IP address blocks:        170.254.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e0:e5:f9:18:e2:8b:06:b1:60:87:5a:0b:0b:09:0f:79:9a:19:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:25 2026 GMT
            Not After : Aug 27 19:06:25 2027 GMT
        Subject: CN=D70B4DD12FC2DD790AF3B0EFF2C2DB5613850A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:0d:ba:24:a2:dd:41:90:2a:e3:c2:8c:07:
                    da:dd:d0:19:a8:e4:f7:a9:e7:53:7c:0e:15:6c:27:
                    99:2b:72:4f:0a:3a:0d:82:ad:de:c8:06:ce:19:4d:
                    71:52:f0:a7:08:c9:17:21:59:d0:61:b1:a8:6c:7b:
                    12:13:f4:a5:cb:26:28:d2:70:4f:3a:c2:b7:74:3b:
                    cd:49:80:ff:59:c1:2b:be:c0:92:72:2d:1a:55:09:
                    9f:6c:88:be:73:1f:7c:74:3c:71:75:ae:3a:ee:dd:
                    9a:13:df:42:59:db:d6:58:bc:b9:32:52:69:cc:9b:
                    f1:e2:15:f5:76:d3:08:0b:92:78:db:b3:2f:63:e1:
                    0a:93:e6:c9:0f:ee:67:51:ea:f7:4c:c1:37:5a:92:
                    ee:31:80:e7:6e:53:f7:3e:30:38:37:28:5c:1c:92:
                    62:c8:71:84:10:07:79:e9:b2:e5:1b:ff:31:cd:8c:
                    e4:c8:0a:b0:13:45:1f:e6:c3:92:8f:d8:b1:9f:8d:
                    0d:24:ff:6c:e7:63:01:17:06:c0:a5:e1:cd:89:cc:
                    1d:e0:c7:a8:d3:31:78:1d:1f:89:30:f8:21:4d:8f:
                    12:4a:fd:dd:0f:00:75:35:86:ff:61:90:5f:76:06:
                    1a:1a:47:45:74:b8:e8:b9:54:78:3f:ce:5e:30:e6:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0B:4D:D1:2F:C2:DD:79:0A:F3:B0:EF:F2:C2:DB:56:13:85:0A:96
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3235342e3138372e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:95:6d:c2:07:e6:44:c1:f7:8e:a2:69:87:45:7f:8f:c0:af:
         4d:1d:36:80:7a:d9:84:d5:87:64:90:8f:27:ef:ec:b0:e4:85:
         0e:e0:10:55:08:d2:8f:a3:9d:3e:60:ae:6f:32:ca:f4:89:da:
         06:ff:8d:45:2c:7a:d0:58:69:df:ef:7d:b0:74:2c:40:9a:2d:
         ac:00:f2:f2:2c:d4:cc:e8:fb:52:ac:ce:31:5a:a3:46:c1:4d:
         e5:9b:43:6c:4d:b1:d6:f0:03:53:d4:17:6b:80:8a:b6:87:8f:
         5e:7b:f6:46:61:c5:23:20:1d:d8:6c:bc:af:76:27:7e:47:d8:
         05:15:bf:59:f6:3e:34:53:9d:0e:c5:50:20:4f:d6:be:f7:95:
         eb:f7:08:ef:c9:3e:95:2e:90:71:7a:26:3c:52:74:3a:ba:24:
         87:0b:06:e6:25:d4:73:b5:5d:75:33:e3:20:57:4e:8a:8c:a0:
         70:28:89:cb:6c:8a:2f:d8:69:61:ba:5a:b2:de:89:1a:18:08:
         3f:f7:9d:29:32:f6:aa:40:ee:34:76:2d:b8:66:95:84:b6:41:
         4a:54:ef:97:72:d7:a4:d9:98:d1:e4:c3:91:99:36:df:69:94:
         fa:21:16:5b:ef:bb:f8:4a:17:d0:38:2e:87:f9:81:20:3b:f8:
         c5:42:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:06:14 2026 by rpki-client