Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
File:                     3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier:          enYZ+uRnCeDjYDdW/FTveOc7+iOQnVRhbmahU4u+vdk=
Subject key identifier:   EC:2F:BE:77:12:28:01:CF:43:03:D4:B3:58:69:B9:B7:23:6C:3A:8A
Certificate issuer:       /CN=C9FEAA3502E80979EEEA85C8EBB252880843E762
Certificate serial:       60EDB869E2FE4D33D3E0BB760E7B7D33BC2AC54E
Authority key identifier: C9:FE:AA:35:02:E8:09:79:EE:EA:85:C8:EB:B2:52:88:08:43:E7:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FEAA3502E80979EEEA85C8EBB252880843E762.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
Signing time:             Tue 07 Apr 2026 19:08:59 +0000
ROA not before:           Tue 07 Apr 2026 19:03:59 +0000
ROA not after:            Tue 06 Apr 2027 19:08:59 +0000
asID:                     265384
IP address blocks:        170.254.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C9FEAA3502E80979EEEA85C8EBB252880843E762.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C9FEAA3502E80979EEEA85C8EBB252880843E762.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FEAA3502E80979EEEA85C8EBB252880843E762.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ed:b8:69:e2:fe:4d:33:d3:e0:bb:76:0e:7b:7d:33:bc:2a:c5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9FEAA3502E80979EEEA85C8EBB252880843E762
        Validity
            Not Before: Apr  7 19:03:59 2026 GMT
            Not After : Apr  6 19:08:59 2027 GMT
        Subject: CN=EC2FBE77122801CF4303D4B35869B9B7236C3A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:37:55:6e:56:4f:1b:c1:5a:3e:54:c4:92:
                    ee:1a:54:3e:d4:1b:f3:34:d1:6d:11:a1:2a:67:08:
                    87:e9:84:80:30:47:30:51:28:c5:fc:63:8a:d9:6d:
                    56:29:55:6a:4c:c9:f0:0f:95:b2:37:e6:5d:47:c4:
                    b5:84:d3:9a:f0:07:b8:6c:cc:b1:50:4f:9d:0a:62:
                    ba:84:f4:7f:33:26:a0:8f:df:75:99:5d:29:ac:cf:
                    4b:3c:c5:ea:a5:1b:46:86:83:63:c7:b7:16:f5:cb:
                    b1:bd:f6:8d:01:f4:ae:c9:2e:66:09:3a:63:d4:3f:
                    a8:f8:24:c6:24:1a:7a:72:fd:51:21:61:37:b1:de:
                    d7:81:2f:ce:3e:19:70:05:d7:83:9b:4b:90:26:4b:
                    b6:b8:cb:f7:81:39:a4:c4:fa:1b:49:b6:d9:0c:e2:
                    c7:98:82:45:75:48:2b:7f:0b:89:3a:6a:14:98:1e:
                    e0:10:c0:a2:03:f0:07:b7:68:56:b0:fa:44:e1:0f:
                    55:26:2a:2d:65:67:43:33:1d:38:1f:c5:41:59:31:
                    08:a1:d0:68:fa:68:c8:10:d3:61:70:b3:f1:4a:9d:
                    c5:45:9b:a7:86:c7:ea:3b:b3:b6:42:25:bc:06:a8:
                    b3:1e:91:e7:ef:1f:63:ac:f9:09:1a:60:08:6b:b0:
                    e7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2F:BE:77:12:28:01:CF:43:03:D4:B3:58:69:B9:B7:23:6C:3A:8A
            X509v3 Authority Key Identifier:
                keyid:C9:FE:AA:35:02:E8:09:79:EE:EA:85:C8:EB:B2:52:88:08:43:E7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C9FEAA3502E80979EEEA85C8EBB252880843E762.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FEAA3502E80979EEEA85C8EBB252880843E762.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:37:2a:25:98:16:81:eb:30:2f:e8:35:5d:8b:c6:5d:bd:27:
         9c:51:73:4f:6a:a3:cd:70:11:f2:e4:f7:ba:66:cd:f5:bc:16:
         1a:02:aa:80:81:a4:b0:ce:a9:18:28:76:8a:76:c8:7c:e6:85:
         0b:7d:1b:8a:a1:91:37:1d:ea:6c:b7:7e:44:ab:54:30:ff:20:
         e8:68:b9:e3:2a:b9:af:f3:af:89:25:f9:b8:2b:e7:73:1e:a8:
         d5:c4:11:2e:54:b5:ae:3d:3d:06:58:7b:ca:99:de:e6:cc:c6:
         dc:ec:ad:7f:28:cd:d9:c1:7a:4e:90:eb:4d:8c:ec:fa:27:3c:
         3c:6b:09:aa:5f:d3:cc:f7:ac:da:81:9a:e6:65:43:ab:fb:97:
         83:23:53:2e:f1:c1:4a:03:54:0f:04:da:09:3a:8f:33:2f:87:
         85:36:46:32:9e:d0:cc:2e:7c:68:c4:db:1d:0b:03:d9:06:e2:
         05:90:fd:bb:2b:dd:ba:58:39:ac:a1:96:1b:b2:f5:0a:55:4e:
         6e:f4:7c:64:2e:70:79:65:8a:46:30:c7:f6:92:7c:ab:41:5f:
         a7:26:ca:f4:23:ca:9b:5e:14:f6:7e:0e:ea:d8:f4:31:d6:04:
         61:62:dd:3c:71:86:35:ee:e8:ee:ea:bf:7b:a0:3c:4e:41:0d:
         d5:c9:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:30:13 2026 by rpki-client