Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa
File:                     3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier:          ZoaI3zyBVNviDJx8zpnO9G1/MPYKOTyo3lFftuukQ/Q=
Subject key identifier:   CD:CB:01:F9:DD:0D:23:DD:03:B4:57:8B:90:23:A2:54:AE:C2:E7:28
Certificate issuer:       /CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
Certificate serial:       3EA3E8168379A2B5A426280BCB1653D20E58C866
Authority key identifier: D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa
Signing time:             Thu 25 Jun 2026 12:07:16 +0000
ROA not before:           Thu 25 Jun 2026 12:02:16 +0000
ROA not after:            Thu 24 Jun 2027 12:07:16 +0000
asID:                     265384
IP address blocks:        170.254.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 02:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a3:e8:16:83:79:a2:b5:a4:26:28:0b:cb:16:53:d2:0e:58:c8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
        Validity
            Not Before: Jun 25 12:02:16 2026 GMT
            Not After : Jun 24 12:07:16 2027 GMT
        Subject: CN=CDCB01F9DD0D23DD03B4578B9023A254AEC2E728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:3e:b5:44:ad:d6:19:1d:08:44:cc:82:37:
                    9c:79:67:31:d1:cd:82:e4:f6:05:f0:05:f8:a8:38:
                    23:e1:17:0b:11:d2:d3:2c:fb:66:61:6f:52:29:20:
                    b2:81:ed:9b:ec:e1:86:e0:46:68:c5:fd:e0:4d:63:
                    06:1a:2a:16:4c:af:c1:05:3e:8d:34:d6:92:03:40:
                    ed:ff:37:50:32:2d:15:e1:e4:3c:b0:2c:20:2a:52:
                    36:18:bd:6f:e1:6a:cf:d4:63:d6:06:61:ff:e1:d3:
                    db:a4:ed:0c:63:8a:18:82:38:a4:af:3f:65:a3:05:
                    a1:35:7b:8b:24:73:af:f4:ee:18:bb:47:5f:6f:82:
                    f7:30:1e:53:0f:b9:11:a4:b6:91:be:93:af:d7:c3:
                    e8:77:40:f7:b7:8f:e8:4d:43:10:9a:bc:aa:55:32:
                    fd:61:0b:d9:a8:a9:46:7b:73:91:61:5f:cb:93:a8:
                    6c:8c:bf:55:7a:6b:bd:bd:da:fc:57:3b:68:34:06:
                    41:74:4e:f2:66:ae:ea:25:a9:46:b5:b0:a4:1e:9d:
                    b4:d0:c7:8a:24:2d:55:eb:07:52:17:32:6e:1b:59:
                    cf:9f:66:16:7d:e8:8b:ba:1a:cb:88:f4:9d:ee:63:
                    1f:1a:a4:21:50:99:ee:00:03:59:f9:c2:2e:04:d6:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:01:F9:DD:0D:23:DD:03:B4:57:8B:90:23:A2:54:AE:C2:E7:28
            X509v3 Authority Key Identifier:
                keyid:D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:28:93:e6:49:b8:74:11:b1:2f:9d:28:3f:f0:a8:c4:48:42:
         19:17:68:6c:34:ce:27:7d:6f:21:cc:df:4e:64:ce:56:59:0a:
         b3:73:f4:f0:cc:c4:43:b6:0a:1d:a7:d0:1c:9e:78:f1:81:3b:
         ae:61:43:14:8b:fd:23:e4:10:bd:67:a7:20:6a:ff:8a:39:44:
         a6:34:72:1d:64:7b:a9:af:8e:31:70:6f:cb:68:d9:09:58:62:
         f6:a7:25:e0:e4:d2:d0:0b:cf:47:30:e6:c2:12:d2:9c:df:e7:
         e9:81:f8:5d:aa:f9:08:c4:93:8d:a8:20:6f:26:8a:7e:1f:11:
         69:e6:2b:dd:ed:aa:5b:13:b9:ba:60:05:c3:d4:4c:99:48:7d:
         ff:0e:c4:91:f2:56:68:ab:ef:ba:cf:98:b5:98:4c:ef:34:20:
         92:ec:22:d8:3e:1c:52:24:3b:6a:b1:ad:9c:f5:e9:06:b7:23:
         70:f0:8f:61:3c:e6:ef:08:40:ef:4f:3f:06:06:fb:2c:48:36:
         99:40:18:e8:b2:95:7f:82:91:a1:92:41:f4:cc:ee:22:df:a3:
         be:69:7b:4a:48:32:d3:8d:b2:3b:0d:1d:ac:aa:c9:59:9d:ba:
         20:a4:95:8f:08:ef:db:a8:b8:03:5c:1c:d4:a7:c2:0d:83:0f:
         bb:c8:ca:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:25:28 2026 by rpki-client