Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234332e302f32342d3234203d3e20323635333834.roa
File:                     3137302e3235342e3234332e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier:          PGSsrt12tNY3jqWbGUwSKJlWhSu+2mAePyUOZGgngXs=
Subject key identifier:   6F:AB:D2:E2:15:7E:A6:1F:81:8F:66:05:50:B6:B0:48:2D:61:45:99
Certificate issuer:       /CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
Certificate serial:       1FD6E7F66A5C7943A39B56E860815DA5ED516B86
Authority key identifier: D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234332e302f32342d3234203d3e20323635333834.roa
Signing time:             Thu 25 Jun 2026 12:07:16 +0000
ROA not before:           Thu 25 Jun 2026 12:02:16 +0000
ROA not after:            Thu 24 Jun 2027 12:07:16 +0000
asID:                     265384
IP address blocks:        170.254.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 02:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d6:e7:f6:6a:5c:79:43:a3:9b:56:e8:60:81:5d:a5:ed:51:6b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
        Validity
            Not Before: Jun 25 12:02:16 2026 GMT
            Not After : Jun 24 12:07:16 2027 GMT
        Subject: CN=6FABD2E2157EA61F818F660550B6B0482D614599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:78:de:35:f2:50:87:50:cc:dd:67:da:2f:
                    8d:a4:65:9b:dc:04:95:c9:37:0b:5b:c7:47:63:2e:
                    33:fe:56:2f:35:51:36:b4:ac:d8:f0:e1:cc:af:f8:
                    f4:38:fc:27:b2:95:63:3e:53:5c:ca:38:45:62:3c:
                    ee:1f:3e:3e:e6:5e:63:3b:46:81:ef:9a:6c:f6:3e:
                    59:02:5c:01:4e:3e:08:5d:b1:78:95:50:a2:63:c1:
                    10:c4:ba:46:27:82:47:2c:63:64:68:d8:05:03:e4:
                    35:be:83:64:ef:c9:21:8d:3a:69:66:15:a0:dd:0d:
                    79:c7:a8:87:b6:2e:4c:d4:5e:93:68:ec:02:38:03:
                    73:4c:ba:fb:5b:38:2f:c8:0d:ff:a6:5f:1a:b0:c7:
                    14:cb:ca:ce:d0:b5:b2:48:97:e0:d0:61:8a:d6:c9:
                    49:a7:0a:b8:40:29:9b:96:bc:e6:c9:03:ba:ef:09:
                    d5:b4:63:fc:d7:1c:89:c5:58:ac:a5:a9:e4:e6:53:
                    ac:fe:dc:10:40:e6:87:cd:1a:1a:89:51:45:ea:35:
                    53:e2:05:77:f1:5c:59:11:6d:0a:8f:70:8d:db:13:
                    d5:7d:2d:70:80:96:37:5d:3c:cd:ac:f4:94:0b:60:
                    33:d1:ca:a2:cc:6d:19:3b:7c:8c:52:34:bb:21:30:
                    b8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AB:D2:E2:15:7E:A6:1F:81:8F:66:05:50:B6:B0:48:2D:61:45:99
            X509v3 Authority Key Identifier:
                keyid:D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234332e302f32342d3234203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:d7:57:13:ec:d2:66:b8:58:78:47:16:84:e4:33:d5:a0:
         e3:f3:22:ad:2f:87:85:b8:ae:96:69:4b:53:0d:7b:e5:b5:74:
         7e:e1:85:a4:cd:c8:3f:b2:58:09:40:a3:db:05:e7:51:ad:91:
         25:19:32:20:47:21:68:f9:9a:72:cf:81:dc:b9:02:24:fb:59:
         67:8f:42:9e:07:ba:c2:58:64:4d:56:c1:b3:ed:3b:54:4e:ec:
         6f:72:dd:02:6f:e2:0d:a9:a3:15:44:51:22:c7:a6:89:b0:e1:
         d3:96:9a:19:f6:d8:33:af:17:18:08:6a:32:d7:a8:2d:7e:ef:
         f2:78:46:86:2f:b2:14:b9:b4:98:39:7a:97:4f:6c:22:bf:68:
         4d:59:f8:61:b7:20:22:2e:03:8a:c3:ce:de:aa:4d:41:7c:e8:
         3f:0f:81:f1:20:77:1e:a9:44:6c:c8:35:93:c5:69:e2:c4:4f:
         14:98:10:35:a4:77:d5:7e:9a:27:57:3d:0a:16:af:d5:7d:71:
         8d:a0:d2:c9:6e:97:a9:2c:d0:58:f7:89:ef:10:2d:2a:34:5f:
         99:c8:20:5d:21:3a:a3:27:57:3d:7a:b0:ca:3d:f8:81:ba:92:
         a5:a4:42:46:90:4d:03:ce:1f:b4:64:bb:48:11:ff:40:37:dc:
         85:44:f7:3d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUH9bn9mpceUOjm1boYIFdpe1Ra4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRCQjQ1QTU5Njc4OUYyMkE4Njc0Mjg3QzJDNkJFQTIx
RDgzMjFBNjAeFw0yNjA2MjUxMjAyMTZaFw0yNzA2MjQxMjA3MTZaMDMxMTAvBgNV
BAMTKDZGQUJEMkUyMTU3RUE2MUY4MThGNjYwNTUwQjZCMDQ4MkQ2MTQ1OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfF3jeNfJQh1DM3WfaL42kZZvc
BJXJNwtbx0djLjP+Vi81UTa0rNjw4cyv+PQ4/CeylWM+U1zKOEViPO4fPj7mXmM7
RoHvmmz2PlkCXAFOPghdsXiVUKJjwRDEukYngkcsY2Ro2AUD5DW+g2TvySGNOmlm
FaDdDXnHqIe2LkzUXpNo7AI4A3NMuvtbOC/IDf+mXxqwxxTLys7QtbJIl+DQYYrW
yUmnCrhAKZuWvObJA7rvCdW0Y/zXHInFWKylqeTmU6z+3BBA5ofNGhqJUUXqNVPi
BXfxXFkRbQqPcI3bE9V9LXCAljddPM2s9JQLYDPRyqLMbRk7fIxSNLshMLg1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUb6vS4hV+ph+Bj2YFULawSC1hRZkwHwYDVR0j
BBgwFoAU1LtFpZZ4nyKoZ0KHwsa+oh2DIaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR
cHQvMC9ENEJCNDVBNTk2Nzg5RjIyQTg2NzQyODdDMkM2QkVBMjFEODMyMUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkI0NUE1OTY3ODlGMjJB
ODY3NDI4N0MyQzZCRUEyMUQ4MzIxQTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv
MzEzNzMwMmUzMjM1MzQyZTMyMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr+8zANBgkqhkiG9w0BAQsFAAOCAQEARLLX
VxPs0ma4WHhHFoTkM9Wg4/MirS+HhbiulmlLUw175bV0fuGFpM3IP7JYCUCj2wXn
Ua2RJRkyIEchaPmacs+B3LkCJPtZZ49Cnge6wlhkTVbBs+07VE7sb3LdAm/iDamj
FURRIsemibDh05aaGfbYM68XGAhqMteoLX7v8nhGhi+yFLm0mDl6l09sIr9oTVn4
YbcgIi4DisPO3qpNQXzoPw+B8SB3HqlEbMg1k8Vp4sRPFJgQNaR31X6aJ1c9Chav
1X1xjaDSyW6XqSzQWPeJ7xAtKjRfmcggXSE6oydXPXqwyj34gbqSpaRCRpBNA84f
tGS7SBH/QDfchUT3PQ==
-----END CERTIFICATE-----
Generated at Sat Jun 27 13:25:27 2026 by rpki-client