Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32332d3233203d3e203532373231.roa
File:                     3137302e3234362e39362e302f32332d3233203d3e203532373231.roa (raw, json)
Hash identifier:          8HiUBjCid9pQboI1vaa81Myd6ggvj7kIBBEBVI3JLf8=
Subject key identifier:   3F:F6:A1:72:4D:56:FD:54:2E:65:C5:A3:41:3D:5E:DE:E7:FC:98:CA
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       2438918E8FFEC4FEF02DF22E5A61E0A095EDBFB4
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32332d3233203d3e203532373231.roa
Signing time:             Tue 22 Sep 2026 17:12:02 +0000
ROA not before:           Tue 22 Sep 2026 17:07:02 +0000
ROA not after:            Tue 21 Sep 2027 17:12:02 +0000
asID:                     52721
IP address blocks:        170.246.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:38:91:8e:8f:fe:c4:fe:f0:2d:f2:2e:5a:61:e0:a0:95:ed:bf:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:07:02 2026 GMT
            Not After : Sep 21 17:12:02 2027 GMT
        Subject: CN=3FF6A1724D56FD542E65C5A3413D5EDEE7FC98CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:b9:11:eb:e4:d8:50:b9:3f:49:6c:95:f3:
                    fe:73:36:a1:02:c0:be:d8:02:f5:00:a9:f0:af:70:
                    06:6f:6a:c4:88:30:11:a7:36:88:da:eb:00:9d:2c:
                    92:b8:b3:ce:41:30:74:bb:9c:7b:be:f1:d3:e7:97:
                    d9:27:00:67:ba:f1:7e:12:42:70:ae:26:a4:34:9f:
                    2f:4e:0e:ce:35:0d:b4:91:b0:ff:c7:6b:b2:ec:60:
                    f2:9b:8a:81:1f:ce:31:8b:0e:bf:24:b4:17:5b:4a:
                    4f:73:7f:09:93:70:e3:5b:aa:29:cf:67:23:49:c8:
                    d8:7b:22:57:58:60:9b:ae:b1:6c:04:9f:0d:63:8d:
                    46:38:6e:e1:74:95:c4:87:a6:84:eb:34:62:84:bf:
                    88:b4:36:74:ab:12:a2:5e:bb:41:55:d4:b9:e1:fd:
                    43:fe:70:ca:ca:3b:7f:79:a5:f7:8d:48:1e:df:4e:
                    51:ee:53:5f:28:50:44:14:9c:73:77:b6:3f:70:ee:
                    58:93:69:45:e8:d1:39:5b:fb:cd:23:55:9a:36:38:
                    22:a5:de:f9:df:e9:02:43:5a:79:80:f9:a8:72:6e:
                    ae:1c:b8:48:92:d1:3c:ea:dc:e7:49:9c:ee:29:4c:
                    be:5c:7d:24:f8:76:a3:75:93:b8:85:97:99:b6:35:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:A1:72:4D:56:FD:54:2E:65:C5:A3:41:3D:5E:DE:E7:FC:98:CA
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32332d3233203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:58:40:7c:c7:82:18:c3:7f:d4:56:97:ff:48:7f:18:16:
         ca:d5:38:c0:92:ff:80:bb:2a:bb:7d:1a:de:7a:fc:1a:4e:1c:
         8b:25:28:7c:77:33:86:0f:9b:eb:10:55:c6:47:6f:51:b3:0f:
         05:d4:9e:d7:fc:24:50:70:4d:9d:64:de:1c:ab:4d:b0:b4:ae:
         13:a2:eb:e3:58:99:aa:d7:94:05:48:dc:17:b8:39:b6:4f:14:
         77:9a:d4:ff:44:13:bd:c4:f3:cc:d4:83:86:69:40:3a:18:f9:
         98:6b:09:0a:15:d9:fd:b0:71:1e:0a:af:71:5b:fe:58:a7:b2:
         eb:09:dd:b0:c9:27:b2:89:c9:7a:18:cd:d7:dc:d8:31:dc:d8:
         13:9f:2c:2b:ba:e6:fb:0b:a1:b8:26:6c:74:0b:b4:01:40:cc:
         0c:bb:57:11:04:10:40:f1:93:44:47:4e:9d:91:b8:a6:53:b7:
         fb:bf:3d:0a:af:35:d3:6a:50:ff:c8:60:a7:c9:78:55:24:e4:
         29:6b:04:bb:ff:8a:a1:3b:0c:7b:d1:c1:5e:ea:27:d1:60:cd:
         a3:cd:01:59:a2:bd:ca:70:9d:da:fb:38:15:ca:68:ae:91:6a:
         47:58:fe:8a:21:83:13:90:b4:ad:44:c0:ef:48:1b:14:65:2a:
         02:98:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:06:36 2026 by rpki-client