Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39382e302f32332d3233203d3e203532373231.roa
File:                     3137302e3234362e39382e302f32332d3233203d3e203532373231.roa (raw, json)
Hash identifier:          I7Oolhvy+T2zR469yJb59rs+dTKW0LiUv+1Pouqh4ZY=
Subject key identifier:   C4:6B:3A:0B:F2:F1:BC:C3:50:96:2A:1D:97:EB:F2:5A:78:12:7D:27
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       2407775028BCCCD88FDFAA8E5103E8623044237E
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39382e302f32332d3233203d3e203532373231.roa
Signing time:             Tue 22 Sep 2026 17:11:57 +0000
ROA not before:           Tue 22 Sep 2026 17:06:57 +0000
ROA not after:            Tue 21 Sep 2027 17:11:57 +0000
asID:                     52721
IP address blocks:        170.246.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:77:50:28:bc:cc:d8:8f:df:aa:8e:51:03:e8:62:30:44:23:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:06:57 2026 GMT
            Not After : Sep 21 17:11:57 2027 GMT
        Subject: CN=C46B3A0BF2F1BCC350962A1D97EBF25A78127D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:0a:c3:b5:12:fc:ff:51:d0:63:71:2e:26:
                    ae:d2:42:b8:3f:15:dc:9b:2b:54:05:ed:b6:66:3f:
                    7b:14:86:6a:78:a5:6f:07:e3:4b:73:0e:8b:2b:67:
                    6d:7e:17:91:ed:91:7a:98:3d:36:fa:13:98:0c:c7:
                    8c:03:9b:9d:9a:50:ea:2e:53:3c:8f:04:5a:68:df:
                    9b:96:1f:fe:6e:58:17:56:f0:4f:00:5b:1e:63:c7:
                    1a:61:ee:e5:37:2d:d8:60:d5:bc:04:d6:4f:13:eb:
                    ce:64:ca:95:8a:89:13:f4:5c:bd:93:05:7d:90:b8:
                    8f:c9:f2:d6:c5:34:54:c4:9a:2a:42:6a:09:c1:b4:
                    a4:9f:70:d8:c3:48:c1:2e:2f:d8:9c:69:5e:72:c5:
                    28:3e:47:af:6b:f1:ba:87:23:aa:e7:01:28:36:be:
                    2c:dc:17:50:8d:92:f9:a0:18:0d:80:a2:bc:4f:db:
                    1f:2a:3e:7a:88:23:c9:4c:60:ae:b0:03:55:c5:af:
                    c4:2d:4e:85:2c:a8:24:54:55:d1:1a:2b:d4:7e:b2:
                    6e:28:17:95:6a:b6:8c:ed:60:8f:46:12:8c:64:4a:
                    3a:25:d2:45:49:7e:9a:0b:d9:d0:d8:0c:4b:3d:07:
                    40:5c:dc:a7:3f:c4:1c:62:14:ae:92:31:6f:73:71:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:3A:0B:F2:F1:BC:C3:50:96:2A:1D:97:EB:F2:5A:78:12:7D:27
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39382e302f32332d3233203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:33:63:5c:48:01:95:02:45:c8:fa:0b:6c:3e:11:d7:43:
         c7:f4:d6:c5:4d:c9:0e:ea:7c:48:16:36:d2:d6:30:2c:ec:22:
         63:f6:aa:2d:c5:0c:fc:03:8b:86:04:09:12:e0:e8:c9:8f:79:
         17:8f:aa:bb:0f:7e:05:98:6e:31:11:f3:f3:09:48:41:f8:14:
         0c:ec:99:87:42:5c:cb:ad:ce:c7:2d:58:e8:57:0a:e7:cb:40:
         a4:84:af:c7:0d:a8:c0:b2:2f:b8:d4:5a:5f:50:a8:fb:aa:b0:
         54:0f:5d:3b:b5:4b:26:72:db:b9:f5:8b:c2:f9:99:c9:4f:fc:
         99:d0:4b:94:36:c5:3b:03:b3:af:09:e2:01:b7:d5:59:59:58:
         69:67:bd:f8:91:66:00:63:89:6c:16:db:9f:df:9c:4d:30:40:
         10:45:21:37:9d:68:dc:52:40:54:7f:1a:35:0b:ae:20:bb:8f:
         99:27:e0:e5:1f:97:20:8b:72:51:fd:b4:26:8c:2c:ac:4f:c1:
         dc:3d:9a:45:5d:0a:fd:f2:12:45:bd:3a:f4:37:07:e9:da:f6:
         df:75:0d:4e:03:47:b9:34:e2:6b:75:a5:cf:ef:2b:29:02:a1:
         f2:26:5e:53:1e:61:99:7d:f7:9f:23:bd:63:46:fc:fc:82:5b:
         49:01:db:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJAd3UCi8zNiP36qOUQPoYjBEI34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2Rjk5Rjk2ODI3MDZDODBEODU5Q0I3RkUxRTQwQjA3
RUJCMDk5ODAeFw0yNjA5MjIxNzA2NTdaFw0yNzA5MjExNzExNTdaMDMxMTAvBgNV
BAMTKEM0NkIzQTBCRjJGMUJDQzM1MDk2MkExRDk3RUJGMjVBNzgxMjdEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCSwrDtRL8/1HQY3EuJq7SQrg/
FdybK1QF7bZmP3sUhmp4pW8H40tzDosrZ21+F5HtkXqYPTb6E5gMx4wDm52aUOou
UzyPBFpo35uWH/5uWBdW8E8AWx5jxxph7uU3Ldhg1bwE1k8T685kypWKiRP0XL2T
BX2QuI/J8tbFNFTEmipCagnBtKSfcNjDSMEuL9icaV5yxSg+R69r8bqHI6rnASg2
vizcF1CNkvmgGA2AorxP2x8qPnqII8lMYK6wA1XFr8QtToUsqCRUVdEaK9R+sm4o
F5VqtoztYI9GEoxkSjol0kVJfpoL2dDYDEs9B0Bc3Kc/xBxiFK6SMW9zcUK3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxGs6C/LxvMNQliodl+vyWngSfScwHwYDVR0j
BBgwFoAUzW+Z+WgnBsgNhZy3/h5AsH67CZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ
cWUvMC9DRDZGOTlGOTY4MjcwNkM4MEQ4NTlDQjdGRTFFNDBCMDdFQkIwOTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkY5OUY5NjgyNzA2Qzgw
RDg1OUNCN0ZFMUU0MEIwN0VCQjA5OTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAv
MzEzNzMwMmUzMjM0MzYyZTM5MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzczMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqvZiMA0GCSqGSIb3DQEBCwUAA4IBAQAmwjNjXEgB
lQJFyPoLbD4R10PH9NbFTckO6nxIFjbS1jAs7CJj9qotxQz8A4uGBAkS4OjJj3kX
j6q7D34FmG4xEfPzCUhB+BQM7JmHQlzLrc7HLVjoVwrny0CkhK/HDajAsi+41Fpf
UKj7qrBUD107tUsmctu59YvC+ZnJT/yZ0EuUNsU7A7OvCeIBt9VZWVhpZ734kWYA
Y4lsFtuf35xNMEAQRSE3nWjcUkBUfxo1C64gu4+ZJ+DlH5cgi3JR/bQmjCysT8Hc
PZpFXQr98hJFvTr0Nwfp2vbfdQ1OA0e5NOJrdaXP7yspAqHyJl5THmGZffefI71j
Rvz8gltJAdtz
-----END CERTIFICATE-----
Generated at Fri Oct 16 20:18:52 2026 by rpki-client