Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa
File:                     3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa (raw, json)
Hash identifier:          fdRXLSJ1pfzv+5b99hnwMrI8vRTXC1s1ROakW9IYBhY=
Subject key identifier:   47:4B:2C:DF:E6:C6:D2:C5:E7:2F:DD:56:63:3F:A7:FA:91:6D:EA:43
Certificate issuer:       /CN=8703A350980EA32291A92059B5680F0225435C23
Certificate serial:       63C3C863910813992DC0BE47FC8E39F74060CC11
Authority key identifier: 87:03:A3:50:98:0E:A3:22:91:A9:20:59:B5:68:0F:02:25:43:5C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8703A350980EA32291A92059B5680F0225435C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa
Signing time:             Mon 18 May 2026 19:25:15 +0000
ROA not before:           Mon 18 May 2026 19:20:15 +0000
ROA not after:            Mon 17 May 2027 19:25:15 +0000
asID:                     265098
IP address blocks:        170.233.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/8703A350980EA32291A92059B5680F0225435C23.crl
                          rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/8703A350980EA32291A92059B5680F0225435C23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8703A350980EA32291A92059B5680F0225435C23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 00:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c3:c8:63:91:08:13:99:2d:c0:be:47:fc:8e:39:f7:40:60:cc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8703A350980EA32291A92059B5680F0225435C23
        Validity
            Not Before: May 18 19:20:15 2026 GMT
            Not After : May 17 19:25:15 2027 GMT
        Subject: CN=474B2CDFE6C6D2C5E72FDD56633FA7FA916DEA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:6b:29:01:69:9e:7a:5b:7c:e3:1d:7f:b0:
                    3f:c4:8b:41:3e:97:53:c5:7f:25:ec:05:2d:69:e2:
                    eb:4d:59:49:ae:c9:42:14:79:8e:87:d2:ef:a1:37:
                    07:52:99:cd:f9:6d:b6:8b:d8:42:ab:a5:25:de:c8:
                    ee:c9:21:1d:fc:31:15:6e:01:a0:57:7c:6e:f7:a4:
                    2d:3a:f7:3c:09:d3:27:52:bd:52:cd:7f:7e:04:55:
                    7c:84:b1:46:67:fb:f7:c6:04:76:66:3c:68:6f:09:
                    b9:4b:31:13:85:1c:58:46:67:aa:2a:09:bd:16:7d:
                    ee:77:3c:52:29:63:e1:06:d8:bd:da:67:b2:68:49:
                    54:f2:3b:da:16:55:ed:a6:75:2f:27:aa:43:3b:28:
                    9b:8a:3a:fd:57:3d:87:05:67:d7:17:a5:37:67:e3:
                    12:09:99:8b:5e:ce:c7:97:52:3a:4e:4c:e0:fb:93:
                    51:63:e1:a2:75:ee:26:a3:79:89:d8:e3:8e:37:82:
                    8e:a3:eb:15:ce:ea:ed:a7:cc:e1:39:66:e6:39:12:
                    01:29:44:d8:57:a1:62:db:b7:5b:ca:17:c6:1e:d1:
                    42:50:f8:b3:89:55:50:88:e3:a9:84:e4:e4:9d:1d:
                    4a:9c:51:7a:f9:a6:d6:ef:b3:82:cc:48:d4:be:3a:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4B:2C:DF:E6:C6:D2:C5:E7:2F:DD:56:63:3F:A7:FA:91:6D:EA:43
            X509v3 Authority Key Identifier:
                keyid:87:03:A3:50:98:0E:A3:22:91:A9:20:59:B5:68:0F:02:25:43:5C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/8703A350980EA32291A92059B5680F0225435C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8703A350980EA32291A92059B5680F0225435C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:4c:e7:a9:f5:7f:ac:46:5c:b3:5b:47:cb:cf:57:67:2e:
         5f:a3:bb:5e:ce:61:4b:14:cb:86:50:b3:56:3c:f7:b0:56:b4:
         d2:2c:3f:45:89:88:08:a3:66:66:b8:94:4c:09:3a:43:71:30:
         69:d7:0e:e6:8c:81:ef:eb:e4:9e:52:32:68:56:c2:98:80:b3:
         1c:00:9c:33:c9:cf:25:2d:8e:f7:ea:7e:1b:d3:f1:71:f2:a0:
         89:99:6b:da:38:19:28:d0:b0:fa:f3:96:aa:09:b2:08:e5:31:
         1e:10:20:98:d3:91:68:99:bd:f4:43:87:80:d3:7f:b3:d9:d3:
         93:a0:69:1e:0d:57:82:79:ac:3c:87:2e:65:80:20:0b:3a:90:
         ba:ce:25:ea:8d:e3:b0:cf:52:1f:b6:35:be:70:44:5a:d0:d9:
         20:1c:9d:9b:33:01:45:5f:36:83:3b:bf:f7:de:64:54:b7:8b:
         e8:db:ba:5d:62:45:17:f3:38:aa:83:8c:0a:02:b4:95:1b:c1:
         ec:d5:08:f9:fb:fe:6b:dc:7a:4c:f0:68:95:af:a7:9f:36:34:
         18:a3:71:80:b2:bb:0a:75:fe:35:6e:6a:36:e0:6c:16:d8:a1:
         be:ca:7d:e8:85:92:74:c9:d6:61:17:f8:eb:46:b2:90:c3:21:
         98:07:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:31:52 2026 by rpki-client