Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3137302e38342e302e302f32322d3332203d3e20323633353839.roa
File:                     3137302e38342e302e302f32322d3332203d3e20323633353839.roa (raw, json)
Hash identifier:          XPwf8XIShJv03ZFAiu4H5o5V1HKaxnAxNwWnqwuWwWs=
Subject key identifier:   46:FD:02:47:22:5D:9D:A7:08:5D:6F:9F:27:60:8B:FC:35:90:73:E4
Certificate issuer:       /CN=152BD93E6DEE45ED029C88DEAC673976658E9A91
Certificate serial:       65CA1871F6D8B4B2CE1A596E9C88A184780F9DED
Authority key identifier: 15:2B:D9:3E:6D:EE:45:ED:02:9C:88:DE:AC:67:39:76:65:8E:9A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3137302e38342e302e302f32322d3332203d3e20323633353839.roa
Signing time:             Wed 01 Jul 2026 13:58:06 +0000
ROA not before:           Wed 01 Jul 2026 13:53:06 +0000
ROA not after:            Wed 30 Jun 2027 13:58:06 +0000
asID:                     263589
IP address blocks:        170.84.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.crl
                          rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ca:18:71:f6:d8:b4:b2:ce:1a:59:6e:9c:88:a1:84:78:0f:9d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152BD93E6DEE45ED029C88DEAC673976658E9A91
        Validity
            Not Before: Jul  1 13:53:06 2026 GMT
            Not After : Jun 30 13:58:06 2027 GMT
        Subject: CN=46FD0247225D9DA7085D6F9F27608BFC359073E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:ed:2a:26:2f:3f:36:44:4e:32:a7:6d:23:
                    d8:9c:b5:6b:aa:9b:7a:55:68:38:30:33:8d:47:c7:
                    54:85:e7:d8:c4:56:73:98:b4:86:d4:58:9c:cc:ae:
                    2e:bd:b3:c0:ca:7f:f0:3c:45:2f:26:ef:af:30:11:
                    2a:4a:4b:d7:f7:5c:66:54:91:67:b2:43:47:46:78:
                    56:cf:ce:7b:f9:5f:99:2e:ff:fd:72:ef:76:20:a9:
                    cf:11:6f:b6:be:9a:66:48:f7:ac:4f:c8:a8:10:aa:
                    f9:66:c6:8f:e4:a6:79:e6:50:1b:24:3f:6c:4a:13:
                    34:4a:a8:f2:ab:fc:b5:fa:c6:7b:1f:87:20:4c:9f:
                    d1:a1:d1:9d:62:ae:a1:d4:71:ec:ba:ff:d6:b6:30:
                    ba:6d:18:c4:e8:35:dc:69:67:ec:bb:5a:ab:6a:1f:
                    8d:13:eb:56:15:d1:2e:3e:f3:e4:17:ab:0a:d0:c9:
                    c6:10:58:a7:aa:a8:83:81:f6:93:7c:7b:9e:e0:2d:
                    d3:8f:8b:24:ed:e5:f2:c6:41:13:d7:7b:1d:a1:dd:
                    06:56:0c:1a:3d:7f:e5:a8:2c:32:82:db:fe:54:f1:
                    a7:6c:f3:4a:a1:ab:e6:a9:75:4c:0e:e8:aa:cf:64:
                    49:df:6e:c0:be:a9:d6:57:15:2e:0c:e4:51:b0:3b:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FD:02:47:22:5D:9D:A7:08:5D:6F:9F:27:60:8B:FC:35:90:73:E4
            X509v3 Authority Key Identifier:
                keyid:15:2B:D9:3E:6D:EE:45:ED:02:9C:88:DE:AC:67:39:76:65:8E:9A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3137302e38342e302e302f32322d3332203d3e20323633353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:53:48:d2:1a:f9:e0:0c:28:e7:19:cb:eb:ab:f0:fb:0a:6a:
         af:43:8b:b1:db:b3:38:ab:29:66:64:78:da:d0:e9:3d:23:c0:
         79:7d:d4:ca:68:2b:eb:72:65:3c:40:c9:8a:17:4d:f6:eb:fb:
         a6:bc:27:a7:24:eb:f8:73:67:76:c3:48:1b:70:73:a1:7d:6a:
         b9:2b:14:7f:f6:91:46:a7:98:94:54:c3:6a:b6:86:0b:5a:3c:
         1b:aa:a2:29:dd:71:2a:6f:8c:98:ef:ba:71:94:6e:5f:92:59:
         71:4c:28:b3:a8:8a:89:d7:5c:e8:d4:80:9f:40:00:48:5a:82:
         16:ee:7e:2b:a9:9d:b6:4d:ff:c4:7c:fb:0c:95:52:67:71:40:
         3a:d9:03:c6:34:21:df:8e:f7:40:60:41:56:81:c5:2a:03:b3:
         c3:44:58:11:19:81:94:c2:48:0b:16:1c:13:4a:1c:fe:b7:80:
         db:a1:9e:65:b2:9f:29:75:77:51:77:69:2b:b9:de:0c:9c:e2:
         1b:68:9c:1a:34:5a:4f:c0:a0:1e:2f:9d:90:78:aa:d7:22:f6:
         d9:ea:21:a5:c3:3e:aa:b7:76:00:f6:74:6d:12:a0:14:7b:6d:
         66:52:e5:52:7e:5f:d9:5c:bc:7c:9e:49:a9:92:54:41:3d:b9:
         77:ab:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:01:35 2026 by rpki-client