Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3234203d3e20323635303130.roa
File:                     3137302e38342e3130302e302f32322d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          V397dzu77ardNaK3Rh+xy8GMWvdY+ZPJa/5HbGpwpbo=
Subject key identifier:   93:9D:88:4B:AC:18:43:2D:3D:E8:B6:FF:B5:21:96:21:FF:3E:E6:26
Certificate issuer:       /CN=6EB845BBF2DE9161E2FFD6D6DEA1EA0220EA5118
Certificate serial:       7128BDB417C583A1C64CB947344111FA725C795C
Authority key identifier: 6E:B8:45:BB:F2:DE:91:61:E2:FF:D6:D6:DE:A1:EA:02:20:EA:51:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EB845BBF2DE9161E2FFD6D6DEA1EA0220EA5118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3234203d3e20323635303130.roa
Signing time:             Fri 02 Oct 2026 00:00:12 +0000
ROA not before:           Thu 01 Oct 2026 23:55:12 +0000
ROA not after:            Fri 01 Oct 2027 00:00:12 +0000
asID:                     265010
IP address blocks:        170.84.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/6EB845BBF2DE9161E2FFD6D6DEA1EA0220EA5118.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/6EB845BBF2DE9161E2FFD6D6DEA1EA0220EA5118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EB845BBF2DE9161E2FFD6D6DEA1EA0220EA5118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 18:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:28:bd:b4:17:c5:83:a1:c6:4c:b9:47:34:41:11:fa:72:5c:79:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EB845BBF2DE9161E2FFD6D6DEA1EA0220EA5118
        Validity
            Not Before: Oct  1 23:55:12 2026 GMT
            Not After : Oct  1 00:00:12 2027 GMT
        Subject: CN=939D884BAC18432D3DE8B6FFB5219621FF3EE626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:bd:07:50:1a:13:37:f0:f8:a5:e6:f1:62:
                    e5:b1:cd:4d:93:2d:88:ce:2e:28:24:c2:52:c4:b1:
                    4a:75:d6:29:26:fc:44:9b:88:f7:fb:95:27:f7:52:
                    d3:35:99:30:31:0a:df:1d:e7:63:45:78:b3:39:9b:
                    b5:6e:6c:0f:10:70:d1:d9:e8:99:e2:8a:5c:a4:da:
                    35:d2:9a:1b:cf:58:c6:e9:83:43:55:90:dc:42:47:
                    4c:d2:09:27:62:72:ca:0f:0f:71:95:4f:c7:39:8a:
                    4a:61:bc:93:c3:2b:5a:ed:8c:ac:10:40:dc:56:b5:
                    99:ec:b2:0f:c6:73:50:91:68:b5:a6:5f:21:a8:c1:
                    60:dd:da:52:cf:8e:98:4c:74:91:34:f4:14:03:90:
                    32:91:3e:c6:a5:5b:08:30:be:45:ba:20:20:e0:31:
                    8f:75:89:d1:5b:73:b2:4b:b5:9b:62:24:5b:6b:dd:
                    e4:4d:76:b9:31:98:e3:19:c5:1d:c5:33:ee:2b:23:
                    6c:d4:3c:a0:83:21:42:f7:30:03:d9:0a:5f:16:78:
                    e1:96:30:28:66:9a:61:6c:b2:31:19:41:82:2a:4d:
                    b8:ae:5a:af:de:2b:a5:31:23:70:87:67:4e:8e:7f:
                    a3:b1:07:53:b9:e8:ab:1f:35:52:6a:fd:38:dc:7d:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9D:88:4B:AC:18:43:2D:3D:E8:B6:FF:B5:21:96:21:FF:3E:E6:26
            X509v3 Authority Key Identifier:
                keyid:6E:B8:45:BB:F2:DE:91:61:E2:FF:D6:D6:DE:A1:EA:02:20:EA:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/6EB845BBF2DE9161E2FFD6D6DEA1EA0220EA5118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EB845BBF2DE9161E2FFD6D6DEA1EA0220EA5118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130302e302f32322d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:a5:b8:31:6c:e4:cc:e3:8b:d2:fb:86:8b:e7:f6:de:7d:6a:
         28:94:6c:f0:d6:d5:50:76:63:82:30:8a:41:ac:fd:c2:2f:d9:
         33:ce:a2:7b:15:7e:65:60:5c:cb:c5:66:b6:6f:0e:68:35:88:
         2f:78:59:27:0b:ca:8c:05:dc:84:ce:06:04:9b:d8:b3:3d:48:
         ea:c0:84:6b:17:46:a9:b7:dd:72:7b:da:e0:78:cd:c4:19:5d:
         ec:fc:8b:05:4a:ea:90:c8:1f:a1:9a:54:a7:e0:c0:34:54:2e:
         92:e3:f3:f0:e1:ae:92:98:30:8a:10:f0:43:22:77:e5:91:ce:
         33:ab:83:d1:62:fb:55:fc:c8:6d:42:ce:25:54:91:f5:5d:f9:
         74:16:a9:4c:fb:fb:2c:9f:ba:0c:99:09:eb:1f:08:52:a5:a3:
         b9:02:70:2c:b6:a9:70:00:1f:8c:2d:01:9d:cb:49:7d:cc:29:
         13:a5:3f:ac:b3:12:f7:24:47:de:c6:e9:ea:95:86:e8:48:78:
         14:42:19:3e:be:13:ed:ec:a3:c2:e7:45:a3:bf:9d:eb:86:75:
         bc:67:4f:0e:49:73:f4:d5:0f:3b:ac:e1:fc:03:e5:8b:f4:7a:
         67:c3:b9:eb:c5:dd:c5:c4:65:ab:89:47:25:32:56:a0:17:3e:
         29:bf:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 22:00:13 2026 by rpki-client