Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/3137302e38332e3131322e302f32322d3232203d3e20323636343637.roa
File:                     3137302e38332e3131322e302f32322d3232203d3e20323636343637.roa (raw, json)
Hash identifier:          wCZ7nVdjsi6mLaBmfkVoBIt77W5l9HWWLFmv6L92g3o=
Subject key identifier:   C0:A7:01:22:98:53:2B:F2:9D:7E:A3:C7:E1:39:D6:B7:4E:1D:32:E1
Certificate issuer:       /CN=27D269F187FFB72CE14470EEA83E39EA7456A3D9
Certificate serial:       081552EF28EA59BF32028050E579E21792AE7C15
Authority key identifier: 27:D2:69:F1:87:FF:B7:2C:E1:44:70:EE:A8:3E:39:EA:74:56:A3:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27D269F187FFB72CE14470EEA83E39EA7456A3D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/3137302e38332e3131322e302f32322d3232203d3e20323636343637.roa
Signing time:             Wed 17 Jun 2026 13:27:24 +0000
ROA not before:           Wed 17 Jun 2026 13:22:24 +0000
ROA not after:            Wed 16 Jun 2027 13:27:24 +0000
asID:                     266467
IP address blocks:        170.83.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/27D269F187FFB72CE14470EEA83E39EA7456A3D9.crl
                          rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/27D269F187FFB72CE14470EEA83E39EA7456A3D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27D269F187FFB72CE14470EEA83E39EA7456A3D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 11:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:15:52:ef:28:ea:59:bf:32:02:80:50:e5:79:e2:17:92:ae:7c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27D269F187FFB72CE14470EEA83E39EA7456A3D9
        Validity
            Not Before: Jun 17 13:22:24 2026 GMT
            Not After : Jun 16 13:27:24 2027 GMT
        Subject: CN=C0A7012298532BF29D7EA3C7E139D6B74E1D32E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:8c:df:75:56:75:f5:00:4a:d4:e6:82:33:
                    d2:07:b1:f0:ea:c3:96:c4:c5:e7:2d:27:a5:66:e3:
                    3b:17:ee:68:cd:72:59:ba:1b:42:11:98:86:ed:0a:
                    72:ba:c7:f8:2b:1c:a2:60:5a:48:41:3a:f8:9c:de:
                    a8:38:6d:fd:d8:99:61:7c:6e:00:ac:10:54:3d:e4:
                    38:1e:6e:c5:2a:4b:0a:e6:b9:c8:d9:65:75:eb:40:
                    d5:fb:47:c1:f9:5e:e3:25:7b:5e:0d:7f:c7:10:99:
                    9c:fe:8b:a0:3e:cc:22:ff:a1:0d:37:a2:36:97:a1:
                    bc:0d:f1:10:79:8a:db:1d:d1:5e:62:d5:5d:27:b6:
                    45:83:35:4c:b0:d5:29:90:3b:fe:01:ed:fd:04:19:
                    80:8f:44:ee:f7:c8:4f:fc:8d:1d:ff:21:54:21:2d:
                    f3:60:04:a9:68:b8:84:0b:df:4c:69:c1:4f:96:02:
                    75:55:77:e6:d1:14:b0:df:ce:6a:cf:64:42:fc:49:
                    26:30:bd:3e:68:38:3e:8f:ea:40:42:57:4c:82:1d:
                    e2:16:c1:85:73:2f:51:65:e4:3e:13:fd:49:83:68:
                    a2:c2:66:13:10:e9:66:55:4b:cc:f9:2e:d5:c7:ef:
                    14:37:c6:fb:e6:40:57:f5:fc:62:91:12:0d:72:8f:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:01:22:98:53:2B:F2:9D:7E:A3:C7:E1:39:D6:B7:4E:1D:32:E1
            X509v3 Authority Key Identifier:
                keyid:27:D2:69:F1:87:FF:B7:2C:E1:44:70:EE:A8:3E:39:EA:74:56:A3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/27D269F187FFB72CE14470EEA83E39EA7456A3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27D269F187FFB72CE14470EEA83E39EA7456A3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/3137302e38332e3131322e302f32322d3232203d3e20323636343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:9c:fc:e6:1f:75:e6:03:77:a2:8e:a5:2e:08:49:61:aa:
         4e:7f:3f:4b:d6:74:7a:cd:b3:b1:d6:85:84:e4:34:76:41:af:
         51:02:4f:b3:c4:8f:67:59:8a:58:ee:81:f7:97:5d:26:41:02:
         aa:78:c5:62:09:e6:72:fa:7e:41:eb:da:82:e1:f2:5d:b2:cf:
         1c:0c:96:26:f0:9d:de:44:b3:20:3b:8b:ae:e2:27:d7:1e:0e:
         95:20:47:ca:69:19:97:54:0e:d3:3d:7d:a3:54:e7:3e:58:6f:
         aa:a4:eb:8a:25:6d:bd:99:26:1a:05:55:fc:42:95:67:6e:bc:
         e5:d1:4d:f6:7d:0c:12:ef:e4:7b:a5:cc:c6:13:4d:1b:04:41:
         22:55:9c:e1:19:cb:c1:db:a7:b3:61:d8:7f:0d:3e:91:56:78:
         a2:7a:ee:89:66:5c:ab:f7:10:e5:7d:18:aa:7a:5f:c9:72:e1:
         f9:3b:c3:bf:ee:33:59:b2:47:b5:97:fe:f8:48:85:3b:1b:a8:
         18:6b:98:91:6a:0a:73:4d:82:91:87:e3:d4:bc:dc:9f:87:22:
         0b:5d:55:45:6b:f4:97:64:9f:a8:fd:14:7f:0a:a9:c8:1a:3f:
         57:0d:4e:7d:18:68:05:cf:0a:ed:1f:69:c8:02:eb:c6:90:7e:
         34:15:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:13:32 2026 by rpki-client