Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/3137302e38332e3131332e302f32342d3234203d3e20323636343637.roa
File:                     3137302e38332e3131332e302f32342d3234203d3e20323636343637.roa (raw, json)
Hash identifier:          wynuYyquVOeT9SFQwN0BdtoKwNH6ZHU/F57PsWr1ywg=
Subject key identifier:   FA:5E:98:5E:24:F9:31:A3:B6:EC:B5:2A:BF:E6:7D:7F:8D:5F:13:0F
Certificate issuer:       /CN=27D269F187FFB72CE14470EEA83E39EA7456A3D9
Certificate serial:       4DD04634E6D07342F7151960031DEE28D8725F72
Authority key identifier: 27:D2:69:F1:87:FF:B7:2C:E1:44:70:EE:A8:3E:39:EA:74:56:A3:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27D269F187FFB72CE14470EEA83E39EA7456A3D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/3137302e38332e3131332e302f32342d3234203d3e20323636343637.roa
Signing time:             Wed 17 Jun 2026 13:27:28 +0000
ROA not before:           Wed 17 Jun 2026 13:22:28 +0000
ROA not after:            Wed 16 Jun 2027 13:27:28 +0000
asID:                     266467
IP address blocks:        170.83.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/27D269F187FFB72CE14470EEA83E39EA7456A3D9.crl
                          rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/27D269F187FFB72CE14470EEA83E39EA7456A3D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27D269F187FFB72CE14470EEA83E39EA7456A3D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 11:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d0:46:34:e6:d0:73:42:f7:15:19:60:03:1d:ee:28:d8:72:5f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27D269F187FFB72CE14470EEA83E39EA7456A3D9
        Validity
            Not Before: Jun 17 13:22:28 2026 GMT
            Not After : Jun 16 13:27:28 2027 GMT
        Subject: CN=FA5E985E24F931A3B6ECB52ABFE67D7F8D5F130F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:12:f1:4b:ec:ac:c6:fe:84:d1:43:1c:d2:
                    57:21:2c:f6:68:5b:74:0b:06:2e:7a:85:bb:51:c5:
                    31:66:1b:1a:f9:f3:dd:c0:f2:76:64:4b:22:1b:d2:
                    8e:e3:f5:a3:c4:23:96:8d:10:88:ef:c0:7e:32:da:
                    58:19:c5:16:c7:54:1e:8e:c9:0d:93:70:11:34:38:
                    d5:71:ec:bc:23:c0:c1:8a:be:74:99:e0:dd:fb:c4:
                    64:eb:01:34:66:1b:bf:71:5b:e0:c7:ae:a5:2b:18:
                    9f:b5:e4:c5:ae:f6:14:61:c2:a4:ce:07:55:83:48:
                    06:2d:12:72:ef:b3:8e:17:d7:1b:e9:ed:90:7d:a2:
                    b8:78:e5:30:e8:0d:a7:d2:c6:0a:08:36:96:4a:ff:
                    40:76:ba:1b:03:99:0f:15:b4:d6:7b:e7:28:e1:49:
                    7c:8f:28:9b:70:51:69:c9:b3:5a:ae:ae:07:d2:37:
                    c4:af:29:aa:72:44:d2:47:51:60:d5:79:71:bd:57:
                    ce:a8:f5:07:37:35:25:ff:81:55:56:5d:4b:6b:69:
                    7f:1c:74:04:86:16:87:64:54:3e:1d:5a:a2:8d:d9:
                    20:b5:17:c9:61:44:15:1d:d1:eb:5f:18:1f:b1:0b:
                    fd:54:10:08:15:fd:77:96:95:c9:23:47:40:00:11:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:98:5E:24:F9:31:A3:B6:EC:B5:2A:BF:E6:7D:7F:8D:5F:13:0F
            X509v3 Authority Key Identifier:
                keyid:27:D2:69:F1:87:FF:B7:2C:E1:44:70:EE:A8:3E:39:EA:74:56:A3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/27D269F187FFB72CE14470EEA83E39EA7456A3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27D269F187FFB72CE14470EEA83E39EA7456A3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/3137302e38332e3131332e302f32342d3234203d3e20323636343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:98:5b:0c:52:5c:72:be:20:89:59:e1:89:52:e3:f5:5f:
         4c:b7:a9:b2:df:25:90:61:f6:34:e3:3d:43:77:98:17:8c:43:
         7d:6a:ae:36:5a:2d:a1:2b:d4:c1:50:fe:e3:24:be:89:49:d2:
         3f:10:5b:2a:11:18:e4:04:80:6c:15:7b:68:c9:e1:e2:31:1c:
         7b:d8:79:c6:06:6c:1e:b4:a9:59:2f:b3:df:22:f4:93:41:ed:
         9f:7c:94:e5:f7:5d:61:02:d5:28:d0:cb:51:3d:a7:c5:b8:dd:
         41:88:2c:4f:46:f2:f5:77:59:6e:aa:92:f0:0f:05:b2:8f:a3:
         20:9d:b1:ee:31:f7:99:f6:0a:05:93:60:0e:ec:5c:d3:54:99:
         dc:b1:e6:76:27:da:9d:07:5c:bc:9c:93:7c:9e:b1:46:79:c0:
         62:ad:6c:e9:4c:de:03:d5:16:09:2f:8d:0b:dd:c4:2b:3a:25:
         75:6a:3d:46:e1:be:cf:54:59:a7:56:94:b8:38:9e:d1:94:99:
         91:11:a0:72:f2:bd:57:60:f1:d9:35:76:84:aa:e6:2a:0c:36:
         9d:e1:6f:44:79:15:2e:79:b9:fa:70:4d:f9:25:de:87:41:e1:
         94:46:98:4b:9d:b7:94:1b:79:dc:8b:d9:19:2f:c0:6c:5c:98:
         58:c3:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:13:24 2026 by rpki-client