Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa
File:                     3137302e38302e312e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          r8hm4HdrcQ3KcG9dDmrjSIGSspT6jRM5jneATIT36pw=
Subject key identifier:   4E:A1:AB:16:B6:49:62:B5:7A:58:36:D6:E3:8C:33:A0:18:DC:22:D8
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       7108481C376EBD176710797D8800081E09E61056
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa
Signing time:             Thu 20 Aug 2026 20:45:51 +0000
ROA not before:           Thu 20 Aug 2026 20:40:51 +0000
ROA not after:            Thu 19 Aug 2027 20:45:51 +0000
asID:                     263627
IP address blocks:        170.80.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:08:48:1c:37:6e:bd:17:67:10:79:7d:88:00:08:1e:09:e6:10:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Aug 20 20:40:51 2026 GMT
            Not After : Aug 19 20:45:51 2027 GMT
        Subject: CN=4EA1AB16B64962B57A5836D6E38C33A018DC22D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4f:8e:61:ef:86:2d:94:09:64:0d:f9:c9:5b:
                    4c:1f:1a:aa:58:d2:f3:f3:bd:b2:b2:a9:75:ce:8a:
                    4f:70:9f:42:a7:2f:b1:26:66:bc:e0:92:cc:26:da:
                    14:90:37:bc:e5:b1:5a:90:43:17:db:af:91:d2:9f:
                    3e:a5:37:63:6c:8d:79:11:02:af:1c:28:bf:bd:e3:
                    28:64:88:ee:21:11:1f:0d:91:88:cd:de:2d:34:df:
                    ac:ea:da:fd:36:56:51:5b:82:ab:f1:a1:05:9f:d2:
                    57:5d:e8:ca:73:a6:6f:b8:bc:a5:d6:80:5b:81:9c:
                    32:2b:f4:38:b5:a7:91:b1:f9:88:a8:2e:f7:b1:9a:
                    22:f7:c4:ac:52:0c:31:52:6c:bd:4e:22:a8:eb:94:
                    9d:59:28:46:85:85:91:d9:3d:ea:90:46:ef:66:e0:
                    46:ad:0e:98:be:6e:23:b6:4b:f0:6a:02:2f:e0:01:
                    76:9b:3a:79:62:e9:79:53:10:85:d6:ce:61:c2:89:
                    81:24:d4:5c:12:5e:0c:0a:35:1c:b1:ce:a0:4c:59:
                    22:41:7b:bf:2a:dd:fd:5a:45:9b:9f:e7:d7:45:d6:
                    23:3b:53:70:78:91:c3:29:6f:0c:28:37:23:27:c5:
                    34:fa:33:40:ea:aa:07:25:21:e3:ea:5f:86:27:1b:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A1:AB:16:B6:49:62:B5:7A:58:36:D6:E3:8C:33:A0:18:DC:22:D8
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:28:f0:99:aa:fe:45:f8:8a:6a:74:88:b3:60:a9:bd:2d:15:
         a5:82:04:97:19:7f:3c:dc:29:0d:43:5a:28:9b:42:70:9d:83:
         bc:5a:59:4b:37:fe:e5:09:42:87:ce:c6:a9:d5:f7:99:a7:f9:
         d2:de:42:12:f7:6e:66:9f:c6:14:92:e6:c1:b0:cc:95:2d:9b:
         26:71:f2:e2:bc:f7:28:cd:78:36:3b:7e:43:f3:86:2c:65:27:
         1d:20:dc:6c:49:f2:ea:40:c6:38:cd:3d:a8:65:6d:99:9b:0b:
         a7:2c:3b:c5:2c:ff:2e:96:0b:7b:96:ff:50:bf:9e:94:04:7d:
         55:74:52:88:98:df:7d:ad:85:17:8c:b4:38:93:1f:b7:aa:69:
         fd:b6:8c:e3:bd:5f:e0:80:b9:eb:e6:56:67:10:fd:cb:9e:91:
         6c:89:79:88:72:3c:1b:cf:eb:89:d4:e8:e8:73:a1:79:a9:57:
         a8:ca:6f:ce:6b:75:22:10:ef:17:ae:fd:c4:d3:8e:87:23:34:
         c3:8e:cb:75:92:ae:ef:a7:d1:65:61:8d:99:b6:32:10:dc:41:
         af:01:89:08:18:72:d3:34:3d:d4:2f:6b:7d:0f:5e:57:0b:4e:
         27:9e:60:81:87:85:58:23:58:78:20:a5:5d:1f:10:cc:45:d3:
         c5:41:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:44:05 2026 by rpki-client