Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa
File:                     3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa (raw, json)
Hash identifier:          9MxEmShshnOpeeSAXxsO5rOOiomagiDNp2lHRLCxgME=
Subject key identifier:   9E:2E:74:F7:5A:D7:68:BD:63:16:75:21:DB:2E:68:E8:66:00:E1:15
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       164DF6967830F46CC49446BF576CD6C0F61E0234
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa
Signing time:             Fri 30 Oct 2026 14:05:29 +0000
ROA not before:           Fri 30 Oct 2026 14:00:29 +0000
ROA not after:            Fri 29 Oct 2027 14:05:29 +0000
asID:                     266446
IP address blocks:        170.82.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 09:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4d:f6:96:78:30:f4:6c:c4:94:46:bf:57:6c:d6:c0:f6:1e:02:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Oct 30 14:00:29 2026 GMT
            Not After : Oct 29 14:05:29 2027 GMT
        Subject: CN=9E2E74F75AD768BD63167521DB2E68E86600E115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:ff:ae:93:52:ac:3c:3e:24:95:37:6f:dd:
                    98:ef:68:39:d0:4e:7e:5e:f6:f2:a7:82:4b:74:16:
                    4d:35:95:ef:5e:c1:55:5d:f0:f8:c6:e4:4a:42:45:
                    75:20:97:e9:01:87:e6:8b:42:c9:f4:01:7d:d3:f5:
                    7c:91:9b:56:15:9a:07:48:f5:7b:3a:c3:d3:37:d9:
                    c6:ea:6b:75:03:12:73:ed:b8:2a:75:30:9f:79:2d:
                    cc:86:b2:29:34:1e:44:4a:2c:00:5c:3d:c0:f3:66:
                    40:88:ed:1c:3d:3b:af:f2:16:c5:c5:af:9e:3d:35:
                    2c:bc:33:8f:5c:cf:ad:1d:ad:f2:c1:74:78:e2:d5:
                    ad:b5:25:64:75:49:6a:73:f2:2e:dd:9b:99:bd:6a:
                    41:cf:e7:d7:ff:5a:0c:63:5b:e5:e0:f2:f1:96:5a:
                    5d:9b:47:62:45:b7:0b:03:58:98:e2:82:94:f8:c8:
                    e6:91:71:ad:f8:46:cd:8a:41:20:ff:a6:72:9b:1a:
                    70:8a:4e:dc:e6:f1:93:1c:f5:28:90:1a:34:ab:a7:
                    1f:ca:02:c0:00:c3:68:be:53:9d:b1:2b:fb:db:f7:
                    d7:2a:3d:ca:fc:5e:ea:51:9e:58:01:b9:e2:51:d9:
                    c1:a7:7b:30:87:80:3e:09:6b:4e:02:01:64:1a:78:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2E:74:F7:5A:D7:68:BD:63:16:75:21:DB:2E:68:E8:66:00:E1:15
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:b3:2a:0f:be:95:45:34:ca:6d:8d:ea:a0:7b:69:83:55:27:
         7d:ec:22:bc:96:23:17:78:23:54:bc:f5:9d:d2:8d:b7:71:c8:
         dc:46:ab:a8:03:ca:6c:b5:d7:16:2b:27:6e:4e:d5:21:51:1f:
         0e:7e:03:47:8e:1d:c1:bf:3d:94:ae:51:59:06:2a:5c:e0:c8:
         4a:bd:7a:e8:70:b8:ce:5f:54:88:04:60:fa:5a:cb:a9:ab:1b:
         4e:7c:33:b5:21:2e:f5:20:ef:10:3a:ca:5b:3a:bc:a1:46:ef:
         bf:25:39:72:71:0a:60:44:cb:7c:9a:06:02:f9:85:90:ea:4a:
         f5:75:82:72:8f:a9:c5:75:51:01:ea:6a:05:d4:45:a7:22:4c:
         4f:a7:3f:0d:7f:1d:44:24:6b:89:29:d6:71:1a:cf:63:2d:2a:
         d7:4f:78:b3:b4:c4:04:c2:2e:fe:9a:15:70:e1:b3:3b:d6:d2:
         f3:66:ba:36:ae:89:7d:53:a9:06:d1:2e:2c:e8:74:72:af:4f:
         86:26:da:60:18:4c:e2:af:34:ae:41:e5:df:c6:b7:82:5f:01:
         e2:80:5f:15:b3:94:93:c5:02:59:d7:56:b8:a3:56:88:85:09:
         66:f7:dd:8a:46:0d:a2:38:1d:bb:74:51:af:0c:86:ac:98:9f:
         fc:35:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:35:01 2026 by rpki-client