Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32332d3233203d3e20323636333630.roa
File:                     3137302e3233392e3235322e302f32332d3233203d3e20323636333630.roa (raw, json)
Hash identifier:          fEapGzgCFzOCL6qLTFHdALdoan0AgqZoKnJzI83Z2rI=
Subject key identifier:   65:AA:12:1C:09:51:2A:1B:A6:36:A7:D2:3E:29:EA:D8:BD:12:F5:EE
Certificate issuer:       /CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
Certificate serial:       1F0BECFAA7C19F5563389B59B103D8FE974A6E7A
Authority key identifier: D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32332d3233203d3e20323636333630.roa
Signing time:             Wed 08 Jul 2026 14:19:41 +0000
ROA not before:           Wed 08 Jul 2026 14:14:41 +0000
ROA not after:            Wed 07 Jul 2027 14:19:41 +0000
asID:                     266360
IP address blocks:        170.239.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0b:ec:fa:a7:c1:9f:55:63:38:9b:59:b1:03:d8:fe:97:4a:6e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
        Validity
            Not Before: Jul  8 14:14:41 2026 GMT
            Not After : Jul  7 14:19:41 2027 GMT
        Subject: CN=65AA121C09512A1BA636A7D23E29EAD8BD12F5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:a4:76:88:0e:c9:1e:80:8a:71:3e:37:4a:
                    bb:97:72:fd:fe:f3:85:f9:22:b2:83:ed:cc:c7:bf:
                    43:0b:eb:f1:35:7d:f0:e7:96:be:8a:a6:6c:e9:30:
                    10:6a:0b:c4:a5:a0:37:b0:5a:6b:f8:c1:d5:e6:fb:
                    bd:5a:43:31:c7:c9:39:b6:c8:50:94:30:fb:c7:d5:
                    86:3f:8e:6a:a5:46:00:3b:d0:2b:e7:33:6b:27:d6:
                    35:30:5c:0e:6d:0c:2b:f4:a6:d6:a9:78:d6:0f:3b:
                    a8:f4:f5:4b:e8:af:3a:8d:72:d4:ea:e7:c1:41:63:
                    7d:cb:0c:60:66:a7:3c:d9:7e:b5:f3:75:9c:68:c0:
                    cf:bc:6e:4f:2d:2d:46:90:74:97:90:3e:a7:f2:e2:
                    32:c8:e2:59:03:6f:39:a9:03:20:ac:50:9e:53:26:
                    0f:00:28:ca:70:75:71:03:98:9e:a4:9c:0e:94:93:
                    ab:51:0e:3a:f9:67:37:42:85:37:e5:e0:f2:d8:21:
                    a2:00:52:b1:c9:b4:5e:9a:de:f1:4a:57:6f:65:38:
                    44:8f:78:7e:35:a7:37:67:41:fc:7c:77:c5:c8:84:
                    83:9a:04:a2:1e:16:34:38:03:3c:e3:2f:7d:9b:1a:
                    8c:9b:47:cd:04:18:49:17:17:5e:bb:34:26:e4:17:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AA:12:1C:09:51:2A:1B:A6:36:A7:D2:3E:29:EA:D8:BD:12:F5:EE
            X509v3 Authority Key Identifier:
                keyid:D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32332d3233203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:6f:84:60:31:fb:7a:a3:80:0a:07:16:4d:73:38:20:a3:
         2f:d8:69:04:c7:1d:4a:68:4d:75:93:c9:1d:81:74:53:a4:62:
         93:1a:44:ca:73:41:04:71:54:ce:b5:93:ef:c6:91:e4:d6:2c:
         72:89:23:1e:84:87:35:64:00:58:b0:4a:38:e3:15:a9:fc:ca:
         b3:7e:36:f7:af:74:fb:23:4c:52:61:c2:f6:d9:27:b8:92:fa:
         01:85:ab:03:28:a1:5f:df:09:89:c1:5b:8c:6e:84:c9:a0:79:
         24:b9:d3:2a:c2:07:95:2c:4c:82:73:fa:c6:3c:bc:0e:b5:99:
         4e:f8:b3:ef:ec:00:95:72:6d:90:43:19:5c:f7:95:75:80:e2:
         ad:e1:40:d3:3f:7d:f2:89:1e:be:6a:41:0c:46:76:d5:90:3b:
         a1:04:ff:c7:b8:7c:d6:c2:ef:d9:94:64:eb:87:66:5b:89:91:
         ff:d9:0c:1b:4a:a5:87:f0:c0:bd:7d:6a:52:6a:72:8f:f3:f5:
         3e:7a:98:4c:6e:25:c1:8a:d7:ac:99:81:0b:9b:4d:a1:0f:03:
         5f:1e:30:6a:ba:58:58:82:25:0a:77:0c:bf:4d:42:79:bc:4b:
         b0:bf:0c:98:11:a4:31:47:0d:31:64:88:0d:3d:4a:67:31:a5:
         b0:1a:f0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:04:47 2026 by rpki-client