Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32342d3234203d3e20323733353134.roa
File:                     3137302e38302e3230342e302f32342d3234203d3e20323733353134.roa (raw, json)
Hash identifier:          YD3ndo+4o0y+aJCYMm8U+fCv06poouTxMkIIW6cwLiI=
Subject key identifier:   15:4E:67:59:24:C5:A1:9D:09:2B:1E:94:11:10:71:8E:43:10:D0:02
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       4FF74C7A49628A80B9D8EB55CA375F67C8F5118D
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32342d3234203d3e20323733353134.roa
Signing time:             Mon 19 Jan 2026 15:21:31 +0000
ROA not before:           Mon 19 Jan 2026 15:16:31 +0000
ROA not after:            Mon 18 Jan 2027 15:21:31 +0000
asID:                     273514
IP address blocks:        170.80.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f7:4c:7a:49:62:8a:80:b9:d8:eb:55:ca:37:5f:67:c8:f5:11:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Jan 19 15:16:31 2026 GMT
            Not After : Jan 18 15:21:31 2027 GMT
        Subject: CN=154E675924C5A19D092B1E941110718E4310D002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:2c:cb:09:a1:70:6f:62:e7:5b:03:8a:71:
                    c9:26:f2:e3:56:5a:4c:cf:fe:79:cd:b0:f9:2e:db:
                    87:3d:8b:47:a3:3b:08:3e:f8:53:fd:f8:fd:5d:13:
                    04:0c:a3:f9:12:d1:f2:be:2a:cb:07:d9:68:aa:e0:
                    d0:e2:80:44:4b:02:97:1e:44:9c:ae:66:f3:40:48:
                    2d:e0:9c:2d:88:4d:9b:33:80:9d:82:ce:b3:f7:42:
                    f5:96:a2:07:88:60:0e:01:fc:f0:fc:68:f8:a4:b0:
                    55:ff:9c:14:e7:30:fb:02:72:9e:5a:2c:9e:56:43:
                    44:c0:7b:fb:97:c7:18:7e:64:aa:77:2f:ce:b7:ad:
                    16:f3:35:44:2e:94:dd:f8:bd:92:47:94:ed:1b:e6:
                    0a:10:26:9d:bd:68:f7:21:4d:ff:bd:28:bf:f7:8d:
                    4e:34:f9:98:4b:5b:52:17:ea:d0:b5:05:9a:b1:86:
                    d3:e0:36:a6:0e:d4:92:c8:fe:15:7d:80:52:62:bb:
                    13:09:14:f6:38:d6:48:44:f7:6f:a3:6c:9c:d5:2d:
                    28:cb:16:c9:3b:cd:d3:17:78:f2:5f:4c:53:df:90:
                    d1:54:02:04:ed:3d:26:de:f4:74:3f:9f:81:fc:ba:
                    c5:d8:59:d2:d6:ec:1d:f8:38:df:68:f9:bd:5a:1d:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4E:67:59:24:C5:A1:9D:09:2B:1E:94:11:10:71:8E:43:10:D0:02
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32342d3234203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:6a:41:a3:48:85:00:43:75:2e:63:ad:e8:23:ab:6b:b7:
         2e:41:26:46:02:57:46:db:65:70:3c:8d:9e:b4:64:27:39:b9:
         b4:f5:07:6b:cd:48:7b:11:e6:d4:c7:3d:9b:f1:f1:95:48:55:
         88:51:41:a5:bf:27:21:a4:9a:41:c5:78:c3:b6:c0:cc:6c:0a:
         a6:63:04:fe:fd:51:36:5b:eb:3e:b9:6c:e4:7f:9e:f4:36:2c:
         20:48:c9:b8:c9:56:cb:da:47:61:fc:d5:25:a8:70:8e:f0:c6:
         d1:e3:c4:df:be:f4:1a:48:fe:56:90:55:5b:70:b1:e3:d2:e3:
         85:d8:f7:92:11:10:1f:2c:15:06:f7:92:64:77:36:56:72:0b:
         94:86:59:07:e5:a2:66:ab:55:4b:09:4a:30:4a:f4:dd:2e:fa:
         e9:37:86:a3:a7:b1:43:c5:5a:0e:04:26:12:64:3c:86:cd:99:
         c3:a2:9f:3b:43:50:36:da:43:3e:5b:0a:a2:05:21:96:7e:b4:
         6e:b9:05:fd:7d:b9:e9:ea:66:39:64:e4:06:68:0f:a6:84:70:
         78:12:9b:ad:3a:54:83:63:f1:53:26:52:76:7f:34:ba:5d:cd:
         3d:53:18:9a:a1:63:b2:70:c5:ae:db:dc:37:c5:e7:5e:5d:1c:
         23:cb:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:21:27 2026 by rpki-client