Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230352e302f32342d3234203d3e20323733353134.roa
File:                     3137302e38302e3230352e302f32342d3234203d3e20323733353134.roa (raw, json)
Hash identifier:          XdVopeOxY1auk/68t7n0CNrOMQbWQLHnNGxbF6jl470=
Subject key identifier:   88:26:3D:11:7A:66:77:02:54:56:09:53:5F:BE:DF:A0:81:F2:63:B9
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       66EF1F65B5B6DEFF12E0D3E36592166B6A5319D9
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230352e302f32342d3234203d3e20323733353134.roa
Signing time:             Mon 19 Jan 2026 15:21:31 +0000
ROA not before:           Mon 19 Jan 2026 15:16:31 +0000
ROA not after:            Mon 18 Jan 2027 15:21:31 +0000
asID:                     273514
IP address blocks:        170.80.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:1f:65:b5:b6:de:ff:12:e0:d3:e3:65:92:16:6b:6a:53:19:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Jan 19 15:16:31 2026 GMT
            Not After : Jan 18 15:21:31 2027 GMT
        Subject: CN=88263D117A667702545609535FBEDFA081F263B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:85:77:8a:a9:1c:17:7b:50:1a:4a:2e:e6:
                    49:a4:62:54:c9:70:4f:bb:d2:6c:fa:e1:c0:da:04:
                    78:20:fd:cb:dd:bd:21:be:eb:a4:bc:45:88:27:cc:
                    48:0c:1d:67:6f:2d:7e:75:8a:29:20:b9:d8:89:79:
                    34:33:33:61:57:03:f7:8b:3e:0a:e7:60:6c:89:9d:
                    f4:52:af:83:07:20:b9:24:ce:f8:f3:d7:68:d9:95:
                    c1:9d:c9:7a:ed:b1:e8:c2:55:3b:0e:fe:da:60:7e:
                    85:50:a3:bb:6b:50:e2:70:9c:12:cf:08:b7:e3:9c:
                    f2:46:4c:3e:0a:16:95:f0:75:35:de:44:38:04:79:
                    e2:29:f8:68:06:1d:46:d7:9c:a2:f0:86:ae:ce:6c:
                    a0:fd:45:2d:49:83:7d:11:03:4d:39:27:c8:e8:20:
                    d9:3c:21:8f:1b:08:7b:f1:b4:d3:21:2d:5c:9a:ff:
                    01:a2:51:36:2a:88:4f:51:36:9f:37:fd:90:8c:a2:
                    94:f5:2a:03:2e:63:4c:d1:3d:9d:de:10:3d:74:cc:
                    06:fb:5c:5f:be:46:4f:48:4a:91:5b:14:09:37:bc:
                    81:c9:4d:b9:82:27:5f:10:46:dc:a0:8c:a8:1c:a7:
                    b3:48:4f:04:06:1b:16:94:6b:93:dd:28:c4:24:bf:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:26:3D:11:7A:66:77:02:54:56:09:53:5F:BE:DF:A0:81:F2:63:B9
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230352e302f32342d3234203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c0:ad:75:82:56:73:33:21:77:59:ba:8b:d8:3a:cb:0e:17:
         05:19:94:cb:f3:c1:7e:50:2f:eb:ed:f3:ec:89:9c:9d:20:d1:
         0e:6a:8e:70:6f:ed:76:a4:7e:6b:59:96:aa:0c:d6:ab:4a:b3:
         19:aa:65:e2:b7:6b:79:88:15:03:ae:53:98:af:89:d7:ed:09:
         58:c0:15:66:e3:9e:23:5e:84:1c:b5:bd:d1:c5:3d:0e:7d:40:
         0a:72:a4:6b:08:03:ff:66:7f:83:21:7e:4d:c3:84:d0:62:a2:
         77:28:2a:dc:da:15:d9:51:43:8b:7c:9b:f1:84:86:45:c5:43:
         02:3b:d4:e8:b5:ba:28:1b:f2:b0:4c:d8:a1:a8:fc:0d:97:26:
         e4:0a:6f:48:55:bf:d8:6a:20:1b:c2:04:1a:92:6c:b2:96:33:
         0f:9c:26:72:83:ca:ed:e7:67:61:45:53:01:f5:8b:f2:54:98:
         98:7c:a6:e0:b2:bb:df:c2:69:9a:c7:ed:83:5c:8e:79:49:38:
         c3:52:d8:c9:18:90:6a:89:ad:a6:d9:a9:87:14:1b:22:b4:77:
         41:f1:de:13:07:f5:56:20:4c:6a:62:33:7c:ee:f7:d0:d6:bd:
         f9:ed:39:bd:17:66:16:bb:49:35:36:4d:1d:ea:6e:5a:81:50:
         84:d3:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:21:33 2026 by rpki-client