Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa
File:                     3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa (raw, json)
Hash identifier:          RS7tfi3o095JbHQPkUHwqBytAEE+OUEX2yo1JuARYqg=
Subject key identifier:   00:BD:42:0D:DF:43:AA:90:BD:59:BC:0E:E8:12:2B:8A:32:40:C6:4F
Certificate issuer:       /CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
Certificate serial:       17203572F98EE9C03672EF3E30BD402850BBA639
Authority key identifier: F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa
Signing time:             Wed 29 Jul 2026 12:42:12 +0000
ROA not before:           Wed 29 Jul 2026 12:37:12 +0000
ROA not after:            Wed 28 Jul 2027 12:42:12 +0000
asID:                     266385
IP address blocks:        170.80.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 11:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:20:35:72:f9:8e:e9:c0:36:72:ef:3e:30:bd:40:28:50:bb:a6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
        Validity
            Not Before: Jul 29 12:37:12 2026 GMT
            Not After : Jul 28 12:42:12 2027 GMT
        Subject: CN=00BD420DDF43AA90BD59BC0EE8122B8A3240C64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:2d:b9:fc:53:90:18:8b:f2:d0:8a:59:9b:
                    41:97:b7:78:b6:9f:e6:9f:f3:9a:51:8f:74:e0:44:
                    8c:36:47:a4:2d:99:b4:1e:95:9f:0a:fe:da:53:48:
                    1f:da:4e:f0:96:db:c0:22:74:6b:db:dd:a3:57:25:
                    4d:1a:84:7e:e1:4a:1f:5b:ac:cb:cc:66:43:2c:1e:
                    da:0d:0c:52:aa:32:94:82:6d:81:2f:65:20:72:9c:
                    b6:39:6e:64:43:eb:e7:f9:75:64:62:c4:47:14:e4:
                    29:65:00:25:5f:39:ae:c7:95:76:8b:d4:6f:fe:2d:
                    3c:71:27:bb:6d:32:33:3b:74:31:ff:4b:a1:f8:cb:
                    24:d1:cf:f3:b4:06:02:83:b1:18:ea:e6:92:d4:34:
                    00:c1:e4:cb:d5:ce:ea:85:da:38:68:0d:29:3e:e1:
                    5e:7c:a6:0b:f6:51:e6:9e:48:07:0d:c6:8f:80:68:
                    a8:97:81:ac:40:72:b4:2e:0f:73:7a:c3:5a:f0:7e:
                    b0:cd:57:7f:0b:45:15:42:b7:e9:ab:3c:39:36:7c:
                    5c:1e:e0:e0:2b:5e:4f:3b:4f:31:3c:8e:2b:ff:43:
                    7f:62:01:a0:79:07:c8:6c:d9:27:38:08:39:c7:37:
                    ea:71:f5:e6:da:07:d6:18:6a:a5:77:1e:10:77:07:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BD:42:0D:DF:43:AA:90:BD:59:BC:0E:E8:12:2B:8A:32:40:C6:4F
            X509v3 Authority Key Identifier:
                keyid:F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:dd:e8:98:05:38:51:36:23:7d:1c:ea:a1:5a:43:d5:80:89:
         4c:11:8d:de:de:b4:3c:a0:98:72:b2:11:30:5e:50:cb:dc:58:
         97:29:e9:98:a2:aa:89:8c:36:79:d0:b8:9b:8f:17:fa:cd:8b:
         e9:a6:00:f6:83:5b:3f:cc:ee:41:b2:99:e2:36:ef:b5:d6:da:
         6f:0d:52:b1:9e:39:24:ff:05:c8:97:09:7b:83:1a:ee:33:be:
         78:4d:7a:68:1e:41:9f:07:48:c7:f5:bb:83:7e:7e:49:74:8d:
         b2:0e:01:e4:22:b1:e7:ea:31:2b:95:54:6a:74:04:cd:8c:08:
         d7:38:c5:e5:02:bb:0b:98:ba:16:63:3f:7e:e2:13:98:f2:f8:
         c7:49:aa:d4:8e:9b:bd:48:ae:bb:67:84:e9:e8:84:07:1e:58:
         f1:37:60:a3:c4:b2:19:07:84:c7:e6:41:05:2e:c7:e4:64:d1:
         2c:71:57:1e:a7:b6:c9:08:83:17:81:a0:00:80:77:6a:9d:f1:
         0d:cc:83:64:9a:2b:3f:d2:c4:c0:41:97:20:c8:78:0b:1f:01:
         c6:a6:0e:c5:51:a5:38:cc:44:2b:96:f2:28:58:eb:df:2f:68:
         eb:34:9f:c0:ae:d3:06:f3:5e:39:24:a3:8b:ce:b0:b0:7a:20:
         05:95:bc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:59:52 2026 by rpki-client